diff --git a/src/URLhaus.csv b/src/URLhaus.csv
index b44c92b6..c9332f12 100644
--- a/src/URLhaus.csv
+++ b/src/URLhaus.csv
@@ -1,16 +1,536 @@
+"354330","2020-04-30 00:04:12","http://115.53.63.184:53563/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354330/","Gandylyan1"
+"354329","2020-04-30 00:04:08","http://117.90.128.14:33586/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354329/","Gandylyan1"
+"354328","2020-04-30 00:04:04","http://221.160.177.226:4245/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354328/","Gandylyan1"
+"354327","2020-04-30 00:03:59","http://182.127.201.42:59585/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354327/","Gandylyan1"
+"354326","2020-04-30 00:03:56","http://123.10.229.210:52594/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354326/","Gandylyan1"
+"354325","2020-04-30 00:03:52","http://115.216.210.105:35318/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354325/","Gandylyan1"
+"354324","2020-04-30 00:03:40","http://115.59.118.51:34228/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354324/","Gandylyan1"
+"354323","2020-04-30 00:03:37","http://113.221.145.204:35210/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354323/","Gandylyan1"
+"354322","2020-04-30 00:03:30","http://42.227.202.209:45436/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354322/","Gandylyan1"
+"354321","2020-04-30 00:03:27","http://111.43.223.17:59334/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354321/","Gandylyan1"
+"354320","2020-04-30 00:03:23","http://116.114.95.50:44946/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354320/","Gandylyan1"
+"354319","2020-04-30 00:03:18","http://219.155.169.47:54267/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354319/","Gandylyan1"
+"354318","2020-04-30 00:03:13","http://219.155.173.125:52940/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354318/","Gandylyan1"
+"354317","2020-04-30 00:03:10","https://pastebin.com/raw/Amm2ja7E","online","malware_download","None","https://urlhaus.abuse.ch/url/354317/","JayTHL"
+"354316","2020-04-29 23:38:10","https://pastebin.com/raw/vg2uwUsX","offline","malware_download","None","https://urlhaus.abuse.ch/url/354316/","JayTHL"
+"354315","2020-04-29 23:38:06","https://pastebin.com/raw/qz5LLD00","offline","malware_download","None","https://urlhaus.abuse.ch/url/354315/","JayTHL"
+"354314","2020-04-29 23:38:03","https://pastebin.com/raw/earnR8r4","offline","malware_download","None","https://urlhaus.abuse.ch/url/354314/","JayTHL"
+"354313","2020-04-29 23:26:07","http://165.227.220.189/Demon.mips","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354313/","zbetcheckin"
+"354312","2020-04-29 23:26:05","http://165.227.220.189/Demon.x86","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354312/","zbetcheckin"
+"354311","2020-04-29 23:26:03","http://165.227.220.189/Demon.mpsl","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354311/","zbetcheckin"
+"354310","2020-04-29 23:25:24","http://165.227.220.189/Demon.ppc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354310/","zbetcheckin"
+"354309","2020-04-29 23:25:22","http://165.227.220.189/Demon.sparc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354309/","zbetcheckin"
+"354308","2020-04-29 23:25:20","http://165.227.220.189/bins.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/354308/","zbetcheckin"
+"354307","2020-04-29 23:25:18","http://165.227.220.189/Demon.sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354307/","zbetcheckin"
+"354306","2020-04-29 23:25:16","http://165.227.220.189/Demon.arm4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354306/","zbetcheckin"
+"354305","2020-04-29 23:25:13","http://104.175.99.243:30943/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/354305/","zbetcheckin"
+"354304","2020-04-29 23:25:09","http://206.189.208.7/shanksbins.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/354304/","zbetcheckin"
+"354303","2020-04-29 23:25:06","http://165.227.220.189/Demon.arm5","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354303/","zbetcheckin"
+"354302","2020-04-29 23:25:03","http://165.227.220.189/Demon.i686","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354302/","zbetcheckin"
+"354301","2020-04-29 23:21:11","http://165.227.220.189/Demon.i586","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354301/","zbetcheckin"
+"354300","2020-04-29 23:21:08","http://165.227.220.189/Demon.arm7","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354300/","zbetcheckin"
+"354299","2020-04-29 23:21:06","http://165.227.220.189/Demon.arm6","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354299/","zbetcheckin"
+"354298","2020-04-29 23:21:03","http://165.227.220.189/Demon.m68k","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/354298/","zbetcheckin"
+"354297","2020-04-29 22:36:03","https://pastebin.com/raw/2Cc1um47","offline","malware_download","None","https://urlhaus.abuse.ch/url/354297/","JayTHL"
+"354296","2020-04-29 22:24:08","https://pastebin.com/raw/Muz2mJiJ","offline","malware_download","None","https://urlhaus.abuse.ch/url/354296/","JayTHL"
+"354295","2020-04-29 22:24:05","https://pastebin.com/raw/kjRExq4r","offline","malware_download","None","https://urlhaus.abuse.ch/url/354295/","JayTHL"
+"354294","2020-04-29 22:24:03","https://pastebin.com/raw/aehmfKUZ","offline","malware_download","None","https://urlhaus.abuse.ch/url/354294/","JayTHL"
+"354293","2020-04-29 21:50:03","http://185.163.47.253/reaper/reap.arm","offline","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/354293/","Gandylyan1"
+"354292","2020-04-29 21:18:11","http://yc5.timeisletitgo.ru/847545066.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354292/","zbetcheckin"
+"354291","2020-04-29 21:18:08","http://t37b.iwakalong.ru/1858969909.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354291/","zbetcheckin"
+"354290","2020-04-29 21:18:05","https://1l04.timeisletitgo.ru/1646845324.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354290/","zbetcheckin"
+"354289","2020-04-29 21:14:26","http://a.seeanu.ru/908451710_2020-04-17_17-11.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354289/","zbetcheckin"
+"354288","2020-04-29 21:14:25","https://h1.iwakalong.ru/853715521.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354288/","zbetcheckin"
+"354287","2020-04-29 21:14:21","https://2xmy.timeisletitgo.ru/1003557504.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354287/","zbetcheckin"
+"354286","2020-04-29 21:14:16","https://seeanu.ru/824821802.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354286/","zbetcheckin"
+"354285","2020-04-29 21:14:13","https://a.seeanu.ru/123744179.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354285/","zbetcheckin"
+"354284","2020-04-29 21:10:14","http://privacytoolsstore.website/downloads/privacytools.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354284/","zbetcheckin"
+"354283","2020-04-29 21:10:07","https://3vc6.seeanu.ru/735960095.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354283/","zbetcheckin"
+"354282","2020-04-29 21:10:04","http://1l04.timeisletitgo.ru/1572104486.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354282/","zbetcheckin"
+"354281","2020-04-29 21:06:50","https://yc5.timeisletitgo.ru/1584248056.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/354281/","zbetcheckin"
+"354280","2020-04-29 21:06:41","http://so4.seeanu.ru/210308442.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354280/","zbetcheckin"
+"354279","2020-04-29 21:06:35","https://3q9h.timeisletitgo.ru/1504794669.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354279/","zbetcheckin"
+"354278","2020-04-29 21:06:09","http://a.seeanu.ru/262969619.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354278/","zbetcheckin"
+"354277","2020-04-29 21:06:04","https://zzv.seeanu.ru/377134425.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/354277/","zbetcheckin"
+"354276","2020-04-29 21:05:02","http://27.41.224.202:42504/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354276/","Gandylyan1"
+"354275","2020-04-29 21:04:58","http://176.113.161.45:34472/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354275/","Gandylyan1"
+"354274","2020-04-29 21:04:56","http://180.120.12.85:41514/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354274/","Gandylyan1"
+"354273","2020-04-29 21:04:52","http://36.108.228.213:33653/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354273/","Gandylyan1"
+"354272","2020-04-29 21:04:48","http://115.49.76.131:56305/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354272/","Gandylyan1"
+"354271","2020-04-29 21:04:44","http://111.43.223.77:42503/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354271/","Gandylyan1"
+"354270","2020-04-29 21:04:41","http://115.63.60.199:39367/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354270/","Gandylyan1"
+"354269","2020-04-29 21:04:37","http://199.83.205.205:47145/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354269/","Gandylyan1"
+"354268","2020-04-29 21:04:25","http://111.42.103.55:53196/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354268/","Gandylyan1"
+"354267","2020-04-29 21:04:22","http://182.126.213.171:50081/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354267/","Gandylyan1"
+"354266","2020-04-29 21:04:18","http://114.239.37.159:39279/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354266/","Gandylyan1"
+"354265","2020-04-29 21:04:14","http://42.227.186.34:41088/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354265/","Gandylyan1"
+"354264","2020-04-29 21:04:10","http://180.124.214.4:41864/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354264/","Gandylyan1"
+"354263","2020-04-29 21:04:05","http://182.121.152.74:59597/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354263/","Gandylyan1"
+"354262","2020-04-29 21:02:05","http://2xmy.timeisletitgo.ru/111034378.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354262/","zbetcheckin"
+"354261","2020-04-29 21:02:02","http://t37b.iwakalong.ru/1734942695.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354261/","zbetcheckin"
+"354260","2020-04-29 20:58:03","https://pastebin.com/raw/v72EGxKQ","offline","malware_download","None","https://urlhaus.abuse.ch/url/354260/","JayTHL"
+"354259","2020-04-29 20:21:33","https://pastebin.com/raw/xYfJ6BrB","offline","malware_download","None","https://urlhaus.abuse.ch/url/354259/","JayTHL"
+"354258","2020-04-29 20:11:29","http://51.89.119.154/SBIDIOT/zte","online","malware_download","None","https://urlhaus.abuse.ch/url/354258/","JayTHL"
+"354257","2020-04-29 20:11:27","http://51.89.119.154/SBIDIOT/yarn","online","malware_download","None","https://urlhaus.abuse.ch/url/354257/","JayTHL"
+"354256","2020-04-29 20:11:25","http://51.89.119.154/SBIDIOT/x86","online","malware_download","None","https://urlhaus.abuse.ch/url/354256/","JayTHL"
+"354255","2020-04-29 20:11:23","http://51.89.119.154/SBIDIOT/spc","online","malware_download","None","https://urlhaus.abuse.ch/url/354255/","JayTHL"
+"354254","2020-04-29 20:11:21","http://51.89.119.154/SBIDIOT/sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/354254/","JayTHL"
+"354253","2020-04-29 20:11:19","http://51.89.119.154/SBIDIOT/rtk","online","malware_download","None","https://urlhaus.abuse.ch/url/354253/","JayTHL"
+"354252","2020-04-29 20:11:17","http://51.89.119.154/SBIDIOT/root","online","malware_download","None","https://urlhaus.abuse.ch/url/354252/","JayTHL"
+"354251","2020-04-29 20:11:15","http://51.89.119.154/SBIDIOT/ppc","online","malware_download","None","https://urlhaus.abuse.ch/url/354251/","JayTHL"
+"354250","2020-04-29 20:11:13","http://51.89.119.154/SBIDIOT/mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/354250/","JayTHL"
+"354249","2020-04-29 20:11:11","http://51.89.119.154/SBIDIOT/mips","online","malware_download","None","https://urlhaus.abuse.ch/url/354249/","JayTHL"
+"354248","2020-04-29 20:11:09","http://51.89.119.154/SBIDIOT/m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/354248/","JayTHL"
+"354247","2020-04-29 20:11:07","http://51.89.119.154/SBIDIOT/arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/354247/","JayTHL"
+"354246","2020-04-29 20:11:04","http://51.89.119.154/SBIDIOT/arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/354246/","JayTHL"
+"354245","2020-04-29 20:11:03","http://51.89.119.154/SBIDIOT/arm","online","malware_download","None","https://urlhaus.abuse.ch/url/354245/","JayTHL"
+"354244","2020-04-29 20:08:10","https://pastebin.com/raw/qhC2b0uA","offline","malware_download","None","https://urlhaus.abuse.ch/url/354244/","JayTHL"
+"354243","2020-04-29 19:45:11","https://bluecollarfinancial.net/gfmixt/Buy-Sell_Agreement_05487_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354243/","spamhaus"
+"354242","2020-04-29 19:45:06","http://britica.vn/dqsfv/Buy-Sell_Agreement_6587_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354242/","spamhaus"
+"354241","2020-04-29 19:38:05","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_520906_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354241/","spamhaus"
+"354240","2020-04-29 19:33:20","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_4975254_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354240/","spamhaus"
+"354239","2020-04-29 19:33:15","https://kamagra.in.rs/bqcbhf/52891506/Buy-Sell_Agreement_52891506_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354239/","spamhaus"
+"354238","2020-04-29 19:33:04","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/277263/Buy-Sell_Agreement_277263_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354238/","spamhaus"
+"354237","2020-04-29 19:29:26","https://aelogica.com/zznohyxa/11288831/Buy-Sell_Agreement_11288831_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354237/","spamhaus"
+"354236","2020-04-29 19:29:22","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_182728_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354236/","spamhaus"
+"354235","2020-04-29 19:29:19","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/43126858/Buy-Sell_Agreement_43126858_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354235/","spamhaus"
+"354234","2020-04-29 19:29:17","http://200.233.206.164:29712/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354234/","geenensp"
+"354233","2020-04-29 19:29:13","http://sunboom-gift.com/zwbaxf/25932/Buy-Sell_Agreement_25932_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354233/","spamhaus"
+"354232","2020-04-29 19:29:10","http://www.mononet.lv/wp-admin/user/INV-11032088.jar","online","malware_download","jar","https://urlhaus.abuse.ch/url/354232/","spamhaus"
+"354231","2020-04-29 19:29:06","http://promassager.ga/yltkoe/Buy-Sell_Agreement_37585_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354231/","spamhaus"
+"354230","2020-04-29 19:29:03","http://promassager.ga/yltkoe/309140/Buy-Sell_Agreement_309140_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354230/","spamhaus"
+"354229","2020-04-29 19:18:07","http://37.49.226.209/bins/dvrbot.arm7","online","malware_download","elf","https://urlhaus.abuse.ch/url/354229/","zbetcheckin"
+"354228","2020-04-29 19:18:05","http://37.49.226.209/bins/dvrbot.mpsl","online","malware_download","elf","https://urlhaus.abuse.ch/url/354228/","zbetcheckin"
+"354227","2020-04-29 19:18:03","http://37.49.226.209/bins/dvrbot.ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/354227/","zbetcheckin"
+"354226","2020-04-29 19:14:05","http://37.49.226.209/bins/dvrbot.arm6","online","malware_download","elf","https://urlhaus.abuse.ch/url/354226/","zbetcheckin"
+"354225","2020-04-29 19:14:03","http://37.49.226.209/bins/dvrbot.arm","online","malware_download","elf","https://urlhaus.abuse.ch/url/354225/","zbetcheckin"
+"354224","2020-04-29 19:09:06","http://37.49.226.209/bins/dvrbot.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/354224/","zbetcheckin"
+"354223","2020-04-29 19:09:04","http://37.49.226.209/bins/dvrbot.spc","online","malware_download","elf","https://urlhaus.abuse.ch/url/354223/","zbetcheckin"
+"354222","2020-04-29 19:09:02","http://37.49.226.209/bins/dvrbot.sh4","online","malware_download","elf","https://urlhaus.abuse.ch/url/354222/","zbetcheckin"
+"354221","2020-04-29 19:07:11","https://pastebin.com/raw/ZtsLYu3S","offline","malware_download","None","https://urlhaus.abuse.ch/url/354221/","JayTHL"
+"354220","2020-04-29 19:07:06","https://pastebin.com/raw/XzkRsmeg","offline","malware_download","None","https://urlhaus.abuse.ch/url/354220/","JayTHL"
+"354219","2020-04-29 19:05:06","http://37.49.226.209/bins/dvrbot.m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/354219/","zbetcheckin"
+"354218","2020-04-29 19:05:04","http://37.49.226.209/bins/dvrbot.arm5","online","malware_download","elf","https://urlhaus.abuse.ch/url/354218/","zbetcheckin"
+"354217","2020-04-29 18:54:04","https://pastebin.com/raw/bAwYmSxY","offline","malware_download","None","https://urlhaus.abuse.ch/url/354217/","JayTHL"
+"354216","2020-04-29 18:42:05","http://simpl.pw/unknown/launcher/UnknownLauncher.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354216/","zbetcheckin"
+"354215","2020-04-29 18:37:15","http://oralloy.com/xyqkbu/1564384/Buy-Sell_Agreement_1564384_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354215/","spamhaus"
+"354214","2020-04-29 18:37:13","http://oralloy.com/xyqkbu/16120/Buy-Sell_Agreement_16120_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354214/","spamhaus"
+"354213","2020-04-29 18:36:04","http://dev.apshaps.se/sdub/3655876/Buy-Sell_Agreement_3655876_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354213/","spamhaus"
+"354212","2020-04-29 18:28:03","https://vip.recommendedtoyoo.com/bdhycmsxctp/2017982/Buy-Sell_Agreement_2017982_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354212/","spamhaus"
+"354211","2020-04-29 18:27:20","http://silverstargalaxy.com.silverstartv.website/cmea/59975/Buy-Sell_Agreement_59975_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354211/","spamhaus"
+"354210","2020-04-29 18:27:12","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/65281/Buy-Sell_Agreement_65281_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354210/","spamhaus"
+"354209","2020-04-29 18:27:09","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/2423/Buy-Sell_Agreement_2423_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354209/","spamhaus"
+"354208","2020-04-29 18:27:05","http://morruko.antesos.com/fqtylehpb/5609732/Buy-Sell_Agreement_5609732_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354208/","spamhaus"
+"354207","2020-04-29 18:26:12","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_55778_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354207/","spamhaus"
+"354206","2020-04-29 18:26:07","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_19540301_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354206/","spamhaus"
+"354205","2020-04-29 18:26:05","https://kamagra.in.rs/bqcbhf/Buy-Sell_Agreement_30255_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354205/","spamhaus"
+"354204","2020-04-29 18:23:14","http://104.244.79.235/ap/ad.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354204/","zbetcheckin"
+"354203","2020-04-29 18:23:04","http://104.244.79.235/ap/ad.i686","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354203/","zbetcheckin"
+"354202","2020-04-29 18:23:02","http://104.244.79.235/ap/ad.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354202/","zbetcheckin"
+"354201","2020-04-29 18:19:04","http://104.244.79.235/ap/ad.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354201/","zbetcheckin"
+"354200","2020-04-29 18:16:05","https://saglikgoalapp.site/files/covvidapp.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/354200/","JayTHL"
+"354199","2020-04-29 18:15:15","http://104.244.79.235/ap/ad.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354199/","zbetcheckin"
+"354198","2020-04-29 18:15:13","http://104.244.79.235/ap/ad.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/354198/","zbetcheckin"
+"354197","2020-04-29 18:15:11","http://104.244.79.235/ap/ad.arm4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354197/","zbetcheckin"
+"354196","2020-04-29 18:15:09","http://104.244.79.235/ap/ad.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354196/","zbetcheckin"
+"354195","2020-04-29 18:15:07","http://104.244.79.235/ap/ad.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354195/","zbetcheckin"
+"354194","2020-04-29 18:15:05","http://104.244.79.235/ap/ad.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354194/","zbetcheckin"
+"354193","2020-04-29 18:15:03","http://104.244.79.235/ap/ad.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/354193/","zbetcheckin"
+"354192","2020-04-29 18:14:33","http://185.212.129.54/rksn.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/354192/","vxvault"
+"354191","2020-04-29 18:06:03","http://10022020newfolder1002002231-service1002.space/reestr.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/354191/","vxvault"
+"354190","2020-04-29 18:05:03","http://115.49.77.55:52853/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354190/","Gandylyan1"
+"354189","2020-04-29 18:04:59","http://14.113.229.49:36810/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354189/","Gandylyan1"
+"354188","2020-04-29 18:04:55","http://123.96.134.180:58672/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354188/","Gandylyan1"
+"354187","2020-04-29 18:04:43","http://61.52.144.240:48330/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354187/","Gandylyan1"
+"354186","2020-04-29 18:04:39","http://114.235.202.95:53247/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354186/","Gandylyan1"
+"354185","2020-04-29 18:04:34","http://42.239.132.107:56562/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354185/","Gandylyan1"
+"354184","2020-04-29 18:04:31","http://59.55.253.105:43952/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354184/","Gandylyan1"
+"354183","2020-04-29 18:04:25","http://111.42.66.8:53180/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354183/","Gandylyan1"
+"354182","2020-04-29 18:04:23","http://42.234.86.212:33472/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354182/","Gandylyan1"
+"354181","2020-04-29 18:04:19","http://211.137.225.101:41499/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354181/","Gandylyan1"
+"354180","2020-04-29 18:04:13","http://124.67.89.74:49591/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354180/","Gandylyan1"
+"354179","2020-04-29 18:04:12","http://211.137.225.77:59159/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354179/","Gandylyan1"
+"354178","2020-04-29 18:04:04","http://115.61.2.125:45051/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354178/","Gandylyan1"
+"354177","2020-04-29 18:01:39","http://staging.popclusive.asia/okppdsnq/Buy-Sell_Agreement_5038_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354177/","spamhaus"
+"354176","2020-04-29 18:01:35","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_25166746_04282020.zip","offline","malware_download","geofenced,zip","https://urlhaus.abuse.ch/url/354176/","anonymous"
+"354175","2020-04-29 18:01:32","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_86169_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354175/","spamhaus"
+"354174","2020-04-29 17:53:50","http://oskarnews.gazashare.com/pelsq/3939567/Buy-Sell_Agreement_3939567_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354174/","spamhaus"
+"354173","2020-04-29 17:53:15","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/5699246/Buy-Sell_Agreement_5699246_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354173/","spamhaus"
+"354172","2020-04-29 17:52:40","https://kamagra.in.rs/bqcbhf/6078657/Buy-Sell_Agreement_6078657_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354172/","spamhaus"
+"354171","2020-04-29 17:52:05","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_04275750_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354171/","spamhaus"
+"354170","2020-04-29 17:51:33","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_3442_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354170/","spamhaus"
+"354169","2020-04-29 17:40:31","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_5506_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354169/","spamhaus"
+"354168","2020-04-29 17:40:12","http://10022020newfolder1002002231-service1002.space/raccon.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/354168/","vxvault"
+"354167","2020-04-29 17:40:05","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_6726834_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354167/","spamhaus"
+"354166","2020-04-29 17:39:07","http://oz.timeisletitgo.ru/520257778.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/354166/","vxvault"
+"354165","2020-04-29 17:39:05","http://Muanha.xyz/cfewahhzze/0471/Buy-Sell_Agreement_0471_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354165/","spamhaus"
+"354164","2020-04-29 17:38:58","http://37.49.226.209/bins/dvrbot.x86","online","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/354164/","geenensp"
+"354163","2020-04-29 17:38:56","http://Muanha.xyz/cfewahhzze/35555/Buy-Sell_Agreement_35555_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354163/","spamhaus"
+"354162","2020-04-29 17:38:40","http://www.cheriyilbuilders.com/herevryxugc/385904/Buy-Sell_Agreement_385904_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354162/","spamhaus"
+"354161","2020-04-29 17:38:37","https://rangebroadcasting.com/vfbc/810366/Buy-Sell_Agreement_810366_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354161/","spamhaus"
+"354160","2020-04-29 17:38:33","https://kamagra.in.rs/bqcbhf/Buy-Sell_Agreement_4147_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354160/","spamhaus"
+"354159","2020-04-29 17:38:22","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_49553_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354159/","spamhaus"
+"354158","2020-04-29 17:38:15","http://Muanha.xyz/cfewahhzze/58145827/Buy-Sell_Agreement_58145827_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354158/","spamhaus"
+"354157","2020-04-29 17:38:05","http://silverstargalaxy.com.silverstartv.website/cmea/Buy-Sell_Agreement_78764087_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354157/","spamhaus"
+"354156","2020-04-29 17:36:07","https://paste.ee/r/JeFGE","offline","malware_download","AgentTesla,Encoded","https://urlhaus.abuse.ch/url/354156/","abuse_ch"
+"354155","2020-04-29 17:31:37","https://pastebin.com/raw/inw8g5S4","offline","malware_download","None","https://urlhaus.abuse.ch/url/354155/","JayTHL"
+"354154","2020-04-29 17:31:21","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_190951_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354154/","spamhaus"
+"354153","2020-04-29 17:30:47","http://alexandredekerchove.com/ylwhbcphyy/31131/Buy-Sell_Agreement_31131_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354153/","spamhaus"
+"354152","2020-04-29 17:30:15","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_93312692_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354152/","spamhaus"
+"354151","2020-04-29 17:29:42","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_0164_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354151/","spamhaus"
+"354150","2020-04-29 17:29:08","https://kamagra.in.rs/bqcbhf/Buy-Sell_Agreement_1529275_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354150/","spamhaus"
+"354149","2020-04-29 17:28:34","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_99863546_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354149/","spamhaus"
+"354148","2020-04-29 17:25:34","https://pastebin.com/raw/PfYbwYfs","offline","malware_download","PowerShellEmpire","https://urlhaus.abuse.ch/url/354148/","viql"
+"354147","2020-04-29 17:18:29","https://cryptoomarket.com/fhws/65989452/Buy-Sell_Agreement_65989452_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354147/","spamhaus"
+"354146","2020-04-29 17:18:21","http://oskarnews.gazashare.com/pelsq/54479416/Buy-Sell_Agreement_54479416_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354146/","spamhaus"
+"354145","2020-04-29 17:18:11","http://sunboom-gift.com/zwbaxf/Buy-Sell_Agreement_855948_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354145/","spamhaus"
+"354144","2020-04-29 17:18:05","https://cryptoomarket.com/fhws/7289616/Buy-Sell_Agreement_7289616_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354144/","spamhaus"
+"354143","2020-04-29 17:17:54","http://cheriyilbuilders.com/ixwqumcq/238380/Buy-Sell_Agreement_238380_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354143/","spamhaus"
+"354142","2020-04-29 17:17:42","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_7507_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354142/","spamhaus"
+"354141","2020-04-29 17:17:35","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_54933_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354141/","spamhaus"
+"354140","2020-04-29 17:17:24","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_0761_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354140/","spamhaus"
+"354139","2020-04-29 17:17:14","http://www.cheriyilbuilders.com/herevryxugc/Buy-Sell_Agreement_203749_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354139/","spamhaus"
+"354138","2020-04-29 17:15:08","https://pastebin.com/raw/yjQwfwLu","offline","malware_download","None","https://urlhaus.abuse.ch/url/354138/","JayTHL"
+"354137","2020-04-29 17:15:03","https://pastebin.com/raw/Tps40B96","offline","malware_download","None","https://urlhaus.abuse.ch/url/354137/","JayTHL"
+"354136","2020-04-29 17:08:00","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_62115_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354136/","spamhaus"
+"354135","2020-04-29 17:07:51","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_8464289_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354135/","spamhaus"
+"354134","2020-04-29 17:07:48","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/389730/Buy-Sell_Agreement_389730_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354134/","spamhaus"
+"354133","2020-04-29 17:07:47","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_339039_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354133/","spamhaus"
+"354132","2020-04-29 17:07:44","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_26691471_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354132/","spamhaus"
+"354131","2020-04-29 17:07:41","http://NCERTSOLUTIONACADEMY.COM/yghks/Buy-Sell_Agreement_391544_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354131/","spamhaus"
+"354130","2020-04-29 17:07:39","http://sunboom-gift.com/zwbaxf/7360/Buy-Sell_Agreement_7360_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354130/","spamhaus"
+"354129","2020-04-29 17:07:34","http://cheriyilbuilders.com/ixwqumcq/Buy-Sell_Agreement_54247895_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354129/","spamhaus"
+"354128","2020-04-29 17:07:24","http://oskarnews.gazashare.com/pelsq/21205/Buy-Sell_Agreement_21205_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354128/","spamhaus"
+"354127","2020-04-29 17:07:19","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/Buy-Sell_Agreement_8325_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354127/","spamhaus"
+"354126","2020-04-29 17:07:15","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_8606_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354126/","spamhaus"
+"354125","2020-04-29 17:07:10","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_32854692_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354125/","spamhaus"
+"354124","2020-04-29 17:07:05","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_56786568_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354124/","spamhaus"
+"354123","2020-04-29 17:06:14","https://drive.google.com/uc?export=download&id=1Q2PX2OM5w6WFMrF_5lIhxBuqpcaxfjtr","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/354123/","lovemalware"
+"354122","2020-04-29 17:06:04","https://onedrive.live.com/download?cid=3112E77688F09693&resid=3112E77688F09693%21320&authkey=AOOUjzuf408Dclw","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/354122/","lovemalware"
+"354121","2020-04-29 17:02:26","http://2.56.240.32/bins/Hilix.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/354121/","JayTHL"
+"354120","2020-04-29 17:02:24","http://2.56.240.32/bins/Hilix.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/354120/","JayTHL"
+"354119","2020-04-29 17:02:21","http://2.56.240.32/bins/Hilix.sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/354119/","JayTHL"
+"354118","2020-04-29 17:02:19","http://2.56.240.32/bins/Hilix.mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/354118/","JayTHL"
+"354117","2020-04-29 17:02:16","http://2.56.240.32/bins/Hilix.mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/354117/","JayTHL"
+"354116","2020-04-29 17:02:14","http://2.56.240.32/bins/Hilix.m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/354116/","JayTHL"
+"354115","2020-04-29 17:02:12","http://2.56.240.32/bins/Hilix.arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/354115/","JayTHL"
+"354114","2020-04-29 17:02:09","http://2.56.240.32/bins/Hilix.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/354114/","JayTHL"
+"354113","2020-04-29 17:02:07","http://2.56.240.32/bins/Hilix.arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/354113/","JayTHL"
+"354112","2020-04-29 17:02:04","http://2.56.240.32/bins/Hilix.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/354112/","JayTHL"
+"354111","2020-04-29 16:50:11","https://pastebin.com/raw/nm89TzC3","offline","malware_download","None","https://urlhaus.abuse.ch/url/354111/","JayTHL"
+"354110","2020-04-29 16:47:18","https://kamagra.in.rs/bqcbhf/Buy-Sell_Agreement_0974947_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354110/","spamhaus"
+"354109","2020-04-29 16:47:15","http://cheriyilbuilders.com/ixwqumcq/Buy-Sell_Agreement_660298_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354109/","spamhaus"
+"354108","2020-04-29 16:47:11","http://cheriyilbuilders.com/ixwqumcq/Buy-Sell_Agreement_07288_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354108/","spamhaus"
+"354107","2020-04-29 16:47:08","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/4546012/Buy-Sell_Agreement_4546012_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354107/","spamhaus"
+"354106","2020-04-29 16:47:06","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/4852/Buy-Sell_Agreement_4852_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354106/","spamhaus"
+"354105","2020-04-29 16:39:14","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_5945315_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354105/","spamhaus"
+"354104","2020-04-29 16:39:05","http://dzapasigroup.usapglobal.org/pbnxnmc/48527452/Buy-Sell_Agreement_48527452_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354104/","spamhaus"
+"354103","2020-04-29 16:33:35","http://britica.vn/dqsfv/1457750/Buy-Sell_Agreement_1457750_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354103/","spamhaus"
+"354102","2020-04-29 16:33:27","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_2316516_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354102/","spamhaus"
+"354101","2020-04-29 16:33:24","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_01796037_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354101/","spamhaus"
+"354100","2020-04-29 16:33:19","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_6246_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354100/","spamhaus"
+"354099","2020-04-29 16:33:14","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_6877_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354099/","spamhaus"
+"354098","2020-04-29 16:33:10","https://rangebroadcasting.com/vfbc/0127/Buy-Sell_Agreement_0127_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354098/","spamhaus"
+"354097","2020-04-29 16:33:05","https://vip.recommendedtoyoo.com/bdhycmsxctp/73579/Buy-Sell_Agreement_73579_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354097/","spamhaus"
+"354096","2020-04-29 16:32:02","http://www.cheriyilbuilders.com/herevryxugc/Buy-Sell_Agreement_39432145_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354096/","spamhaus"
+"354095","2020-04-29 16:31:58","http://81.196.213.134:6632/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/354095/","geenensp"
+"354094","2020-04-29 16:31:51","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_7898_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354094/","spamhaus"
+"354093","2020-04-29 16:31:38","http://promassager.ga/yltkoe/Buy-Sell_Agreement_15357996_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354093/","spamhaus"
+"354092","2020-04-29 16:31:35","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_706729_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354092/","spamhaus"
+"354091","2020-04-29 16:31:31","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/5241/Buy-Sell_Agreement_5241_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354091/","spamhaus"
+"354090","2020-04-29 16:31:29","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_89308_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354090/","spamhaus"
+"354089","2020-04-29 16:31:14","http://bolescy.com/otue/Buy-Sell_Agreement_9693732_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354089/","spamhaus"
+"354088","2020-04-29 16:30:41","http://dzapasigroup.usapglobal.org/pbnxnmc/3543/Buy-Sell_Agreement_3543_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354088/","spamhaus"
+"354087","2020-04-29 16:30:07","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/62008/Buy-Sell_Agreement_62008_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354087/","spamhaus"
+"354086","2020-04-29 16:29:05","http://promassager.ga/yltkoe/109475/Buy-Sell_Agreement_109475_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354086/","spamhaus"
+"354085","2020-04-29 16:28:32","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_4478060_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354085/","spamhaus"
+"354084","2020-04-29 16:27:57","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/899516/Buy-Sell_Agreement_899516_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354084/","spamhaus"
+"354083","2020-04-29 16:27:25","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_874829_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354083/","spamhaus"
+"354082","2020-04-29 16:26:51","http://promassager.ga/yltkoe/65758864/Buy-Sell_Agreement_65758864_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354082/","spamhaus"
+"354081","2020-04-29 16:25:47","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_3493806_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354081/","spamhaus"
+"354080","2020-04-29 16:25:12","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/Buy-Sell_Agreement_19864_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354080/","spamhaus"
+"354079","2020-04-29 16:25:11","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_23494_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354079/","spamhaus"
+"354078","2020-04-29 16:24:38","http://silverstargalaxy.com.silverstartv.website/cmea/94603139/Buy-Sell_Agreement_94603139_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354078/","spamhaus"
+"354077","2020-04-29 16:22:37","https://mylocalfoodie.com.au/wp-content/smiles/smileycrypt.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/354077/","zbetcheckin"
+"354076","2020-04-29 15:54:09","http://bolescy.com/otue/24384257/Buy-Sell_Agreement_24384257_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354076/","spamhaus"
+"354075","2020-04-29 15:53:35","http://oralloy.com/xyqkbu/61120196/Buy-Sell_Agreement_61120196_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354075/","spamhaus"
+"354074","2020-04-29 15:53:02","http://104.244.79.235/xb.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/354074/","geenensp"
+"354073","2020-04-29 15:52:10","http://bolescy.com/otue/Buy-Sell_Agreement_50990_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354073/","spamhaus"
+"354072","2020-04-29 15:51:37","http://104.244.79.235/ap/ad.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/354072/","geenensp"
+"354071","2020-04-29 15:51:35","http://dzapasigroup.usapglobal.org/pbnxnmc/699164/Buy-Sell_Agreement_699164_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354071/","spamhaus"
+"354070","2020-04-29 15:49:03","https://pastebin.com/raw/srdmMBmH","offline","malware_download","None","https://urlhaus.abuse.ch/url/354070/","JayTHL"
+"354069","2020-04-29 15:46:18","https://pastebin.com/raw/2QygLNc6","offline","malware_download","PowerShellEmpire","https://urlhaus.abuse.ch/url/354069/","viql"
+"354068","2020-04-29 15:46:13","https://vip.recommendedtoyoo.com/bdhycmsxctp/9086/Buy-Sell_Agreement_9086_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354068/","spamhaus"
+"354067","2020-04-29 15:45:43","http://Muanha.xyz/cfewahhzze/477754/Buy-Sell_Agreement_477754_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354067/","spamhaus"
+"354066","2020-04-29 15:45:16","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/781385/Buy-Sell_Agreement_781385_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354066/","spamhaus"
+"354065","2020-04-29 15:45:14","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_08808_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354065/","spamhaus"
+"354064","2020-04-29 15:42:10","https://vip.recommendedtoyoo.com/bdhycmsxctp/86207/Buy-Sell_Agreement_86207_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354064/","spamhaus"
+"354063","2020-04-29 15:41:34","http://silverstargalaxy.com.silverstartv.website/cmea/849715/Buy-Sell_Agreement_849715_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354063/","spamhaus"
+"354062","2020-04-29 15:41:30","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_038711_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354062/","spamhaus"
+"354061","2020-04-29 15:41:21","http://sunboom-gift.com/zwbaxf/Buy-Sell_Agreement_2743_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354061/","spamhaus"
+"354060","2020-04-29 15:41:15","https://vip.recommendedtoyoo.com/bdhycmsxctp/52854184/Buy-Sell_Agreement_52854184_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354060/","spamhaus"
+"354059","2020-04-29 15:40:10","http://morruko.antesos.com/fqtylehpb/25242/Buy-Sell_Agreement_25242_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354059/","spamhaus"
+"354058","2020-04-29 15:40:05","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/41357844/Buy-Sell_Agreement_41357844_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354058/","spamhaus"
+"354057","2020-04-29 15:39:59","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/77655/Buy-Sell_Agreement_77655_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354057/","spamhaus"
+"354056","2020-04-29 15:39:56","http://bolescy.com/otue/108897/Buy-Sell_Agreement_108897_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354056/","spamhaus"
+"354055","2020-04-29 15:39:53","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_5514688_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354055/","spamhaus"
+"354054","2020-04-29 15:39:49","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/4194555/Buy-Sell_Agreement_4194555_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354054/","spamhaus"
+"354053","2020-04-29 15:39:43","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_9764_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354053/","spamhaus"
+"354052","2020-04-29 15:39:29","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_346856_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354052/","spamhaus"
+"354051","2020-04-29 15:39:27","http://ade.topepics.com/pkthdrgdb/4779/Buy-Sell_Agreement_4779_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354051/","spamhaus"
+"354050","2020-04-29 15:39:09","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_3880170_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354050/","spamhaus"
+"354049","2020-04-29 15:39:04","https://kamagra.in.rs/bqcbhf/Buy-Sell_Agreement_85540671_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354049/","spamhaus"
+"354048","2020-04-29 15:35:07","http://187.63.19.112:14930/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/354048/","zbetcheckin"
+"354047","2020-04-29 15:23:18","http://promassager.ga/yltkoe/Buy-Sell_Agreement_6338_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354047/","spamhaus"
+"354046","2020-04-29 15:23:15","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_2699724_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354046/","spamhaus"
+"354045","2020-04-29 15:23:12","https://bluecollarfinancial.net/gfmixt/65655/Buy-Sell_Agreement_65655_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354045/","spamhaus"
+"354044","2020-04-29 15:23:07","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_81231200_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354044/","spamhaus"
+"354043","2020-04-29 15:23:03","http://sunboom-gift.com/zwbaxf/Buy-Sell_Agreement_879481_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354043/","spamhaus"
+"354042","2020-04-29 15:22:55","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_48424_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354042/","spamhaus"
+"354041","2020-04-29 15:22:52","http://oskarnews.gazashare.com/pelsq/00582/Buy-Sell_Agreement_00582_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354041/","spamhaus"
+"354040","2020-04-29 15:22:47","https://bluecollarfinancial.net/gfmixt/Buy-Sell_Agreement_0010_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354040/","spamhaus"
+"354039","2020-04-29 15:22:43","http://dzapasigroup.usapglobal.org/pbnxnmc/3054/Buy-Sell_Agreement_3054_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354039/","spamhaus"
+"354038","2020-04-29 15:22:40","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_647741_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354038/","spamhaus"
+"354037","2020-04-29 15:22:37","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_4191_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354037/","spamhaus"
+"354036","2020-04-29 15:22:29","http://virustreatments.empeeevents.com/eyyudu/6941/Buy-Sell_Agreement_6941_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354036/","spamhaus"
+"354035","2020-04-29 15:22:24","http://jessymart.flexyhub.com/ssuzzix/8889210/Buy-Sell_Agreement_8889210_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354035/","spamhaus"
+"354034","2020-04-29 15:22:20","http://www.cheriyilbuilders.com/herevryxugc/Buy-Sell_Agreement_80209884_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354034/","spamhaus"
+"354033","2020-04-29 15:22:16","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_6091790_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354033/","spamhaus"
+"354032","2020-04-29 15:22:13","http://promassager.ga/yltkoe/Buy-Sell_Agreement_207769_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354032/","spamhaus"
+"354031","2020-04-29 15:22:10","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/19041295/Buy-Sell_Agreement_19041295_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354031/","spamhaus"
+"354030","2020-04-29 15:22:08","https://kamagra.in.rs/bqcbhf/Buy-Sell_Agreement_8082_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354030/","spamhaus"
+"354029","2020-04-29 15:22:03","http://jessymart.flexyhub.com/ssuzzix/0314864/Buy-Sell_Agreement_0314864_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354029/","spamhaus"
+"354028","2020-04-29 15:21:15","http://NCERTSOLUTIONACADEMY.COM/yghks/Buy-Sell_Agreement_329681_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354028/","spamhaus"
+"354027","2020-04-29 15:21:13","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/Buy-Sell_Agreement_4038071_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354027/","spamhaus"
+"354026","2020-04-29 15:21:10","http://dzapasigroup.usapglobal.org/pbnxnmc/80499641/Buy-Sell_Agreement_80499641_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354026/","spamhaus"
+"354025","2020-04-29 15:17:04","http://104.168.198.194/mipsel","online","malware_download","DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/354025/","Gandylyan1"
+"354024","2020-04-29 15:15:06","https://taxukrebates.com/","offline","malware_download","phishing","https://urlhaus.abuse.ch/url/354024/","anonymous"
+"354023","2020-04-29 15:08:07","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_1571_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354023/","spamhaus"
+"354022","2020-04-29 15:07:35","http://alexandredekerchove.com/ylwhbcphyy/71191/Buy-Sell_Agreement_71191_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354022/","spamhaus"
+"354021","2020-04-29 15:07:33","http://silverstargalaxy.com.silverstartv.website/cmea/2003/Buy-Sell_Agreement_2003_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354021/","spamhaus"
+"354020","2020-04-29 15:07:31","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_3250669_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354020/","spamhaus"
+"354019","2020-04-29 15:07:29","http://promassager.ga/yltkoe/Buy-Sell_Agreement_54318729_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354019/","spamhaus"
+"354018","2020-04-29 15:07:26","http://cheriyilbuilders.com/ixwqumcq/Buy-Sell_Agreement_319226_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354018/","spamhaus"
+"354017","2020-04-29 15:07:23","https://cryptoomarket.com/fhws/3204949/Buy-Sell_Agreement_3204949_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354017/","spamhaus"
+"354016","2020-04-29 15:07:20","http://oralloy.com/xyqkbu/49290/Buy-Sell_Agreement_49290_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354016/","spamhaus"
+"354015","2020-04-29 15:07:17","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_38489451_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354015/","spamhaus"
+"354014","2020-04-29 15:07:13","https://rangebroadcasting.com/vfbc/130632/Buy-Sell_Agreement_130632_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354014/","spamhaus"
+"354013","2020-04-29 15:07:05","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_50369_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/354013/","spamhaus"
+"354012","2020-04-29 15:06:16","http://222.138.181.140:52260/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354012/","Gandylyan1"
+"354011","2020-04-29 15:06:11","http://112.122.61.250:35738/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354011/","Gandylyan1"
+"354010","2020-04-29 15:06:07","http://49.89.228.167:53241/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354010/","Gandylyan1"
+"354009","2020-04-29 15:05:59","http://111.43.223.59:49442/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354009/","Gandylyan1"
+"354008","2020-04-29 15:05:56","http://115.56.119.6:43509/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354008/","Gandylyan1"
+"354007","2020-04-29 15:05:24","http://92.41.46.206:2742/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354007/","Gandylyan1"
+"354006","2020-04-29 15:05:19","http://80.92.189.70:33394/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354006/","Gandylyan1"
+"354005","2020-04-29 15:04:47","http://110.155.51.173:55647/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354005/","Gandylyan1"
+"354004","2020-04-29 15:04:34","http://199.83.207.230:43122/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354004/","Gandylyan1"
+"354003","2020-04-29 15:04:28","http://176.113.161.66:54004/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354003/","Gandylyan1"
+"354002","2020-04-29 15:04:26","http://199.83.203.174:55619/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354002/","Gandylyan1"
+"354001","2020-04-29 15:04:22","http://182.126.101.85:37433/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/354001/","Gandylyan1"
+"354000","2020-04-29 15:04:19","http://123.10.20.166:36895/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/354000/","Gandylyan1"
+"353999","2020-04-29 15:04:15","http://125.113.66.85:33978/Mozi.m","offline","malware_download","Mozi","https://urlhaus.abuse.ch/url/353999/","Gandylyan1"
+"353998","2020-04-29 15:04:10","http://42.239.168.235:55153/Mozi.m","online","malware_download","Mozi","https://urlhaus.abuse.ch/url/353998/","Gandylyan1"
+"353997","2020-04-29 15:03:08","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_952550_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353997/","spamhaus"
+"353996","2020-04-29 15:03:03","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_130494_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353996/","spamhaus"
+"353995","2020-04-29 15:02:51","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/Buy-Sell_Agreement_831344_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353995/","spamhaus"
+"353994","2020-04-29 15:02:49","http://cheriyilbuilders.com/ixwqumcq/5765074/Buy-Sell_Agreement_5765074_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353994/","spamhaus"
+"353993","2020-04-29 15:02:46","http://www.cheriyilbuilders.com/herevryxugc/Buy-Sell_Agreement_232663_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353993/","spamhaus"
+"353992","2020-04-29 15:02:33","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_0150293_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353992/","spamhaus"
+"353991","2020-04-29 15:02:29","http://oralloy.com/xyqkbu/Buy-Sell_Agreement_86031_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353991/","spamhaus"
+"353990","2020-04-29 15:02:10","http://alexandredekerchove.com/ylwhbcphyy/54335544/Buy-Sell_Agreement_54335544_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353990/","spamhaus"
+"353989","2020-04-29 15:02:06","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_9106293_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353989/","spamhaus"
+"353988","2020-04-29 15:01:53","http://dev.apshaps.se/sdub/3757/Buy-Sell_Agreement_3757_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353988/","spamhaus"
+"353987","2020-04-29 15:01:51","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_71497458_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353987/","spamhaus"
+"353986","2020-04-29 15:01:46","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/05562669/Buy-Sell_Agreement_05562669_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353986/","spamhaus"
+"353985","2020-04-29 15:01:30","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_7405_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353985/","spamhaus"
+"353984","2020-04-29 14:54:23","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_560194_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353984/","spamhaus"
+"353983","2020-04-29 14:54:17","http://NCERTSOLUTIONACADEMY.COM/yghks/2597807/Buy-Sell_Agreement_2597807_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353983/","spamhaus"
+"353982","2020-04-29 14:54:15","http://sunboom-gift.com/zwbaxf/14663643/Buy-Sell_Agreement_14663643_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353982/","spamhaus"
+"353981","2020-04-29 14:54:09","http://Muanha.xyz/cfewahhzze/3497/Buy-Sell_Agreement_3497_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353981/","spamhaus"
+"353980","2020-04-29 14:54:07","https://rangebroadcasting.com/vfbc/Buy-Sell_Agreement_47414_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353980/","spamhaus"
+"353979","2020-04-29 14:50:49","http://arianegerkens.com/ujfnohl/22222.png","offline","malware_download","Qakbot,qbot,Quakbot","https://urlhaus.abuse.ch/url/353979/","notwhickey"
+"353978","2020-04-29 14:50:37","http://sunboom-gift.com/zwbaxf/08853/Buy-Sell_Agreement_08853_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353978/","spamhaus"
+"353977","2020-04-29 14:50:31","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_5316_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353977/","spamhaus"
+"353976","2020-04-29 14:50:29","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_7626737_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353976/","spamhaus"
+"353975","2020-04-29 14:50:16","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_5465012_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353975/","spamhaus"
+"353974","2020-04-29 14:50:09","https://bluecollarfinancial.net/gfmixt/Buy-Sell_Agreement_8000484_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353974/","spamhaus"
+"353973","2020-04-29 14:50:04","https://aelogica.com/zznohyxa/8295/Buy-Sell_Agreement_8295_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353973/","spamhaus"
+"353972","2020-04-29 14:46:25","http://staging.popclusive.asia/okppdsnq/00827/Buy-Sell_Agreement_00827_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353972/","spamhaus"
+"353971","2020-04-29 14:46:18","http://jessymart.flexyhub.com/ssuzzix/Buy-Sell_Agreement_4896_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353971/","spamhaus"
+"353970","2020-04-29 14:46:13","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_443872_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353970/","spamhaus"
+"353969","2020-04-29 14:46:11","https://vip.recommendedtoyoo.com/bdhycmsxctp/70840/Buy-Sell_Agreement_70840_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353969/","spamhaus"
+"353968","2020-04-29 14:45:43","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_7595546_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353968/","spamhaus"
+"353967","2020-04-29 14:45:37","http://jessymart.flexyhub.com/ssuzzix/5876060/Buy-Sell_Agreement_5876060_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353967/","spamhaus"
+"353966","2020-04-29 14:45:34","https://aelogica.com/zznohyxa/94346/Buy-Sell_Agreement_94346_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353966/","spamhaus"
+"353965","2020-04-29 14:45:23","http://cheriyilbuilders.com/ixwqumcq/99014435/Buy-Sell_Agreement_99014435_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353965/","spamhaus"
+"353964","2020-04-29 14:45:19","http://promassager.ga/yltkoe/7587410/Buy-Sell_Agreement_7587410_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353964/","spamhaus"
+"353963","2020-04-29 14:45:07","http://daricci.de/wp-content/uploads/2020/04/owkf/22222.png","offline","malware_download","exe,Qakbot,spx108","https://urlhaus.abuse.ch/url/353963/","lazyactivist192"
+"353962","2020-04-29 14:43:50","http://cerisiers.be/fczjua/22222.png","offline","malware_download","exe,Qakbot,spx108","https://urlhaus.abuse.ch/url/353962/","lazyactivist192"
+"353961","2020-04-29 14:43:39","http://silverstargalaxy.com.silverstartv.website/cmea/Buy-Sell_Agreement_1028_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353961/","spamhaus"
+"353960","2020-04-29 14:43:37","http://jaservicioscontables.casteviajes.com/xekqbxkehlx/Buy-Sell_Agreement_191700_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353960/","spamhaus"
+"353959","2020-04-29 14:43:35","http://capath.vn/yxrw/22222.png","online","malware_download","exe,Qakbot,Quakbot,spx108","https://urlhaus.abuse.ch/url/353959/","lazyactivist192"
+"353958","2020-04-29 14:43:32","http://betopceo.com/ivbglae/22222.png","offline","malware_download","exe,Qakbot,spx108","https://urlhaus.abuse.ch/url/353958/","lazyactivist192"
+"353957","2020-04-29 14:43:27","http://NCERTSOLUTIONACADEMY.COM/yghks/Buy-Sell_Agreement_0083_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353957/","spamhaus"
+"353956","2020-04-29 14:43:25","http://britica.vn/dqsfv/Buy-Sell_Agreement_0877064_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353956/","spamhaus"
+"353955","2020-04-29 14:43:09","http://batdongsanbentre.com.vn/vbtbnvxnrl/22222.png","offline","malware_download","exe,Qakbot,spx108","https://urlhaus.abuse.ch/url/353955/","lazyactivist192"
+"353954","2020-04-29 14:42:04","http://104.168.198.194/mips","online","malware_download","None","https://urlhaus.abuse.ch/url/353954/","Gandylyan1"
+"353953","2020-04-29 14:41:03","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_8224562_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353953/","spamhaus"
+"353952","2020-04-29 14:40:57","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_12213852_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353952/","spamhaus"
+"353951","2020-04-29 14:40:52","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_29566362_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353951/","spamhaus"
+"353950","2020-04-29 14:40:48","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_241373_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353950/","spamhaus"
+"353949","2020-04-29 14:40:41","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/Buy-Sell_Agreement_0720947_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353949/","spamhaus"
+"353948","2020-04-29 14:40:09","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/Buy-Sell_Agreement_06127889_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353948/","spamhaus"
+"353947","2020-04-29 14:40:04","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_2116_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353947/","spamhaus"
+"353946","2020-04-29 14:39:58","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_58277492_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353946/","spamhaus"
+"353945","2020-04-29 14:39:54","http://koravit.zaeteaw.net/okmqhrfdsvj/Buy-Sell_Agreement_4615_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353945/","spamhaus"
+"353944","2020-04-29 14:39:46","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_4072_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353944/","spamhaus"
+"353943","2020-04-29 14:39:44","http://oskarnews.gazashare.com/pelsq/70994/Buy-Sell_Agreement_70994_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353943/","spamhaus"
+"353942","2020-04-29 14:39:42","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_82072_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353942/","spamhaus"
+"353941","2020-04-29 14:39:38","http://oskarnews.gazashare.com/pelsq/563390/Buy-Sell_Agreement_563390_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353941/","spamhaus"
+"353940","2020-04-29 14:39:36","http://jessymart.flexyhub.com/ssuzzix/515892/Buy-Sell_Agreement_515892_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353940/","spamhaus"
+"353939","2020-04-29 14:39:31","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_31209_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353939/","spamhaus"
+"353938","2020-04-29 14:39:29","http://denunciesoftwareilegal.org.br/wp-content/plugins/apikey/bfgvnffqfo/5433950/Buy-Sell_Agreement_5433950_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353938/","spamhaus"
+"353937","2020-04-29 14:39:17","http://dzapasigroup.usapglobal.org/pbnxnmc/35459684/Buy-Sell_Agreement_35459684_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353937/","spamhaus"
+"353936","2020-04-29 14:39:13","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_41088_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353936/","spamhaus"
+"353935","2020-04-29 14:39:09","http://bolescy.com/otue/Buy-Sell_Agreement_5472_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353935/","spamhaus"
+"353934","2020-04-29 14:39:05","http://duongfpt.ga/lxgqgox/50076/Buy-Sell_Agreement_50076_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353934/","spamhaus"
+"353933","2020-04-29 14:39:02","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_8485512_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353933/","spamhaus"
+"353932","2020-04-29 14:38:57","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/Buy-Sell_Agreement_93912574_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353932/","spamhaus"
+"353931","2020-04-29 14:38:53","http://NCERTSOLUTIONACADEMY.COM/yghks/95004421/Buy-Sell_Agreement_95004421_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353931/","spamhaus"
+"353930","2020-04-29 14:38:49","http://duongfpt.ga/lxgqgox/69614610/Buy-Sell_Agreement_69614610_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353930/","spamhaus"
+"353929","2020-04-29 14:38:46","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_4425983_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353929/","spamhaus"
+"353928","2020-04-29 14:38:38","https://www.francois-champion.com/lqkb/Buy-Sell_Agreement_12556414_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353928/","spamhaus"
+"353927","2020-04-29 14:38:33","https://cryptoomarket.com/fhws/Buy-Sell_Agreement_785445_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353927/","spamhaus"
+"353926","2020-04-29 14:38:24","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_15886_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353926/","spamhaus"
+"353925","2020-04-29 14:38:18","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_73790_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353925/","spamhaus"
+"353924","2020-04-29 14:38:10","http://cheriyilbuilders.com/ixwqumcq/Buy-Sell_Agreement_35883362_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353924/","spamhaus"
+"353923","2020-04-29 14:38:08","http://bolescy.com/otue/0413732/Buy-Sell_Agreement_0413732_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353923/","spamhaus"
+"353922","2020-04-29 14:37:25","http://51.89.119.154/bins/x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/353922/","JayTHL"
+"353921","2020-04-29 14:37:23","http://51.89.119.154/bins/sparc","offline","malware_download","None","https://urlhaus.abuse.ch/url/353921/","JayTHL"
+"353920","2020-04-29 14:37:21","http://51.89.119.154/bins/sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/353920/","JayTHL"
+"353919","2020-04-29 14:37:19","http://51.89.119.154/bins/powerpc","offline","malware_download","None","https://urlhaus.abuse.ch/url/353919/","JayTHL"
+"353918","2020-04-29 14:37:18","http://51.89.119.154/bins/mipsel","offline","malware_download","None","https://urlhaus.abuse.ch/url/353918/","JayTHL"
+"353917","2020-04-29 14:37:16","http://51.89.119.154/bins/mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/353917/","JayTHL"
+"353916","2020-04-29 14:37:14","http://51.89.119.154/bins/m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/353916/","JayTHL"
+"353915","2020-04-29 14:37:12","http://51.89.119.154/bins/i686","offline","malware_download","None","https://urlhaus.abuse.ch/url/353915/","JayTHL"
+"353914","2020-04-29 14:37:10","http://51.89.119.154/bins/i586","offline","malware_download","None","https://urlhaus.abuse.ch/url/353914/","JayTHL"
+"353913","2020-04-29 14:37:08","http://51.89.119.154/bins/arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/353913/","JayTHL"
+"353912","2020-04-29 14:37:07","http://51.89.119.154/bins/arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/353912/","JayTHL"
+"353911","2020-04-29 14:37:05","http://51.89.119.154/bins/arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/353911/","JayTHL"
+"353910","2020-04-29 14:37:03","http://51.89.119.154/bins/KKK.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/353910/","JayTHL"
+"353909","2020-04-29 14:31:21","https://cryptoomarket.com/fhws/963978/Buy-Sell_Agreement_963978_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353909/","spamhaus"
+"353908","2020-04-29 14:31:16","http://demo13.dsdemosite.com/alugzfn/Buy-Sell_Agreement_0090_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353908/","spamhaus"
+"353907","2020-04-29 14:31:13","http://Muanha.xyz/cfewahhzze/Buy-Sell_Agreement_6709320_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353907/","spamhaus"
+"353906","2020-04-29 14:31:09","https://rangebroadcasting.com/vfbc/504577/Buy-Sell_Agreement_504577_04282020.zip","online","malware_download","ESP,Quakbot","https://urlhaus.abuse.ch/url/353906/","spamhaus"
+"353905","2020-04-29 14:31:03","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_2788_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353905/","spamhaus"
+"353904","2020-04-29 14:30:58","https://aelogica.com/zznohyxa/Buy-Sell_Agreement_25066542_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353904/","spamhaus"
+"353903","2020-04-29 14:30:23","http://staging.popclusive.asia/okppdsnq/Buy-Sell_Agreement_22473650_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353903/","spamhaus"
+"353902","2020-04-29 14:30:13","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_57552714_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353902/","spamhaus"
+"353901","2020-04-29 14:30:08","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_35096983_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353901/","spamhaus"
+"353900","2020-04-29 14:29:32","http://stelamedien.de/wp/parcel.php","offline","malware_download","Trickbot","https://urlhaus.abuse.ch/url/353900/","anonymous"
+"353899","2020-04-29 14:29:29","http://alexandredekerchove.com/ylwhbcphyy/Buy-Sell_Agreement_021354_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353899/","spamhaus"
+"353898","2020-04-29 14:29:25","https://rangebroadcasting.com/vfbc/21146543/Buy-Sell_Agreement_21146543_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353898/","spamhaus"
+"353897","2020-04-29 14:29:22","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/610227/Buy-Sell_Agreement_610227_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353897/","spamhaus"
+"353896","2020-04-29 14:29:20","http://silverstargalaxy.com.silverstartv.website/cmea/Buy-Sell_Agreement_4586594_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353896/","spamhaus"
+"353895","2020-04-29 14:29:14","http://www.cheriyilbuilders.com/herevryxugc/80423486/Buy-Sell_Agreement_80423486_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353895/","spamhaus"
+"353894","2020-04-29 14:29:12","http://virustreatments.empeeevents.com/eyyudu/Buy-Sell_Agreement_5812432_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353894/","spamhaus"
+"353893","2020-04-29 14:29:07","http://staging.popclusive.asia/okppdsnq/96671/Buy-Sell_Agreement_96671_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353893/","spamhaus"
+"353892","2020-04-29 14:29:03","https://bluecollarfinancial.net/gfmixt/Buy-Sell_Agreement_856388_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353892/","spamhaus"
+"353891","2020-04-29 14:28:58","http://britica.vn/dqsfv/Buy-Sell_Agreement_52744_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353891/","spamhaus"
+"353890","2020-04-29 14:28:52","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/442375/Buy-Sell_Agreement_442375_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353890/","spamhaus"
+"353889","2020-04-29 14:28:21","http://oskarnews.gazashare.com/pelsq/22488219/Buy-Sell_Agreement_22488219_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353889/","spamhaus"
+"353888","2020-04-29 14:28:17","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_2457_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353888/","spamhaus"
+"353887","2020-04-29 14:28:14","http://NCERTSOLUTIONACADEMY.COM/yghks/Buy-Sell_Agreement_5833942_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353887/","spamhaus"
+"353886","2020-04-29 14:28:12","http://promassager.ga/yltkoe/7604/Buy-Sell_Agreement_7604_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353886/","spamhaus"
+"353885","2020-04-29 14:28:07","http://digital-marketing-institute-delhi.empeeevents.com/epsmnewmgo/Buy-Sell_Agreement_578727_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353885/","spamhaus"
+"353884","2020-04-29 14:28:02","http://silverstargalaxy.com.silverstartv.website/cmea/95147/Buy-Sell_Agreement_95147_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353884/","spamhaus"
+"353883","2020-04-29 14:27:59","http://bolescy.com/otue/Buy-Sell_Agreement_14503_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353883/","spamhaus"
+"353882","2020-04-29 14:27:56","http://bolescy.com/otue/8739403/Buy-Sell_Agreement_8739403_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353882/","spamhaus"
+"353881","2020-04-29 14:27:53","http://oskarnews.gazashare.com/pelsq/Buy-Sell_Agreement_14165_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353881/","spamhaus"
+"353880","2020-04-29 14:27:48","http://jessymart.flexyhub.com/ssuzzix/3866/Buy-Sell_Agreement_3866_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353880/","spamhaus"
+"353879","2020-04-29 14:27:46","http://www.cheriyilbuilders.com/herevryxugc/Buy-Sell_Agreement_1328_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353879/","spamhaus"
+"353878","2020-04-29 14:27:40","http://morruko.antesos.com/fqtylehpb/Buy-Sell_Agreement_6586635_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353878/","spamhaus"
+"353877","2020-04-29 14:27:37","http://sunboom-gift.com/zwbaxf/Buy-Sell_Agreement_828327_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353877/","spamhaus"
+"353876","2020-04-29 14:27:34","http://bolescy.com/otue/Buy-Sell_Agreement_9764_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353876/","spamhaus"
+"353875","2020-04-29 14:27:27","http://dev.apshaps.se/sdub/966107/Buy-Sell_Agreement_966107_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353875/","spamhaus"
+"353874","2020-04-29 14:27:25","http://drinkopolykopen.nl/wp-content/uploads/2020/04/nnpebk/1212993/Buy-Sell_Agreement_1212993_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353874/","spamhaus"
+"353873","2020-04-29 14:27:22","https://rangebroadcasting.com/vfbc/0305/Buy-Sell_Agreement_0305_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353873/","spamhaus"
+"353872","2020-04-29 14:27:18","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/Buy-Sell_Agreement_16907797_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353872/","spamhaus"
+"353871","2020-04-29 14:27:16","http://NCERTSOLUTIONACADEMY.COM/yghks/87700391/Buy-Sell_Agreement_87700391_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353871/","spamhaus"
+"353870","2020-04-29 14:27:11","http://jessymart.flexyhub.com/ssuzzix/0257123/Buy-Sell_Agreement_0257123_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353870/","spamhaus"
+"353869","2020-04-29 14:27:08","http://cerradocredito.com.br/wp-content/uploads/2020/04/beazvgceu/626389/Buy-Sell_Agreement_626389_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353869/","spamhaus"
+"353868","2020-04-29 14:27:03","http://ade.topepics.com/pkthdrgdb/27224/Buy-Sell_Agreement_27224_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353868/","spamhaus"
+"353867","2020-04-29 14:26:57","http://NCERTSOLUTIONACADEMY.COM/yghks/25607548/Buy-Sell_Agreement_25607548_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353867/","spamhaus"
+"353866","2020-04-29 14:26:55","http://staging.popclusive.asia/okppdsnq/94144607/Buy-Sell_Agreement_94144607_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353866/","spamhaus"
+"353865","2020-04-29 14:26:49","http://dev.apshaps.se/sdub/Buy-Sell_Agreement_555260_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353865/","spamhaus"
+"353864","2020-04-29 14:26:44","https://kamagra.in.rs/bqcbhf/8599/Buy-Sell_Agreement_8599_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353864/","spamhaus"
+"353863","2020-04-29 14:26:41","http://NCERTSOLUTIONACADEMY.COM/yghks/Buy-Sell_Agreement_4693_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353863/","spamhaus"
+"353862","2020-04-29 14:26:38","http://britica.vn/dqsfv/Buy-Sell_Agreement_448045_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353862/","spamhaus"
+"353861","2020-04-29 14:26:31","http://sunboom-gift.com/zwbaxf/246727/Buy-Sell_Agreement_246727_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353861/","spamhaus"
+"353860","2020-04-29 14:26:22","http://silverstargalaxy.com.silverstartv.website/cmea/5985352/Buy-Sell_Agreement_5985352_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353860/","spamhaus"
+"353859","2020-04-29 14:26:20","http://morruko.antesos.com/fqtylehpb/9510131/Buy-Sell_Agreement_9510131_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353859/","spamhaus"
+"353858","2020-04-29 14:26:15","http://duongfpt.ga/lxgqgox/Buy-Sell_Agreement_4460233_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353858/","spamhaus"
+"353857","2020-04-29 14:26:10","http://dzapasigroup.usapglobal.org/pbnxnmc/Buy-Sell_Agreement_94794_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353857/","spamhaus"
+"353856","2020-04-29 14:26:05","https://vip.recommendedtoyoo.com/bdhycmsxctp/Buy-Sell_Agreement_06414491_04282020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353856/","spamhaus"
+"353855","2020-04-29 14:25:23","http://silverstargalaxy.com.silverstartv.website/cmea/Buy-Sell_Agreement_731464_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353855/","spamhaus"
+"353854","2020-04-29 14:25:09","https://bluecollarfinancial.net/gfmixt/5884/Buy-Sell_Agreement_5884_04282020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353854/","spamhaus"
+"353853","2020-04-29 14:25:04","http://104.168.198.194/x86_64","online","malware_download","64-bit,elf,x86-64","https://urlhaus.abuse.ch/url/353853/","geenensp"
+"353852","2020-04-29 14:22:14","http://cheaptours.in.ua/wp-content/cache/hyper-cache/cheaptours.in.ua/2016/information.exe","offline","malware_download","Trickbot","https://urlhaus.abuse.ch/url/353852/","anonymous"
+"353851","2020-04-29 14:20:10","https://mylocalfoodie.com.au/wp-content/cjayq/cjcrypt.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/353851/","JayTHL"
+"353850","2020-04-29 14:12:08","http://sylvaclouds.eu/toolshome/toolshome.exe","offline","malware_download","Formbook","https://urlhaus.abuse.ch/url/353850/","James_inthe_box"
+"353849","2020-04-29 13:58:05","http://45.95.169.234/SBIDIOT/zte","online","malware_download","None","https://urlhaus.abuse.ch/url/353849/","JayTHL"
+"353848","2020-04-29 13:58:03","http://45.95.169.234/SBIDIOT/yarn","online","malware_download","None","https://urlhaus.abuse.ch/url/353848/","JayTHL"
+"353847","2020-04-29 13:58:00","http://45.95.169.234/SBIDIOT/x86","online","malware_download","None","https://urlhaus.abuse.ch/url/353847/","JayTHL"
+"353846","2020-04-29 13:57:58","http://45.95.169.234/SBIDIOT/rtk","online","malware_download","None","https://urlhaus.abuse.ch/url/353846/","JayTHL"
+"353845","2020-04-29 13:57:56","http://45.95.169.234/SBIDIOT/root","online","malware_download","None","https://urlhaus.abuse.ch/url/353845/","JayTHL"
+"353844","2020-04-29 13:57:54","http://45.95.169.234/SBIDIOT/ppc","online","malware_download","None","https://urlhaus.abuse.ch/url/353844/","JayTHL"
+"353843","2020-04-29 13:57:52","http://45.95.169.234/SBIDIOT/mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/353843/","JayTHL"
+"353842","2020-04-29 13:57:50","http://45.95.169.234/SBIDIOT/mips","online","malware_download","None","https://urlhaus.abuse.ch/url/353842/","JayTHL"
+"353841","2020-04-29 13:57:48","http://45.95.169.234/SBIDIOT/arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/353841/","JayTHL"
+"353840","2020-04-29 13:57:46","http://45.95.169.234/SBIDIOT/arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/353840/","JayTHL"
+"353839","2020-04-29 13:57:43","http://45.95.169.234/SBIDIOT/arm","online","malware_download","None","https://urlhaus.abuse.ch/url/353839/","JayTHL"
+"353838","2020-04-29 13:57:41","http://167.172.206.156/bins/Hilix.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/353838/","JayTHL"
+"353837","2020-04-29 13:57:38","http://167.172.206.156/bins/Hilix.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/353837/","JayTHL"
+"353836","2020-04-29 13:57:36","http://167.172.206.156/bins/Hilix.sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/353836/","JayTHL"
+"353835","2020-04-29 13:57:33","http://167.172.206.156/bins/Hilix.ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/353835/","JayTHL"
+"353834","2020-04-29 13:57:30","http://167.172.206.156/bins/Hilix.mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/353834/","JayTHL"
+"353833","2020-04-29 13:57:27","http://167.172.206.156/bins/Hilix.mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/353833/","JayTHL"
+"353832","2020-04-29 13:57:24","http://167.172.206.156/bins/Hilix.m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/353832/","JayTHL"
+"353831","2020-04-29 13:57:21","http://167.172.206.156/bins/Hilix.arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/353831/","JayTHL"
+"353830","2020-04-29 13:57:18","http://167.172.206.156/bins/Hilix.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/353830/","JayTHL"
+"353829","2020-04-29 13:57:15","http://167.172.206.156/bins/Hilix.arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/353829/","JayTHL"
+"353828","2020-04-29 13:57:12","http://167.172.206.156/bins/Hilix.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/353828/","JayTHL"
+"353827","2020-04-29 13:57:08","http://104.168.169.137/kc-botnet/x86","online","malware_download","None","https://urlhaus.abuse.ch/url/353827/","JayTHL"
+"353826","2020-04-29 13:57:06","http://104.168.169.137/kc-botnet/spc","online","malware_download","None","https://urlhaus.abuse.ch/url/353826/","JayTHL"
+"353825","2020-04-29 13:57:03","http://104.168.169.137/kc-botnet/sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/353825/","JayTHL"
+"353824","2020-04-29 13:57:00","http://104.168.169.137/kc-botnet/ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/353824/","JayTHL"
+"353823","2020-04-29 13:56:57","http://104.168.169.137/kc-botnet/mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/353823/","JayTHL"
+"353822","2020-04-29 13:56:55","http://104.168.169.137/kc-botnet/mips","online","malware_download","None","https://urlhaus.abuse.ch/url/353822/","JayTHL"
+"353821","2020-04-29 13:56:53","http://104.168.169.137/kc-botnet/m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/353821/","JayTHL"
+"353820","2020-04-29 13:56:49","http://104.168.169.137/kc-botnet/arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/353820/","JayTHL"
+"353819","2020-04-29 13:56:47","http://104.168.169.137/kc-botnet/arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/353819/","JayTHL"
+"353818","2020-04-29 13:56:45","http://104.168.169.137/kc-botnet/arm5","online","malware_download","None","https://urlhaus.abuse.ch/url/353818/","JayTHL"
+"353817","2020-04-29 13:56:43","http://104.168.169.137/kc-botnet/arm","online","malware_download","None","https://urlhaus.abuse.ch/url/353817/","JayTHL"
+"353816","2020-04-29 13:56:40","http://104.168.169.137/kc-botnet/x86_64","online","malware_download","None","https://urlhaus.abuse.ch/url/353816/","JayTHL"
+"353815","2020-04-29 13:56:37","https://mylocalfoodie.com.au/wp-content/gozs/rock1.exe","offline","malware_download","AZORult","https://urlhaus.abuse.ch/url/353815/","James_inthe_box"
+"353814","2020-04-29 13:46:04","https://pastebin.com/raw/uiUaAsrR","offline","malware_download","None","https://urlhaus.abuse.ch/url/353814/","JayTHL"
+"353813","2020-04-29 13:38:05","http://85.100.127.218:45646/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/353813/","zbetcheckin"
+"353812","2020-04-29 12:30:34","http://periotexas.com/wp-content/plugins/bwd-custom-plugin/chklist/_notes/api.lib.php","offline","malware_download","None","https://urlhaus.abuse.ch/url/353812/","JAMESWT_MHT"
+"353811","2020-04-29 12:12:09","http://179.156.192.195:41997/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353811/","geenensp"
 "353810","2020-04-29 12:04:30","http://113.221.50.64:50835/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353810/","Gandylyan1"
-"353809","2020-04-29 12:04:25","http://77.43.232.133:35006/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353809/","Gandylyan1"
+"353809","2020-04-29 12:04:25","http://77.43.232.133:35006/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353809/","Gandylyan1"
 "353808","2020-04-29 12:04:22","http://182.113.226.230:36407/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353808/","Gandylyan1"
-"353807","2020-04-29 12:04:18","http://111.43.223.114:57370/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353807/","Gandylyan1"
-"353806","2020-04-29 12:04:14","http://116.114.95.108:49954/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353806/","Gandylyan1"
+"353807","2020-04-29 12:04:18","http://111.43.223.114:57370/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353807/","Gandylyan1"
+"353806","2020-04-29 12:04:14","http://116.114.95.108:49954/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353806/","Gandylyan1"
 "353805","2020-04-29 12:04:10","http://36.105.62.139:35535/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353805/","Gandylyan1"
 "353804","2020-04-29 12:04:06","http://180.124.151.219:39738/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353804/","Gandylyan1"
 "353803","2020-04-29 12:03:32","http://175.11.193.122:38689/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353803/","Gandylyan1"
-"353802","2020-04-29 12:03:27","http://211.137.225.57:41554/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353802/","Gandylyan1"
-"353801","2020-04-29 12:03:23","http://61.168.50.156:38970/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353801/","Gandylyan1"
+"353802","2020-04-29 12:03:27","http://211.137.225.57:41554/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353802/","Gandylyan1"
+"353801","2020-04-29 12:03:23","http://61.168.50.156:38970/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353801/","Gandylyan1"
 "353800","2020-04-29 12:03:19","http://222.185.73.210:36749/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353800/","Gandylyan1"
 "353799","2020-04-29 12:03:08","http://222.74.186.134:56142/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353799/","Gandylyan1"
-"353798","2020-04-29 11:43:03","https://pastebin.com/raw/JA5a3MWP","online","malware_download","None","https://urlhaus.abuse.ch/url/353798/","JayTHL"
+"353798","2020-04-29 11:43:03","https://pastebin.com/raw/JA5a3MWP","offline","malware_download","None","https://urlhaus.abuse.ch/url/353798/","JayTHL"
 "353797","2020-04-29 11:11:03","https://pyxalis.com/wp-content/plugins/os/s.exe","online","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/353797/","zbetcheckin"
 "353796","2020-04-29 11:09:07","https://yolks.bestsellertwo.net/Purchase%20Order.PDF.GZ","online","malware_download","None","https://urlhaus.abuse.ch/url/353796/","cocaman"
 "353795","2020-04-29 11:04:08","https://pyxalis.com/wp-content/plugins/os/soo.exe","online","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/353795/","zbetcheckin"
@@ -18,44 +538,44 @@
 "353793","2020-04-29 10:53:03","https://pyxalis.com/wp-content/plugins/os/gg.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/353793/","zbetcheckin"
 "353792","2020-04-29 10:41:03","http://167.99.84.182/dany.sh","offline","malware_download","ascii","https://urlhaus.abuse.ch/url/353792/","geenensp"
 "353791","2020-04-29 10:39:06","http://121.154.43.105:53192/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/353791/","zbetcheckin"
-"353790","2020-04-29 10:33:49","http://147.75.67.253/bins/x86","online","malware_download",",DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/353790/","Gandylyan1"
-"353789","2020-04-29 10:33:29","http://147.75.67.253/bins/x86_64","online","malware_download",",DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/353789/","Gandylyan1"
+"353790","2020-04-29 10:33:49","http://147.75.67.253/bins/x86","offline","malware_download",",DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/353790/","Gandylyan1"
+"353789","2020-04-29 10:33:29","http://147.75.67.253/bins/x86_64","offline","malware_download",",DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/353789/","Gandylyan1"
 "353788","2020-04-29 10:01:10","https://kazanturkiye20gb.com/kazan20gbturkiye.apk","online","malware_download","None","https://urlhaus.abuse.ch/url/353788/","GodOfTh75431522"
 "353787","2020-04-29 10:00:06","http://176.178.184.124:32217/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353787/","geenensp"
 "353786","2020-04-29 09:44:06","https://chinatyres.net/IuNbOpen/5osndo411.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/353786/","zbetcheckin"
 "353785","2020-04-29 09:42:04","https://pyxalis.com/wp-content/plugins/os/dss.exe","online","malware_download","Formbook","https://urlhaus.abuse.ch/url/353785/","Racco42"
 "353784","2020-04-29 09:40:30","https://chinatyres.net/IuNbOpen/20osndo411.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/353784/","zbetcheckin"
-"353783","2020-04-29 09:40:25","https://chinatyres.net/IuNbOpen/12osndo411.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/353783/","zbetcheckin"
+"353783","2020-04-29 09:40:25","https://chinatyres.net/IuNbOpen/12osndo411.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/353783/","zbetcheckin"
 "353782","2020-04-29 09:40:18","https://chinatyres.net/IuNbOpen/19osndo411.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/353782/","zbetcheckin"
-"353781","2020-04-29 09:39:05","https://chinatyres.net/IuNbOpen/16osndo411.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/353781/","zbetcheckin"
+"353781","2020-04-29 09:39:05","https://chinatyres.net/IuNbOpen/16osndo411.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/353781/","zbetcheckin"
 "353780","2020-04-29 09:31:12","https://chinatyres.net/IuNbOpen/11osndo411.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/353780/","zbetcheckin"
 "353779","2020-04-29 09:30:10","https://chinatyres.net/IuNbOpen/2osndo411.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/353779/","zbetcheckin"
-"353778","2020-04-29 09:29:07","https://chinatyres.net/IuNbOpen/9osndo411.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/353778/","zbetcheckin"
+"353778","2020-04-29 09:29:07","https://chinatyres.net/IuNbOpen/9osndo411.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/353778/","zbetcheckin"
 "353777","2020-04-29 09:26:03","https://chinatyres.net/IuNbOpen/6osndo411.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/353777/","zbetcheckin"
 "353776","2020-04-29 09:24:14","https://chinatyres.net/IuNbOpen/4osndo411.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/353776/","zbetcheckin"
 "353775","2020-04-29 09:23:35","https://chinatyres.net/IuNbOpen/3osndo411.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/353775/","zbetcheckin"
-"353774","2020-04-29 09:19:14","https://chinatyres.net/IuNbOpen/15osndo411.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/353774/","zbetcheckin"
+"353774","2020-04-29 09:19:14","https://chinatyres.net/IuNbOpen/15osndo411.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/353774/","zbetcheckin"
 "353773","2020-04-29 09:19:09","https://chinatyres.net/IuNbOpen/8osndo411.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/353773/","zbetcheckin"
 "353772","2020-04-29 09:15:04","http://88.218.16.38/K8kEpCVOazUc6Bg.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353772/","zbetcheckin"
-"353771","2020-04-29 09:05:50","http://162.212.114.50:44015/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353771/","Gandylyan1"
+"353771","2020-04-29 09:05:50","http://162.212.114.50:44015/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353771/","Gandylyan1"
 "353770","2020-04-29 09:05:46","http://172.39.31.5:43207/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353770/","Gandylyan1"
 "353769","2020-04-29 09:05:14","http://182.127.55.214:47693/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353769/","Gandylyan1"
-"353768","2020-04-29 09:05:06","http://115.50.229.168:59597/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353768/","Gandylyan1"
-"353767","2020-04-29 09:05:01","http://223.154.40.213:60779/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353767/","Gandylyan1"
+"353768","2020-04-29 09:05:06","http://115.50.229.168:59597/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353768/","Gandylyan1"
+"353767","2020-04-29 09:05:01","http://223.154.40.213:60779/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353767/","Gandylyan1"
 "353766","2020-04-29 09:04:57","http://49.116.214.38:56794/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353766/","Gandylyan1"
 "353765","2020-04-29 09:04:52","http://42.239.77.201:37766/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353765/","Gandylyan1"
 "353764","2020-04-29 09:04:47","http://114.239.79.212:56499/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353764/","Gandylyan1"
 "353763","2020-04-29 09:04:42","http://113.218.234.32:41628/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353763/","Gandylyan1"
 "353762","2020-04-29 09:04:35","http://220.168.239.247:57324/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353762/","Gandylyan1"
 "353761","2020-04-29 09:04:29","http://111.38.26.243:48427/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353761/","Gandylyan1"
-"353760","2020-04-29 09:04:24","http://125.121.152.251:39071/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353760/","Gandylyan1"
+"353760","2020-04-29 09:04:24","http://125.121.152.251:39071/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353760/","Gandylyan1"
 "353759","2020-04-29 09:04:20","http://123.10.155.32:59198/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353759/","Gandylyan1"
-"353758","2020-04-29 09:04:12","http://211.137.225.120:55900/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353758/","Gandylyan1"
+"353758","2020-04-29 09:04:12","http://211.137.225.120:55900/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353758/","Gandylyan1"
 "353757","2020-04-29 09:03:58","http://194.48.152.10/Pipe/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353757/","zbetcheckin"
 "353756","2020-04-29 09:03:55","http://123.194.60.238:52754/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/353756/","zbetcheckin"
 "353755","2020-04-29 09:03:50","http://118.46.7.246:34817/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353755/","geenensp"
 "353754","2020-04-29 09:03:45","http://118.232.208.215:45195/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353754/","geenensp"
-"353753","2020-04-29 09:03:40","http://xn--transfgran-mgbbb600b.ro/UPS/ShippingInfo.jar","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353753/","spamhaus"
+"353753","2020-04-29 09:03:40","http://xn--transfgran-mgbbb600b.ro/UPS/ShippingInfo.jar","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353753/","spamhaus"
 "353752","2020-04-29 09:03:37","http://coderived.in/zlseg/Buy-Sell_Agreement_34704566_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353752/","spamhaus"
 "353751","2020-04-29 09:03:33","http://anadolutatili.com/xtfdux/17055888/Buy-Sell_Agreement_17055888_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353751/","spamhaus"
 "353750","2020-04-29 09:03:28","http://healtina.com/xcaspvi/5392047/Buy-Sell_Agreement_5392047_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353750/","spamhaus"
@@ -65,9 +585,9 @@
 "353746","2020-04-29 09:03:07","http://bookmytripping.com/tgxmxcm/30307798/Buy-Sell_Agreement_30307798_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353746/","spamhaus"
 "353745","2020-04-29 09:03:00","http://kandiandcolor.codeworkscanada.com/v/Buy-Sell_Agreement_59624925_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353745/","spamhaus"
 "353744","2020-04-29 09:02:57","http://cyberemprende.cl/wjoh/38575/Buy-Sell_Agreement_38575_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353744/","spamhaus"
-"353743","2020-04-29 09:02:53","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_658957_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353743/","spamhaus"
+"353743","2020-04-29 09:02:53","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_658957_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353743/","spamhaus"
 "353742","2020-04-29 09:02:46","https://how.ph/mrb/706759/Buy-Sell_Agreement_706759_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353742/","spamhaus"
-"353741","2020-04-29 09:02:37","http://myexpertca.in/fomi/63279611/Buy-Sell_Agreement_63279611_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353741/","spamhaus"
+"353741","2020-04-29 09:02:37","http://myexpertca.in/fomi/63279611/Buy-Sell_Agreement_63279611_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353741/","spamhaus"
 "353740","2020-04-29 09:02:21","http://vaeqpu.329263.com/al/Buy-Sell_Agreement_23601612_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353740/","spamhaus"
 "353739","2020-04-29 09:02:18","https://www.loodgieterjoost.be/wp-content/uploads/2020/04/osiwprp/Buy-Sell_Agreement_3544_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353739/","spamhaus"
 "353738","2020-04-29 09:02:15","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/3096/Buy-Sell_Agreement_3096_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353738/","spamhaus"
@@ -96,32 +616,32 @@
 "353715","2020-04-29 08:41:16","http://alnajimaa.website.bahaoption.website/uktvs/Buy-Sell_Agreement_5473_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353715/","spamhaus"
 "353714","2020-04-29 08:41:11","https://www.mfpburundi.bi/wp-content/uploads/2020/04/pb/Buy-Sell_Agreement_170999_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353714/","spamhaus"
 "353713","2020-04-29 08:41:10","http://earningtipsbd.com/pn/280019/Buy-Sell_Agreement_280019_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353713/","spamhaus"
-"353712","2020-04-29 08:41:08","http://www.gainsdirectory.com/imtlt/11119/Buy-Sell_Agreement_11119_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353712/","spamhaus"
+"353712","2020-04-29 08:41:08","http://www.gainsdirectory.com/imtlt/11119/Buy-Sell_Agreement_11119_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353712/","spamhaus"
 "353711","2020-04-29 08:41:05","http://delmaestro.espacioeterno.com/e/Buy-Sell_Agreement_23577525_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353711/","spamhaus"
 "353710","2020-04-29 08:41:03","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/Buy-Sell_Agreement_50658585_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353710/","spamhaus"
 "353709","2020-04-29 08:40:55","http://cyberemprende.cl/wjoh/8373/Buy-Sell_Agreement_8373_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353709/","spamhaus"
-"353708","2020-04-29 08:40:48","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_6108_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353708/","spamhaus"
+"353708","2020-04-29 08:40:48","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_6108_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353708/","spamhaus"
 "353707","2020-04-29 08:40:43","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_24920_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353707/","spamhaus"
 "353706","2020-04-29 08:40:41","http://healtina.com/xcaspvi/2017128/Buy-Sell_Agreement_2017128_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353706/","spamhaus"
 "353705","2020-04-29 08:40:39","https://kingdomcarecan.com/nbdvaba/Buy-Sell_Agreement_04521_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353705/","spamhaus"
-"353704","2020-04-29 08:40:30","https://dienmaycu.vn/rcckjv/Buy-Sell_Agreement_762354_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353704/","spamhaus"
+"353704","2020-04-29 08:40:30","https://dienmaycu.vn/rcckjv/Buy-Sell_Agreement_762354_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353704/","spamhaus"
 "353703","2020-04-29 08:40:26","http://alnajimaa.website.bahaoption.website/uktvs/978968/Buy-Sell_Agreement_978968_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353703/","spamhaus"
-"353702","2020-04-29 08:40:22","https://kingdomcarecan.com/nbdvaba/Buy-Sell_Agreement_08047_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353702/","spamhaus"
+"353702","2020-04-29 08:40:22","https://kingdomcarecan.com/nbdvaba/Buy-Sell_Agreement_08047_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353702/","spamhaus"
 "353701","2020-04-29 08:40:16","http://www.amodoutours.com/rretwxj/83870466/Buy-Sell_Agreement_83870466_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353701/","spamhaus"
-"353700","2020-04-29 08:40:14","http://jjjexx.329263.com/vi/Buy-Sell_Agreement_181721_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353700/","spamhaus"
+"353700","2020-04-29 08:40:14","http://jjjexx.329263.com/vi/Buy-Sell_Agreement_181721_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353700/","spamhaus"
 "353699","2020-04-29 08:40:09","https://alucard.online/yarx/20711/Buy-Sell_Agreement_20711_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353699/","spamhaus"
 "353698","2020-04-29 08:40:05","http://www.energyplusjuice.ir/wp-content/uploads/2020/04/m/Buy-Sell_Agreement_14391_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353698/","spamhaus"
 "353697","2020-04-29 08:38:03","https://pastebin.com/raw/iVtywrUz","offline","malware_download","None","https://urlhaus.abuse.ch/url/353697/","JayTHL"
 "353696","2020-04-29 08:22:06","http://192.236.147.100:1950/Zflipbgi.iso","offline","malware_download","None","https://urlhaus.abuse.ch/url/353696/","JAMESWT_MHT"
-"353695","2020-04-29 08:14:50","http://lagalaxy88easy.329263.com/lbrnxxd/03531/Buy-Sell_Agreement_03531_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353695/","spamhaus"
+"353695","2020-04-29 08:14:50","http://lagalaxy88easy.329263.com/lbrnxxd/03531/Buy-Sell_Agreement_03531_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353695/","spamhaus"
 "353694","2020-04-29 08:14:45","https://nmal.info/ntsphsl/42806083/Buy-Sell_Agreement_42806083_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353694/","spamhaus"
 "353693","2020-04-29 08:14:40","http://escarateeventos.ladevi.cl/yworbn/414713/Buy-Sell_Agreement_414713_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353693/","spamhaus"
-"353692","2020-04-29 08:14:09","http://bonyamin.com/wyupb/4989/Buy-Sell_Agreement_4989_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353692/","spamhaus"
-"353691","2020-04-29 08:14:06","http://mlbfreestream.ml/q/51548833/Buy-Sell_Agreement_51548833_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353691/","spamhaus"
+"353692","2020-04-29 08:14:09","http://bonyamin.com/wyupb/4989/Buy-Sell_Agreement_4989_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353692/","spamhaus"
+"353691","2020-04-29 08:14:06","http://mlbfreestream.ml/q/51548833/Buy-Sell_Agreement_51548833_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353691/","spamhaus"
 "353690","2020-04-29 08:14:01","http://cpagrace.cl/k/8312/Buy-Sell_Agreement_8312_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353690/","spamhaus"
 "353689","2020-04-29 08:13:28","http://elabugablog.ru/zzj/Buy-Sell_Agreement_6905408_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353689/","spamhaus"
-"353688","2020-04-29 08:13:25","http://arowanafishforsale.com/dbmwl/1922788/Buy-Sell_Agreement_1922788_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353688/","spamhaus"
-"353687","2020-04-29 08:13:20","http://earningtipsbd.com/pn/Buy-Sell_Agreement_481073_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353687/","spamhaus"
+"353688","2020-04-29 08:13:25","http://arowanafishforsale.com/dbmwl/1922788/Buy-Sell_Agreement_1922788_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353688/","spamhaus"
+"353687","2020-04-29 08:13:20","http://earningtipsbd.com/pn/Buy-Sell_Agreement_481073_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353687/","spamhaus"
 "353686","2020-04-29 08:11:40","http://alnajimaa.website.bahaoption.website/uktvs/89732/Buy-Sell_Agreement_89732_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353686/","spamhaus"
 "353685","2020-04-29 08:11:35","http://myexpertca.in/fomi/89079745/Buy-Sell_Agreement_89079745_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353685/","spamhaus"
 "353684","2020-04-29 08:11:32","http://mlbfreestream.gq/n/Buy-Sell_Agreement_35749554_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353684/","spamhaus"
@@ -136,7 +656,7 @@
 "353675","2020-04-29 08:04:04","https://fast.rentaroom.ml/euzxp/Buy-Sell_Agreement_04762346_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353675/","spamhaus"
 "353674","2020-04-29 08:03:46","http://hdlive-espntv.live-sportshd.website/bpg/Buy-Sell_Agreement_1709877_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353674/","spamhaus"
 "353673","2020-04-29 08:03:44","http://www.gbf.com/my/Buy-Sell_Agreement_4823_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353673/","spamhaus"
-"353672","2020-04-29 08:03:42","http://rentaroom.ml/oqqthv/25262/Buy-Sell_Agreement_25262_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353672/","spamhaus"
+"353672","2020-04-29 08:03:42","http://rentaroom.ml/oqqthv/25262/Buy-Sell_Agreement_25262_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353672/","spamhaus"
 "353671","2020-04-29 08:03:38","https://miraab.ir/wp-content/uploads/2020/04/tk/Buy-Sell_Agreement_063400_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353671/","spamhaus"
 "353670","2020-04-29 08:03:35","http://djonur24.de/hdc/2165/Buy-Sell_Agreement_2165_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353670/","spamhaus"
 "353669","2020-04-29 08:03:33","http://veniceshop.ru/wp-content/uploads/2020/04/xwrxtgh/60233233/Buy-Sell_Agreement_60233233_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353669/","spamhaus"
@@ -155,17 +675,17 @@
 "353656","2020-04-29 08:01:55","http://sexybaccarat.329263.com/k/021803/Buy-Sell_Agreement_021803_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353656/","spamhaus"
 "353655","2020-04-29 08:01:48","http://kgfs3.329263.com/cvsf/94279544/Buy-Sell_Agreement_94279544_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353655/","spamhaus"
 "353654","2020-04-29 08:01:44","http://earningtipsbd.com/pn/16352769/Buy-Sell_Agreement_16352769_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353654/","spamhaus"
-"353653","2020-04-29 08:01:40","https://drwendyellis.com/laqrip/262184/Buy-Sell_Agreement_262184_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353653/","spamhaus"
+"353653","2020-04-29 08:01:40","https://drwendyellis.com/laqrip/262184/Buy-Sell_Agreement_262184_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353653/","spamhaus"
 "353652","2020-04-29 08:01:28","http://rentaroom.ml/oqqthv/33859/Buy-Sell_Agreement_33859_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353652/","spamhaus"
 "353651","2020-04-29 08:00:16","http://37.34.228.1:30592/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353651/","geenensp"
-"353650","2020-04-29 08:00:12","http://kgfs3.329263.com/cvsf/63768/Buy-Sell_Agreement_63768_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353650/","spamhaus"
+"353650","2020-04-29 08:00:12","http://kgfs3.329263.com/cvsf/63768/Buy-Sell_Agreement_63768_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353650/","spamhaus"
 "353649","2020-04-29 07:59:37","http://62.215.101.230:59574/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353649/","geenensp"
 "353648","2020-04-29 07:58:18","http://avto-pro.hostenko.com/too/50673/Buy-Sell_Agreement_50673_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353648/","spamhaus"
 "353647","2020-04-29 07:57:46","http://sportstrem.gq/imqmxkw/Buy-Sell_Agreement_0493_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353647/","spamhaus"
-"353646","2020-04-29 07:57:10","http://fifa555easy.329263.com/x/57599/Buy-Sell_Agreement_57599_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353646/","spamhaus"
+"353646","2020-04-29 07:57:10","http://fifa555easy.329263.com/x/57599/Buy-Sell_Agreement_57599_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353646/","spamhaus"
 "353645","2020-04-29 07:56:33","http://djonur24.de/hdc/Buy-Sell_Agreement_5473_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353645/","spamhaus"
 "353644","2020-04-29 07:37:09","https://pastebin.com/raw/1viY3naQ","offline","malware_download","None","https://urlhaus.abuse.ch/url/353644/","JayTHL"
-"353643","2020-04-29 07:24:05","https://fast.rentaroom.ml/euzxp/1854/Buy-Sell_Agreement_1854_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353643/","spamhaus"
+"353643","2020-04-29 07:24:05","https://fast.rentaroom.ml/euzxp/1854/Buy-Sell_Agreement_1854_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353643/","spamhaus"
 "353642","2020-04-29 07:23:09","http://hdlive-espntv.live-sportshd.website/bpg/Buy-Sell_Agreement_7101395_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353642/","spamhaus"
 "353641","2020-04-29 07:23:07","https://langwieser.at/FedEx/ShippingInfo.jar","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353641/","spamhaus"
 "353640","2020-04-29 07:23:02","http://mlbfreestream.ml/q/Buy-Sell_Agreement_7955_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353640/","spamhaus"
@@ -175,12 +695,12 @@
 "353636","2020-04-29 07:22:43","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/90695556/Buy-Sell_Agreement_90695556_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353636/","spamhaus"
 "353635","2020-04-29 07:22:37","http://24.115.48.43:37623/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353635/","geenensp"
 "353634","2020-04-29 07:22:33","https://nmal.info/ntsphsl/0952594/Buy-Sell_Agreement_0952594_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353634/","spamhaus"
-"353633","2020-04-29 07:22:31","http://myexpertca.in/fomi/Buy-Sell_Agreement_86091111_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353633/","spamhaus"
+"353633","2020-04-29 07:22:31","http://myexpertca.in/fomi/Buy-Sell_Agreement_86091111_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353633/","spamhaus"
 "353632","2020-04-29 07:22:29","http://hdlive-espntv.live-sportshd.website/bpg/Buy-Sell_Agreement_10294111_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353632/","spamhaus"
-"353631","2020-04-29 07:22:25","http://livetvsports.ml/z/Buy-Sell_Agreement_54596_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353631/","spamhaus"
+"353631","2020-04-29 07:22:25","http://livetvsports.ml/z/Buy-Sell_Agreement_54596_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353631/","spamhaus"
 "353630","2020-04-29 07:22:21","http://coderived.in/zlseg/Buy-Sell_Agreement_1571081_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353630/","spamhaus"
-"353629","2020-04-29 07:22:16","http://sexybaccarat.329263.com/k/Buy-Sell_Agreement_62226978_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353629/","spamhaus"
-"353628","2020-04-29 07:22:08","http://myexpertca.in/fomi/Buy-Sell_Agreement_23325291_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353628/","spamhaus"
+"353629","2020-04-29 07:22:16","http://sexybaccarat.329263.com/k/Buy-Sell_Agreement_62226978_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353629/","spamhaus"
+"353628","2020-04-29 07:22:08","http://myexpertca.in/fomi/Buy-Sell_Agreement_23325291_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353628/","spamhaus"
 "353627","2020-04-29 07:21:57","http://www.alnahrainfilminstitute.com/kuhjz/5389/Buy-Sell_Agreement_5389_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353627/","spamhaus"
 "353626","2020-04-29 07:21:54","http://alnajimaa.website.bahaoption.website/uktvs/3704870/Buy-Sell_Agreement_3704870_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353626/","spamhaus"
 "353625","2020-04-29 07:21:50","https://brenleyquartzgh.com/ga/Buy-Sell_Agreement_60370501_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353625/","spamhaus"
@@ -188,12 +708,12 @@
 "353623","2020-04-29 07:21:36","http://www.alnahrainfilminstitute.com/kuhjz/28179863/Buy-Sell_Agreement_28179863_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353623/","spamhaus"
 "353622","2020-04-29 07:21:34","http://arowanafishforsale.com/dbmwl/Buy-Sell_Agreement_698683_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353622/","spamhaus"
 "353621","2020-04-29 07:21:29","http://www.amodoutours.com/rretwxj/350310/Buy-Sell_Agreement_350310_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353621/","spamhaus"
-"353620","2020-04-29 07:21:27","http://amedeoscognamiglio.329263.com/i/24827473/Buy-Sell_Agreement_24827473_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353620/","spamhaus"
-"353619","2020-04-29 07:21:17","http://rentaroom.ml/oqqthv/4912/Buy-Sell_Agreement_4912_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353619/","spamhaus"
+"353620","2020-04-29 07:21:27","http://amedeoscognamiglio.329263.com/i/24827473/Buy-Sell_Agreement_24827473_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353620/","spamhaus"
+"353619","2020-04-29 07:21:17","http://rentaroom.ml/oqqthv/4912/Buy-Sell_Agreement_4912_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353619/","spamhaus"
 "353618","2020-04-29 07:21:13","https://siseco.mx/wp-content/uploads/2020/04/beomqxc/14307/Buy-Sell_Agreement_14307_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353618/","spamhaus"
 "353617","2020-04-29 07:21:06","http://fifa555easy.329263.com/x/441957/Buy-Sell_Agreement_441957_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353617/","spamhaus"
-"353616","2020-04-29 07:20:58","https://pcexperts.co.za/wp-content/uploads/2020/04/tmk/6097/Buy-Sell_Agreement_6097_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353616/","spamhaus"
-"353615","2020-04-29 07:20:51","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_087485_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353615/","spamhaus"
+"353616","2020-04-29 07:20:58","https://pcexperts.co.za/wp-content/uploads/2020/04/tmk/6097/Buy-Sell_Agreement_6097_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353616/","spamhaus"
+"353615","2020-04-29 07:20:51","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_087485_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353615/","spamhaus"
 "353614","2020-04-29 07:20:37","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/60928197/Buy-Sell_Agreement_60928197_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353614/","spamhaus"
 "353613","2020-04-29 07:20:34","http://www.amodoutours.com/rretwxj/Buy-Sell_Agreement_7730054_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353613/","spamhaus"
 "353612","2020-04-29 07:20:32","http://myexpertca.in/fomi/197064/Buy-Sell_Agreement_197064_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353612/","spamhaus"
@@ -222,7 +742,7 @@
 "353589","2020-04-29 06:38:52","https://www.mfpburundi.bi/wp-content/uploads/2020/04/pb/3220667/Buy-Sell_Agreement_3220667_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353589/","spamhaus"
 "353588","2020-04-29 06:38:47","https://nmal.info/ntsphsl/1838107/Buy-Sell_Agreement_1838107_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353588/","spamhaus"
 "353587","2020-04-29 06:38:45","http://jjjexx.329263.com/vi/Buy-Sell_Agreement_6004581_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353587/","spamhaus"
-"353586","2020-04-29 06:38:42","http://mlbfreestream.gq/n/Buy-Sell_Agreement_410171_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353586/","spamhaus"
+"353586","2020-04-29 06:38:42","http://mlbfreestream.gq/n/Buy-Sell_Agreement_410171_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353586/","spamhaus"
 "353585","2020-04-29 06:38:36","http://cpagrace.cl/k/Buy-Sell_Agreement_3571_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353585/","spamhaus"
 "353584","2020-04-29 06:37:51","http://bookmytripping.com/tgxmxcm/822343/Buy-Sell_Agreement_822343_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353584/","spamhaus"
 "353583","2020-04-29 06:37:42","https://www.mfpburundi.bi/wp-content/uploads/2020/04/pb/Buy-Sell_Agreement_65212722_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353583/","spamhaus"
@@ -239,11 +759,11 @@
 "353572","2020-04-29 06:36:38","https://dienmaycu.vn/rcckjv/Buy-Sell_Agreement_8596071_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353572/","spamhaus"
 "353571","2020-04-29 06:36:35","http://vaeqpu.329263.com/al/56057178/Buy-Sell_Agreement_56057178_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353571/","spamhaus"
 "353570","2020-04-29 06:36:30","https://www.loodgieterjoost.be/wp-content/uploads/2020/04/osiwprp/82152/Buy-Sell_Agreement_82152_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353570/","spamhaus"
-"353569","2020-04-29 06:36:28","http://85.217.170.105/mips","online","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/353569/","geenensp"
-"353568","2020-04-29 06:36:26","http://85.217.170.105/XXX.sh","online","malware_download","script","https://urlhaus.abuse.ch/url/353568/","geenensp"
+"353569","2020-04-29 06:36:28","http://85.217.170.105/mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/353569/","geenensp"
+"353568","2020-04-29 06:36:26","http://85.217.170.105/XXX.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/353568/","geenensp"
 "353567","2020-04-29 06:36:24","http://rentaroom.ml/oqqthv/Buy-Sell_Agreement_8132_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353567/","spamhaus"
 "353566","2020-04-29 06:36:20","http://bookmytripping.com/tgxmxcm/Buy-Sell_Agreement_781209_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353566/","spamhaus"
-"353565","2020-04-29 06:36:09","http://sexybaccarat.329263.com/k/Buy-Sell_Agreement_3633_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353565/","spamhaus"
+"353565","2020-04-29 06:36:09","http://sexybaccarat.329263.com/k/Buy-Sell_Agreement_3633_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353565/","spamhaus"
 "353564","2020-04-29 06:36:06","https://rugab.se/c/3260/Buy-Sell_Agreement_3260_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353564/","spamhaus"
 "353563","2020-04-29 06:36:04","http://vasylivka.lebrada.gov.ua/wp-content/themes/calliope/mwqpxes/024105/Buy-Sell_Agreement_024105_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353563/","spamhaus"
 "353562","2020-04-29 06:36:02","http://tulmix-beton.ru/hpoakm/27343853/Buy-Sell_Agreement_27343853_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353562/","spamhaus"
@@ -254,13 +774,13 @@
 "353557","2020-04-29 06:35:04","http://27.147.40.128:22976/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353557/","geenensp"
 "353556","2020-04-29 06:34:57","http://220.135.8.228:50594/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353556/","geenensp"
 "353555","2020-04-29 06:34:42","http://lakropack.com/s/Buy-Sell_Agreement_94827816_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353555/","spamhaus"
-"353554","2020-04-29 06:34:37","https://www.cinnamoncreations.com.au/h/Buy-Sell_Agreement_46257_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353554/","spamhaus"
+"353554","2020-04-29 06:34:37","https://www.cinnamoncreations.com.au/h/Buy-Sell_Agreement_46257_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353554/","spamhaus"
 "353553","2020-04-29 06:34:32","https://wwealthllc.com/sjokmsq/Buy-Sell_Agreement_58805622_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353553/","spamhaus"
-"353552","2020-04-29 06:34:28","http://vaeqpu.329263.com/al/Buy-Sell_Agreement_62844279_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353552/","spamhaus"
+"353552","2020-04-29 06:34:28","http://vaeqpu.329263.com/al/Buy-Sell_Agreement_62844279_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353552/","spamhaus"
 "353551","2020-04-29 06:34:24","http://lakropack.com/s/Buy-Sell_Agreement_723121_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353551/","spamhaus"
 "353550","2020-04-29 06:34:21","http://lakropack.com/s/Buy-Sell_Agreement_3132_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353550/","spamhaus"
 "353549","2020-04-29 06:34:17","http://veniceshop.ru/wp-content/uploads/2020/04/xwrxtgh/Buy-Sell_Agreement_64879608_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353549/","spamhaus"
-"353548","2020-04-29 06:34:15","http://rentaroom.ml/oqqthv/Buy-Sell_Agreement_3534_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353548/","spamhaus"
+"353548","2020-04-29 06:34:15","http://rentaroom.ml/oqqthv/Buy-Sell_Agreement_3534_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353548/","spamhaus"
 "353547","2020-04-29 06:34:09","http://www.upendiveterinariovalencia.es/wp-content/uploads/2020/04/ywa/Buy-Sell_Agreement_1513_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353547/","spamhaus"
 "353546","2020-04-29 06:34:06","http://sportshlive.xyz/gzld/Buy-Sell_Agreement_52106_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353546/","spamhaus"
 "353545","2020-04-29 06:34:01","http://hdlive-espntv.live-sportshd.website/bpg/Buy-Sell_Agreement_5643214_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353545/","spamhaus"
@@ -274,55 +794,55 @@
 "353537","2020-04-29 06:32:28","http://41.64.170.241:38406/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353537/","geenensp"
 "353536","2020-04-29 06:32:23","https://siseco.mx/wp-content/uploads/2020/04/beomqxc/5997272/Buy-Sell_Agreement_5997272_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353536/","spamhaus"
 "353535","2020-04-29 06:32:18","http://arowanafishforsale.com/dbmwl/03134/Buy-Sell_Agreement_03134_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353535/","spamhaus"
-"353534","2020-04-29 06:24:17","http://175.212.52.9:65408/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353534/","geenensp"
-"353533","2020-04-29 06:24:13","http://jjjexx.329263.com/vi/79300/Buy-Sell_Agreement_79300_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353533/","spamhaus"
+"353534","2020-04-29 06:24:17","http://175.212.52.9:65408/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353534/","geenensp"
+"353533","2020-04-29 06:24:13","http://jjjexx.329263.com/vi/79300/Buy-Sell_Agreement_79300_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353533/","spamhaus"
 "353532","2020-04-29 06:23:40","http://208.68.39.30/mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/353532/","geenensp"
 "353531","2020-04-29 06:23:37","http://208.68.39.30/EkSgbins.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/353531/","geenensp"
 "353530","2020-04-29 06:23:34","http://218.32.118.1:13579/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353530/","geenensp"
 "353529","2020-04-29 06:23:29","https://www.eposar.com.ar/mjpen/Buy-Sell_Agreement_1922_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353529/","spamhaus"
 "353528","2020-04-29 06:22:52","http://kandiandcolor.codeworkscanada.com/v/8289188/Buy-Sell_Agreement_8289188_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353528/","spamhaus"
 "353527","2020-04-29 06:22:19","http://myexpertca.in/fomi/0042/Buy-Sell_Agreement_0042_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353527/","spamhaus"
-"353526","2020-04-29 06:21:45","https://brenleyquartzgh.com/ga/3329/Buy-Sell_Agreement_3329_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353526/","spamhaus"
+"353526","2020-04-29 06:21:45","https://brenleyquartzgh.com/ga/3329/Buy-Sell_Agreement_3329_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353526/","spamhaus"
 "353525","2020-04-29 06:21:10","http://escarateeventos.ladevi.cl/yworbn/8064878/Buy-Sell_Agreement_8064878_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353525/","spamhaus"
-"353524","2020-04-29 06:20:07","http://lagalaxy88easy.329263.com/lbrnxxd/27873/Buy-Sell_Agreement_27873_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353524/","spamhaus"
+"353524","2020-04-29 06:20:07","http://lagalaxy88easy.329263.com/lbrnxxd/27873/Buy-Sell_Agreement_27873_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353524/","spamhaus"
 "353523","2020-04-29 06:19:34","https://www.foreveramericabrands.com/xaayvq/7084/Buy-Sell_Agreement_7084_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353523/","spamhaus"
 "353522","2020-04-29 06:10:03","https://pastebin.com/raw/ZpSk6dFU","offline","malware_download","None","https://urlhaus.abuse.ch/url/353522/","JayTHL"
-"353521","2020-04-29 06:07:39","http://199.83.206.58:57977/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353521/","Gandylyan1"
+"353521","2020-04-29 06:07:39","http://199.83.206.58:57977/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353521/","Gandylyan1"
 "353520","2020-04-29 06:07:35","http://120.69.89.50:52503/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353520/","Gandylyan1"
 "353519","2020-04-29 06:07:30","http://125.41.82.28:48743/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353519/","Gandylyan1"
-"353518","2020-04-29 06:07:26","http://42.235.55.173:55956/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353518/","Gandylyan1"
+"353518","2020-04-29 06:07:26","http://42.235.55.173:55956/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353518/","Gandylyan1"
 "353517","2020-04-29 06:07:20","http://59.174.151.114:49181/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353517/","Gandylyan1"
-"353516","2020-04-29 06:06:56","http://221.160.177.226:3082/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353516/","Gandylyan1"
+"353516","2020-04-29 06:06:56","http://221.160.177.226:3082/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353516/","Gandylyan1"
 "353515","2020-04-29 06:06:51","http://125.44.22.227:40734/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353515/","Gandylyan1"
-"353514","2020-04-29 06:06:43","http://117.93.216.98:49424/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353514/","Gandylyan1"
+"353514","2020-04-29 06:06:43","http://117.93.216.98:49424/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353514/","Gandylyan1"
 "353513","2020-04-29 06:06:32","http://219.155.209.74:45121/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353513/","Gandylyan1"
-"353512","2020-04-29 06:06:27","http://183.156.0.180:46599/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353512/","Gandylyan1"
+"353512","2020-04-29 06:06:27","http://183.156.0.180:46599/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353512/","Gandylyan1"
 "353511","2020-04-29 06:06:19","http://115.55.197.69:47053/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353511/","Gandylyan1"
 "353510","2020-04-29 06:06:15","http://115.51.125.66:59405/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353510/","Gandylyan1"
-"353509","2020-04-29 06:06:10","http://123.11.73.248:35380/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353509/","Gandylyan1"
-"353508","2020-04-29 06:06:05","http://219.155.159.138:52608/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353508/","Gandylyan1"
-"353507","2020-04-29 06:06:02","http://111.43.223.79:41349/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353507/","Gandylyan1"
+"353509","2020-04-29 06:06:10","http://123.11.73.248:35380/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353509/","Gandylyan1"
+"353508","2020-04-29 06:06:05","http://219.155.159.138:52608/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353508/","Gandylyan1"
+"353507","2020-04-29 06:06:02","http://111.43.223.79:41349/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353507/","Gandylyan1"
 "353506","2020-04-29 06:05:29","http://110.182.213.91:54111/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353506/","Gandylyan1"
 "353505","2020-04-29 06:05:26","http://220.167.150.6:54705/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353505/","Gandylyan1"
-"353504","2020-04-29 06:05:12","http://116.114.95.232:39599/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353504/","Gandylyan1"
-"353503","2020-04-29 06:04:31","http://211.137.225.76:52437/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353503/","Gandylyan1"
-"353502","2020-04-29 06:04:18","http://183.130.71.167:60908/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353502/","Gandylyan1"
+"353504","2020-04-29 06:05:12","http://116.114.95.232:39599/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353504/","Gandylyan1"
+"353503","2020-04-29 06:04:31","http://211.137.225.76:52437/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353503/","Gandylyan1"
+"353502","2020-04-29 06:04:18","http://183.130.71.167:60908/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353502/","Gandylyan1"
 "353501","2020-04-29 06:04:14","http://27.41.175.86:43919/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353501/","Gandylyan1"
-"353500","2020-04-29 05:39:03","http://45.95.168.254:1691/dvrbot.sparc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353500/","zbetcheckin"
+"353500","2020-04-29 05:39:03","http://45.95.168.254:1691/dvrbot.sparc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353500/","zbetcheckin"
 "353499","2020-04-29 05:08:09","https://pastebin.com/raw/m8JBX3eU","offline","malware_download","None","https://urlhaus.abuse.ch/url/353499/","JayTHL"
 "353498","2020-04-29 05:08:04","https://pastebin.com/raw/JCD5St2R","offline","malware_download","None","https://urlhaus.abuse.ch/url/353498/","JayTHL"
-"353497","2020-04-29 04:39:20","http://85.217.170.105/armv6l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353497/","zbetcheckin"
-"353496","2020-04-29 04:39:18","http://85.217.170.105/sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353496/","zbetcheckin"
-"353495","2020-04-29 04:39:16","http://85.217.170.105/powerpc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353495/","zbetcheckin"
-"353494","2020-04-29 04:39:14","http://85.217.170.105/i586","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353494/","zbetcheckin"
-"353493","2020-04-29 04:39:12","http://85.217.170.105/armv4l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353493/","zbetcheckin"
-"353492","2020-04-29 04:39:10","http://85.217.170.105/m68k","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353492/","zbetcheckin"
+"353497","2020-04-29 04:39:20","http://85.217.170.105/armv6l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353497/","zbetcheckin"
+"353496","2020-04-29 04:39:18","http://85.217.170.105/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353496/","zbetcheckin"
+"353495","2020-04-29 04:39:16","http://85.217.170.105/powerpc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353495/","zbetcheckin"
+"353494","2020-04-29 04:39:14","http://85.217.170.105/i586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353494/","zbetcheckin"
+"353493","2020-04-29 04:39:12","http://85.217.170.105/armv4l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353493/","zbetcheckin"
+"353492","2020-04-29 04:39:10","http://85.217.170.105/m68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353492/","zbetcheckin"
 "353491","2020-04-29 04:39:08","http://46.100.56.152:59984/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/353491/","zbetcheckin"
-"353490","2020-04-29 04:39:03","http://85.217.170.105/x86","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353490/","zbetcheckin"
-"353489","2020-04-29 04:38:03","http://85.217.170.105/sparc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353489/","zbetcheckin"
-"353488","2020-04-29 04:35:05","http://85.217.170.105/mipsel","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353488/","zbetcheckin"
-"353487","2020-04-29 04:35:03","http://85.217.170.105/armv5l","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353487/","zbetcheckin"
-"353486","2020-04-29 04:34:03","http://85.217.170.105/i686","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353486/","zbetcheckin"
+"353490","2020-04-29 04:39:03","http://85.217.170.105/x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353490/","zbetcheckin"
+"353489","2020-04-29 04:38:03","http://85.217.170.105/sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353489/","zbetcheckin"
+"353488","2020-04-29 04:35:05","http://85.217.170.105/mipsel","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353488/","zbetcheckin"
+"353487","2020-04-29 04:35:03","http://85.217.170.105/armv5l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353487/","zbetcheckin"
+"353486","2020-04-29 04:34:03","http://85.217.170.105/i686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353486/","zbetcheckin"
 "353485","2020-04-29 04:31:11","https://pastebin.com/raw/cktFJ35y","offline","malware_download","None","https://urlhaus.abuse.ch/url/353485/","JayTHL"
 "353484","2020-04-29 04:31:07","https://pastebin.com/raw/7GsCwkbe","offline","malware_download","None","https://urlhaus.abuse.ch/url/353484/","JayTHL"
 "353483","2020-04-29 04:09:06","http://139.99.113.2/a-r.m-6.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353483/","zbetcheckin"
@@ -344,39 +864,39 @@
 "353467","2020-04-29 03:57:07","http://139.99.113.2/x-3.2-.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353467/","zbetcheckin"
 "353466","2020-04-29 03:57:04","http://139.99.113.2/p-p.c-.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353466/","zbetcheckin"
 "353465","2020-04-29 03:54:03","http://95.179.254.204/bins/ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353465/","zbetcheckin"
-"353464","2020-04-29 03:46:40","http://45.95.168.254:1691/dvrbot.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353464/","zbetcheckin"
+"353464","2020-04-29 03:46:40","http://45.95.168.254:1691/dvrbot.m68k","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353464/","zbetcheckin"
 "353463","2020-04-29 03:43:03","http://139.99.113.2/SnOoPy.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/353463/","zbetcheckin"
 "353462","2020-04-29 03:42:04","https://pastebin.com/raw/ND5cKisp","offline","malware_download","None","https://urlhaus.abuse.ch/url/353462/","JayTHL"
-"353461","2020-04-29 03:39:03","http://45.95.168.254:1691/dvrbot.mipsel","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353461/","zbetcheckin"
-"353460","2020-04-29 03:35:04","http://45.95.168.254:1691/dvrbot.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353460/","zbetcheckin"
+"353461","2020-04-29 03:39:03","http://45.95.168.254:1691/dvrbot.mipsel","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353461/","zbetcheckin"
+"353460","2020-04-29 03:35:04","http://45.95.168.254:1691/dvrbot.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/353460/","zbetcheckin"
 "353459","2020-04-29 03:29:36","https://pastebin.com/raw/EzUgEUmD","offline","malware_download","None","https://urlhaus.abuse.ch/url/353459/","JayTHL"
 "353458","2020-04-29 03:28:03","http://95.179.254.204/update.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/353458/","zbetcheckin"
 "353457","2020-04-29 03:05:44","http://221.210.211.132:47374/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353457/","Gandylyan1"
-"353456","2020-04-29 03:05:41","http://222.187.159.223:49940/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353456/","Gandylyan1"
+"353456","2020-04-29 03:05:41","http://222.187.159.223:49940/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353456/","Gandylyan1"
 "353455","2020-04-29 03:05:36","http://222.185.199.202:47346/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353455/","Gandylyan1"
 "353454","2020-04-29 03:05:32","http://182.124.218.35:38722/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353454/","Gandylyan1"
-"353453","2020-04-29 03:05:28","http://162.212.114.137:52449/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353453/","Gandylyan1"
-"353452","2020-04-29 03:05:23","http://27.41.222.65:36866/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353452/","Gandylyan1"
-"353451","2020-04-29 03:05:19","http://116.114.95.123:59494/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353451/","Gandylyan1"
-"353450","2020-04-29 03:05:11","http://211.137.225.56:45946/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353450/","Gandylyan1"
+"353453","2020-04-29 03:05:28","http://162.212.114.137:52449/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353453/","Gandylyan1"
+"353452","2020-04-29 03:05:23","http://27.41.222.65:36866/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353452/","Gandylyan1"
+"353451","2020-04-29 03:05:19","http://116.114.95.123:59494/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353451/","Gandylyan1"
+"353450","2020-04-29 03:05:11","http://211.137.225.56:45946/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353450/","Gandylyan1"
 "353449","2020-04-29 03:05:08","http://115.49.46.254:37608/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353449/","Gandylyan1"
-"353448","2020-04-29 03:05:04","http://111.43.223.182:55734/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353448/","Gandylyan1"
+"353448","2020-04-29 03:05:04","http://111.43.223.182:55734/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353448/","Gandylyan1"
 "353447","2020-04-29 03:05:01","http://113.75.14.148:56538/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353447/","Gandylyan1"
 "353446","2020-04-29 03:04:48","http://221.210.211.30:35859/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353446/","Gandylyan1"
 "353445","2020-04-29 03:04:42","http://1.246.223.6:3172/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353445/","Gandylyan1"
 "353444","2020-04-29 03:04:38","http://111.43.223.43:35869/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353444/","Gandylyan1"
-"353443","2020-04-29 03:04:35","http://42.225.210.47:58194/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353443/","Gandylyan1"
-"353442","2020-04-29 03:04:31","http://211.137.225.44:37367/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353442/","Gandylyan1"
-"353441","2020-04-29 03:04:28","http://216.180.117.214:45458/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353441/","Gandylyan1"
+"353443","2020-04-29 03:04:35","http://42.225.210.47:58194/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353443/","Gandylyan1"
+"353442","2020-04-29 03:04:31","http://211.137.225.44:37367/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353442/","Gandylyan1"
+"353441","2020-04-29 03:04:28","http://216.180.117.214:45458/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353441/","Gandylyan1"
 "353440","2020-04-29 03:04:23","http://115.55.9.181:59582/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353440/","Gandylyan1"
-"353439","2020-04-29 03:04:15","http://115.213.176.80:37671/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353439/","Gandylyan1"
+"353439","2020-04-29 03:04:15","http://115.213.176.80:37671/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353439/","Gandylyan1"
 "353438","2020-04-29 03:04:10","http://211.137.225.146:35906/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353438/","Gandylyan1"
 "353437","2020-04-29 03:04:04","http://42.234.108.186:47016/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353437/","Gandylyan1"
 "353436","2020-04-29 02:45:04","http://159.89.180.180/boredbins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/353436/","zbetcheckin"
 "353435","2020-04-29 02:40:04","https://pastebin.com/raw/SrVaVL2B","offline","malware_download","None","https://urlhaus.abuse.ch/url/353435/","JayTHL"
-"353434","2020-04-29 02:38:02","http://45.148.122.113/mods.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/353434/","zbetcheckin"
+"353434","2020-04-29 02:38:02","http://45.148.122.113/mods.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/353434/","zbetcheckin"
 "353433","2020-04-29 00:14:05","http://103.146.124.143/21","online","malware_download","elf","https://urlhaus.abuse.ch/url/353433/","zbetcheckin"
-"353432","2020-04-29 00:10:07","http://www.zskyjov.cz/data/layout/flags/rtask.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/353432/","zbetcheckin"
+"353432","2020-04-29 00:10:07","http://www.zskyjov.cz/data/layout/flags/rtask.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/353432/","zbetcheckin"
 "353431","2020-04-29 00:06:03","http://110.179.30.218:39032/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353431/","Gandylyan1"
 "353430","2020-04-29 00:05:59","http://172.39.92.105:41418/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353430/","Gandylyan1"
 "353429","2020-04-29 00:05:27","http://58.243.124.51:49946/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353429/","Gandylyan1"
@@ -387,15 +907,15 @@
 "353424","2020-04-29 00:04:36","http://103.100.222.101:33961/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353424/","Gandylyan1"
 "353423","2020-04-29 00:04:04","http://14.113.228.186:36522/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353423/","Gandylyan1"
 "353422","2020-04-29 00:03:32","http://111.40.79.79:49979/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353422/","Gandylyan1"
-"353421","2020-04-29 00:03:27","http://116.114.95.234:43248/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353421/","Gandylyan1"
-"353420","2020-04-29 00:03:23","http://111.43.223.86:46764/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353420/","Gandylyan1"
+"353421","2020-04-29 00:03:27","http://116.114.95.234:43248/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353421/","Gandylyan1"
+"353420","2020-04-29 00:03:23","http://111.43.223.86:46764/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353420/","Gandylyan1"
 "353419","2020-04-29 00:03:19","http://216.180.117.190:57372/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353419/","Gandylyan1"
-"353418","2020-04-29 00:03:14","http://111.43.223.151:56264/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353418/","Gandylyan1"
+"353418","2020-04-29 00:03:14","http://111.43.223.151:56264/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353418/","Gandylyan1"
 "353417","2020-04-29 00:03:11","http://60.188.220.75:44789/Mozi.m","offline","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353417/","Gandylyan1"
 "353416","2020-04-29 00:03:05","http://121.224.176.139:41052/Mozi.m","online","malware_download","DDoS Bot,elf,mirai,Mozi","https://urlhaus.abuse.ch/url/353416/","Gandylyan1"
 "353415","2020-04-29 00:00:10","https://pastebin.com/raw/MVWBLJ8S","offline","malware_download","None","https://urlhaus.abuse.ch/url/353415/","JayTHL"
-"353414","2020-04-28 23:33:02","http://88.218.17.149/ZXRRPWKJR","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353414/","zbetcheckin"
-"353413","2020-04-28 23:29:03","http://88.218.17.149/KGGVXEVSZ","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353413/","zbetcheckin"
+"353414","2020-04-28 23:33:02","http://88.218.17.149/ZXRRPWKJR","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353414/","zbetcheckin"
+"353413","2020-04-28 23:29:03","http://88.218.17.149/KGGVXEVSZ","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353413/","zbetcheckin"
 "353412","2020-04-28 22:58:05","http://182.127.21.105:51609/Mozi.m","offline","malware_download","None","https://urlhaus.abuse.ch/url/353412/","JayTHL"
 "353411","2020-04-28 22:23:10","http://95.179.254.204/bins/mpsl","offline","malware_download",",DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/353411/","Gandylyan1"
 "353410","2020-04-28 22:23:08","http://95.179.254.204/bins/mips","offline","malware_download",",DDoS Bot,elf,mirai","https://urlhaus.abuse.ch/url/353410/","Gandylyan1"
@@ -406,21 +926,21 @@
 "353405","2020-04-28 21:45:13","https://pastebin.com/raw/b9dFkCVG","offline","malware_download","None","https://urlhaus.abuse.ch/url/353405/","JayTHL"
 "353404","2020-04-28 21:04:03","http://115.49.74.215:45757/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353404/","Gandylyan1"
 "353403","2020-04-28 21:03:59","http://60.189.29.124:51717/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353403/","Gandylyan1"
-"353402","2020-04-28 21:03:54","http://111.42.103.37:36346/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353402/","Gandylyan1"
+"353402","2020-04-28 21:03:54","http://111.42.103.37:36346/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353402/","Gandylyan1"
 "353401","2020-04-28 21:03:51","http://162.212.113.149:47364/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353401/","Gandylyan1"
 "353400","2020-04-28 21:03:47","http://123.13.5.90:57818/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353400/","Gandylyan1"
-"353399","2020-04-28 21:03:43","http://42.230.253.28:46581/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353399/","Gandylyan1"
+"353399","2020-04-28 21:03:43","http://42.230.253.28:46581/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353399/","Gandylyan1"
 "353398","2020-04-28 21:03:39","http://211.137.225.2:58348/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353398/","Gandylyan1"
-"353397","2020-04-28 21:03:37","http://211.137.225.129:43781/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353397/","Gandylyan1"
+"353397","2020-04-28 21:03:37","http://211.137.225.129:43781/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353397/","Gandylyan1"
 "353396","2020-04-28 21:03:32","http://115.48.151.80:46927/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353396/","Gandylyan1"
 "353395","2020-04-28 21:03:28","http://111.42.67.73:36894/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353395/","Gandylyan1"
-"353394","2020-04-28 21:03:24","http://27.41.182.54:52727/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353394/","Gandylyan1"
+"353394","2020-04-28 21:03:24","http://27.41.182.54:52727/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353394/","Gandylyan1"
 "353393","2020-04-28 21:03:18","http://49.89.139.161:51008/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353393/","Gandylyan1"
 "353392","2020-04-28 21:03:10","http://42.230.253.144:39125/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353392/","Gandylyan1"
 "353391","2020-04-28 21:03:07","http://162.212.114.88:44356/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353391/","Gandylyan1"
-"353390","2020-04-28 20:15:10","http://88.218.17.149/lelznet.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/353390/","zbetcheckin"
+"353390","2020-04-28 20:15:10","http://88.218.17.149/lelznet.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/353390/","zbetcheckin"
 "353389","2020-04-28 19:54:33","https://pastebin.com/raw/cX7Dc0w4","offline","malware_download","None","https://urlhaus.abuse.ch/url/353389/","JayTHL"
-"353388","2020-04-28 19:48:29","https://www.eposar.com.ar/mjpen/15718/Buy-Sell_Agreement_15718_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353388/","spamhaus"
+"353388","2020-04-28 19:48:29","https://www.eposar.com.ar/mjpen/15718/Buy-Sell_Agreement_15718_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353388/","spamhaus"
 "353387","2020-04-28 19:48:12","https://siseco.mx/wp-content/uploads/2020/04/beomqxc/Buy-Sell_Agreement_73071_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353387/","spamhaus"
 "353386","2020-04-28 19:48:06","https://www.loodgieterjoost.be/wp-content/uploads/2020/04/osiwprp/65765290/Buy-Sell_Agreement_65765290_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353386/","spamhaus"
 "353385","2020-04-28 19:47:47","http://23.95.89.71/skid.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/353385/","JayTHL"
@@ -433,12 +953,12 @@
 "353378","2020-04-28 19:42:14","https://pastebin.com/raw/pNdajfcr","offline","malware_download","None","https://urlhaus.abuse.ch/url/353378/","JayTHL"
 "353377","2020-04-28 19:42:10","http://bookmytripping.com/tgxmxcm/Buy-Sell_Agreement_0929_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353377/","spamhaus"
 "353376","2020-04-28 19:42:06","http://canvasprint.ru/wp-content/uploads/2020/04/izrz/2285543/Buy-Sell_Agreement_2285543_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353376/","spamhaus"
-"353375","2020-04-28 19:36:31","http://rentaroom.ml/oqqthv/710814/Buy-Sell_Agreement_710814_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353375/","spamhaus"
+"353375","2020-04-28 19:36:31","http://rentaroom.ml/oqqthv/710814/Buy-Sell_Agreement_710814_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353375/","spamhaus"
 "353374","2020-04-28 19:36:26","https://siseco.mx/wp-content/uploads/2020/04/beomqxc/Buy-Sell_Agreement_19253_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353374/","spamhaus"
 "353373","2020-04-28 19:36:20","https://drwendyellis.com/laqrip/89870436/Buy-Sell_Agreement_89870436_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353373/","spamhaus"
 "353372","2020-04-28 19:36:07","http://arowanafishforsale.com/dbmwl/03121/Buy-Sell_Agreement_03121_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353372/","spamhaus"
 "353371","2020-04-28 19:32:05","http://kosslouer.com/uu/596088/Buy-Sell_Agreement_596088_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353371/","spamhaus"
-"353370","2020-04-28 19:32:03","http://healtina.com/xcaspvi/Buy-Sell_Agreement_1596675_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353370/","spamhaus"
+"353370","2020-04-28 19:32:03","http://healtina.com/xcaspvi/Buy-Sell_Agreement_1596675_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353370/","spamhaus"
 "353369","2020-04-28 19:27:13","https://rugab.se/c/81176/Buy-Sell_Agreement_81176_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353369/","spamhaus"
 "353368","2020-04-28 19:27:10","http://maharatal3zl.com/xdlycfp/2930651/Buy-Sell_Agreement_2930651_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353368/","spamhaus"
 "353367","2020-04-28 19:27:05","http://earningtipsbd.com/pn/Buy-Sell_Agreement_2344798_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353367/","spamhaus"
@@ -455,7 +975,7 @@
 "353356","2020-04-28 19:24:30","http://dentistesamson.com/wp-content/plugins/LayerSlider/demos/carousel/framework.php","offline","malware_download","Dridex,zip","https://urlhaus.abuse.ch/url/353356/","malware_traffic"
 "353355","2020-04-28 19:24:27","http://amedeoscognamiglio.329263.com/i/Buy-Sell_Agreement_5137311_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353355/","spamhaus"
 "353354","2020-04-28 19:24:22","https://www.dzyzz.cn/wp-content/plugins/apikey/zwj/7778718/Buy-Sell_Agreement_7778718_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353354/","spamhaus"
-"353353","2020-04-28 19:24:14","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_2467273_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353353/","spamhaus"
+"353353","2020-04-28 19:24:14","http://ufabet168168.329263.com/tmpf/Buy-Sell_Agreement_2467273_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353353/","spamhaus"
 "353352","2020-04-28 19:24:09","http://hdlive-espntv.live-sportshd.website/bpg/Buy-Sell_Agreement_7257829_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353352/","spamhaus"
 "353351","2020-04-28 19:24:07","http://kgfs3.329263.com/cvsf/Buy-Sell_Agreement_2272_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353351/","spamhaus"
 "353350","2020-04-28 19:24:03","http://bookmytripping.com/tgxmxcm/49493346/Buy-Sell_Agreement_49493346_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353350/","spamhaus"
@@ -467,7 +987,7 @@
 "353344","2020-04-28 19:17:04","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/Buy-Sell_Agreement_80104_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353344/","spamhaus"
 "353343","2020-04-28 19:04:56","https://paste.ee/r/Fb8Wd","offline","malware_download","Encoded","https://urlhaus.abuse.ch/url/353343/","Jouliok"
 "353342","2020-04-28 19:04:48","http://ptsslot.329263.com/royph/8816/Buy-Sell_Agreement_8816_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353342/","spamhaus"
-"353341","2020-04-28 19:04:32","http://rentaroom.ml/oqqthv/6490074/Buy-Sell_Agreement_6490074_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353341/","spamhaus"
+"353341","2020-04-28 19:04:32","http://rentaroom.ml/oqqthv/6490074/Buy-Sell_Agreement_6490074_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353341/","spamhaus"
 "353340","2020-04-28 19:04:29","https://how.ph/mrb/2579/Buy-Sell_Agreement_2579_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353340/","spamhaus"
 "353339","2020-04-28 19:04:21","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/Buy-Sell_Agreement_46431540_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353339/","spamhaus"
 "353338","2020-04-28 19:04:17","http://hdlive-espntv.live-sportshd.website/bpg/5395355/Buy-Sell_Agreement_5395355_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353338/","spamhaus"
@@ -476,11 +996,11 @@
 "353335","2020-04-28 19:04:06","https://brenleyquartzgh.com/ga/Buy-Sell_Agreement_21615_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353335/","spamhaus"
 "353334","2020-04-28 19:03:02","http://fifa555easy.329263.com/x/38011086/Buy-Sell_Agreement_38011086_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353334/","spamhaus"
 "353333","2020-04-28 19:02:55","http://escarateeventos.ladevi.cl/yworbn/44978/Buy-Sell_Agreement_44978_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353333/","spamhaus"
-"353332","2020-04-28 19:02:52","https://nmal.info/ntsphsl/84675/Buy-Sell_Agreement_84675_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353332/","spamhaus"
+"353332","2020-04-28 19:02:52","https://nmal.info/ntsphsl/84675/Buy-Sell_Agreement_84675_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353332/","spamhaus"
 "353331","2020-04-28 19:02:50","http://lagalaxy88easy.329263.com/lbrnxxd/Buy-Sell_Agreement_7744679_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353331/","spamhaus"
 "353330","2020-04-28 19:02:45","http://veniceshop.ru/wp-content/uploads/2020/04/xwrxtgh/Buy-Sell_Agreement_624286_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353330/","spamhaus"
 "353329","2020-04-28 19:02:42","https://delmaestro.cl/wtdeng/Buy-Sell_Agreement_3701_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353329/","spamhaus"
-"353328","2020-04-28 19:02:38","https://brenleyquartzgh.com/ga/91417284/Buy-Sell_Agreement_91417284_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353328/","spamhaus"
+"353328","2020-04-28 19:02:38","https://brenleyquartzgh.com/ga/91417284/Buy-Sell_Agreement_91417284_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353328/","spamhaus"
 "353327","2020-04-28 19:02:33","http://elabugablog.ru/zzj/Buy-Sell_Agreement_10640_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353327/","spamhaus"
 "353326","2020-04-28 19:02:30","https://dienmaycu.vn/rcckjv/4926121/Buy-Sell_Agreement_4926121_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353326/","spamhaus"
 "353325","2020-04-28 19:02:26","http://avto-pro.hostenko.com/too/Buy-Sell_Agreement_738797_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353325/","spamhaus"
@@ -490,8 +1010,8 @@
 "353321","2020-04-28 19:01:32","http://88.156.169.98:59344/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353321/","geenensp"
 "353320","2020-04-28 19:01:22","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_99219_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353320/","spamhaus"
 "353319","2020-04-28 19:01:19","http://www.upendiveterinariovalencia.es/wp-content/uploads/2020/04/ywa/Buy-Sell_Agreement_88438622_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353319/","spamhaus"
-"353318","2020-04-28 19:01:13","http://livetvsports.ml/z/38282630/Buy-Sell_Agreement_38282630_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353318/","spamhaus"
-"353317","2020-04-28 19:00:38","https://nmal.info/ntsphsl/8805/Buy-Sell_Agreement_8805_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353317/","spamhaus"
+"353318","2020-04-28 19:01:13","http://livetvsports.ml/z/38282630/Buy-Sell_Agreement_38282630_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353318/","spamhaus"
+"353317","2020-04-28 19:00:38","https://nmal.info/ntsphsl/8805/Buy-Sell_Agreement_8805_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353317/","spamhaus"
 "353316","2020-04-28 19:00:05","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/29202/Buy-Sell_Agreement_29202_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353316/","spamhaus"
 "353315","2020-04-28 18:59:33","http://elabugablog.ru/zzj/Buy-Sell_Agreement_67570_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353315/","spamhaus"
 "353314","2020-04-28 18:27:03","http://88.218.16.37/NAnazCgFwSxQ8sK.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353314/","zbetcheckin"
@@ -501,8 +1021,8 @@
 "353310","2020-04-28 18:20:38","http://modcloudserver.eu/stanz/stanz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353310/","zbetcheckin"
 "353309","2020-04-28 18:13:17","http://ufabet168168.329263.com/tmpf/9173652/Buy-Sell_Agreement_9173652_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353309/","spamhaus"
 "353308","2020-04-28 18:13:03","http://bookmytripping.com/tgxmxcm/Buy-Sell_Agreement_04173399_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353308/","spamhaus"
-"353307","2020-04-28 18:08:09","http://mlbfreestream.gq/n/042516/Buy-Sell_Agreement_042516_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353307/","spamhaus"
-"353306","2020-04-28 18:08:05","http://healtina.com/xcaspvi/62858/Buy-Sell_Agreement_62858_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353306/","spamhaus"
+"353307","2020-04-28 18:08:09","http://mlbfreestream.gq/n/042516/Buy-Sell_Agreement_042516_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353307/","spamhaus"
+"353306","2020-04-28 18:08:05","http://healtina.com/xcaspvi/62858/Buy-Sell_Agreement_62858_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353306/","spamhaus"
 "353305","2020-04-28 18:06:48","http://bbfjjf8.com/we20lo85/aio0i32p.php?l=nok12.cab","offline","malware_download","geofenced,us,USA,Valak","https://urlhaus.abuse.ch/url/353305/","JAMESWT_MHT"
 "353304","2020-04-28 18:06:46","http://bbfjjf8.com/we20lo85/aio0i32p.php?l=nok11.cab","offline","malware_download","geofenced,us,USA,Valak","https://urlhaus.abuse.ch/url/353304/","JAMESWT_MHT"
 "353303","2020-04-28 18:06:44","http://bbfjjf8.com/we20lo85/aio0i32p.php?l=nok10.cab","offline","malware_download","geofenced,us,USA,Valak","https://urlhaus.abuse.ch/url/353303/","JAMESWT_MHT"
@@ -514,13 +1034,13 @@
 "353297","2020-04-28 18:06:33","http://bbfjjf8.com/we20lo85/aio0i32p.php?l=nok3.cab","offline","malware_download","geofenced,us,USA,Valak","https://urlhaus.abuse.ch/url/353297/","JAMESWT_MHT"
 "353296","2020-04-28 18:06:28","http://bbfjjf8.com/we20lo85/aio0i32p.php?l=nok2.cab","offline","malware_download","geofenced,us,USA,Valak","https://urlhaus.abuse.ch/url/353296/","JAMESWT_MHT"
 "353295","2020-04-28 18:06:23","http://bbfjjf8.com/we20lo85/aio0i32p.php?l=nok1.cab","offline","malware_download","geofenced,us,USA,Valak","https://urlhaus.abuse.ch/url/353295/","JAMESWT_MHT"
-"353294","2020-04-28 18:06:19","https://dienmaycu.vn/rcckjv/Buy-Sell_Agreement_4487_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353294/","spamhaus"
-"353293","2020-04-28 18:06:11","https://www.foreveramericabrands.com/xaayvq/7554389/Buy-Sell_Agreement_7554389_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353293/","spamhaus"
+"353294","2020-04-28 18:06:19","https://dienmaycu.vn/rcckjv/Buy-Sell_Agreement_4487_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353294/","spamhaus"
+"353293","2020-04-28 18:06:11","https://www.foreveramericabrands.com/xaayvq/7554389/Buy-Sell_Agreement_7554389_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353293/","spamhaus"
 "353292","2020-04-28 18:06:06","https://www.mfpburundi.bi/wp-content/uploads/2020/04/pb/Buy-Sell_Agreement_36241823_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353292/","spamhaus"
-"353291","2020-04-28 18:05:31","http://182.116.107.161:50650/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353291/","Gandylyan1"
+"353291","2020-04-28 18:05:31","http://182.116.107.161:50650/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353291/","Gandylyan1"
 "353290","2020-04-28 18:05:27","http://112.123.2.207:53970/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353290/","Gandylyan1"
 "353289","2020-04-28 18:05:18","http://77.43.236.254:43288/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353289/","Gandylyan1"
-"353288","2020-04-28 18:04:46","http://122.241.24.146:53809/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353288/","Gandylyan1"
+"353288","2020-04-28 18:04:46","http://122.241.24.146:53809/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353288/","Gandylyan1"
 "353287","2020-04-28 18:04:42","http://31.146.124.61:36542/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353287/","Gandylyan1"
 "353286","2020-04-28 18:04:39","http://1.246.222.41:4743/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353286/","Gandylyan1"
 "353285","2020-04-28 18:04:33","http://182.126.238.159:48829/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353285/","Gandylyan1"
@@ -529,7 +1049,7 @@
 "353282","2020-04-28 18:04:18","http://116.177.178.206:46789/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353282/","Gandylyan1"
 "353281","2020-04-28 18:04:13","http://89.148.204.161:43288/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353281/","Gandylyan1"
 "353280","2020-04-28 18:04:09","http://162.212.115.125:55939/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353280/","Gandylyan1"
-"353279","2020-04-28 18:04:05","http://182.119.102.175:52826/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353279/","Gandylyan1"
+"353279","2020-04-28 18:04:05","http://182.119.102.175:52826/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353279/","Gandylyan1"
 "353278","2020-04-28 17:57:41","http://healtina.com/xcaspvi/9824902/Buy-Sell_Agreement_9824902_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353278/","spamhaus"
 "353277","2020-04-28 17:57:08","http://avto-pro.hostenko.com/too/4955024/Buy-Sell_Agreement_4955024_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353277/","spamhaus"
 "353276","2020-04-28 17:56:33","http://www.gainsdirectory.com/imtlt/Buy-Sell_Agreement_7954433_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353276/","spamhaus"
@@ -543,25 +1063,25 @@
 "353268","2020-04-28 17:45:57","http://tulmix-beton.ru/hpoakm/6202281/Buy-Sell_Agreement_6202281_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353268/","spamhaus"
 "353267","2020-04-28 17:45:50","http://djonur24.de/hdc/Buy-Sell_Agreement_6780_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353267/","spamhaus"
 "353266","2020-04-28 17:45:41","http://hdlive-espntv.live-sportshd.website/bpg/Buy-Sell_Agreement_43738_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353266/","spamhaus"
-"353265","2020-04-28 17:45:23","https://drwendyellis.com/laqrip/Buy-Sell_Agreement_456989_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353265/","spamhaus"
+"353265","2020-04-28 17:45:23","https://drwendyellis.com/laqrip/Buy-Sell_Agreement_456989_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353265/","spamhaus"
 "353264","2020-04-28 17:45:18","http://arowanafishforsale.com/dbmwl/Buy-Sell_Agreement_2539_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353264/","spamhaus"
 "353263","2020-04-28 17:34:26","http://www.alnahrainfilminstitute.com/kuhjz/Buy-Sell_Agreement_8555_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353263/","spamhaus"
 "353262","2020-04-28 17:34:20","https://nmal.info/ntsphsl/Buy-Sell_Agreement_726528_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353262/","spamhaus"
 "353261","2020-04-28 17:34:15","http://earningtipsbd.com/pn/Buy-Sell_Agreement_10363433_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353261/","spamhaus"
 "353260","2020-04-28 17:34:09","http://www.alnahrainfilminstitute.com/kuhjz/Buy-Sell_Agreement_94655_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353260/","spamhaus"
-"353259","2020-04-28 17:34:07","http://rentaroom.ml/oqqthv/9509826/Buy-Sell_Agreement_9509826_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353259/","spamhaus"
-"353258","2020-04-28 17:17:18","http://jjjexx.329263.com/vi/Buy-Sell_Agreement_6069_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353258/","spamhaus"
-"353257","2020-04-28 17:17:11","http://jjjexx.329263.com/vi/786917/Buy-Sell_Agreement_786917_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353257/","spamhaus"
+"353259","2020-04-28 17:34:07","http://rentaroom.ml/oqqthv/9509826/Buy-Sell_Agreement_9509826_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353259/","spamhaus"
+"353258","2020-04-28 17:17:18","http://jjjexx.329263.com/vi/Buy-Sell_Agreement_6069_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353258/","spamhaus"
+"353257","2020-04-28 17:17:11","http://jjjexx.329263.com/vi/786917/Buy-Sell_Agreement_786917_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353257/","spamhaus"
 "353256","2020-04-28 17:17:05","http://mlbfreestream.gq/n/Buy-Sell_Agreement_764238_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353256/","spamhaus"
 "353255","2020-04-28 17:16:14","https://miraab.ir/wp-content/uploads/2020/04/tk/298413/Buy-Sell_Agreement_298413_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353255/","spamhaus"
 "353254","2020-04-28 17:16:10","http://sportstrem.gq/imqmxkw/0835/Buy-Sell_Agreement_0835_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353254/","spamhaus"
 "353253","2020-04-28 17:14:18","http://www.alnahrainfilminstitute.com/kuhjz/Buy-Sell_Agreement_744702_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353253/","spamhaus"
 "353252","2020-04-28 17:14:16","https://brenleyquartzgh.com/ga/50602/Buy-Sell_Agreement_50602_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353252/","spamhaus"
-"353251","2020-04-28 17:14:10","http://lagalaxy88easy.329263.com/lbrnxxd/Buy-Sell_Agreement_538674_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353251/","spamhaus"
-"353250","2020-04-28 17:12:08","http://vaeqpu.329263.com/al/73044112/Buy-Sell_Agreement_73044112_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353250/","spamhaus"
+"353251","2020-04-28 17:14:10","http://lagalaxy88easy.329263.com/lbrnxxd/Buy-Sell_Agreement_538674_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353251/","spamhaus"
+"353250","2020-04-28 17:12:08","http://vaeqpu.329263.com/al/73044112/Buy-Sell_Agreement_73044112_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353250/","spamhaus"
 "353249","2020-04-28 17:12:05","http://kandiandcolor.codeworkscanada.com/v/Buy-Sell_Agreement_6751913_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353249/","spamhaus"
 "353248","2020-04-28 17:10:06","http://uewizi.com/_flox.exe","offline","malware_download","Dridex,exe","https://urlhaus.abuse.ch/url/353248/","abuse_ch"
-"353247","2020-04-28 17:06:12","http://myexpertca.in/fomi/655664/Buy-Sell_Agreement_655664_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353247/","spamhaus"
+"353247","2020-04-28 17:06:12","http://myexpertca.in/fomi/655664/Buy-Sell_Agreement_655664_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353247/","spamhaus"
 "353246","2020-04-28 17:06:04","http://cpagrace.cl/k/Buy-Sell_Agreement_93929_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353246/","spamhaus"
 "353245","2020-04-28 17:04:56","http://79.179.199.159:19730/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353245/","geenensp"
 "353244","2020-04-28 17:04:53","https://alucard.online/yarx/Buy-Sell_Agreement_8227546_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353244/","spamhaus"
@@ -580,10 +1100,10 @@
 "353231","2020-04-28 17:01:05","http://denverktrade.xyz/css/bin_BgdIEZ91.bin","offline","malware_download","encrypted,GuLoader,opendir","https://urlhaus.abuse.ch/url/353231/","abuse_ch"
 "353230","2020-04-28 17:00:07","http://denverktrade.xyz/css/bin_KkhYIB85.bin","offline","malware_download","encrypted,Formbook,GuLoader,opendir","https://urlhaus.abuse.ch/url/353230/","abuse_ch"
 "353229","2020-04-28 16:52:25","http://amedeoscognamiglio.329263.com/i/8825/Buy-Sell_Agreement_8825_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353229/","spamhaus"
-"353228","2020-04-28 16:52:22","http://anadolutatili.com/xtfdux/1648/Buy-Sell_Agreement_1648_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353228/","spamhaus"
+"353228","2020-04-28 16:52:22","http://anadolutatili.com/xtfdux/1648/Buy-Sell_Agreement_1648_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353228/","spamhaus"
 "353227","2020-04-28 16:52:19","https://www.foreveramericabrands.com/xaayvq/4629/Buy-Sell_Agreement_4629_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353227/","spamhaus"
 "353226","2020-04-28 16:52:16","http://kosslouer.com/uu/3207/Buy-Sell_Agreement_3207_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353226/","spamhaus"
-"353225","2020-04-28 16:52:13","https://www.dzyzz.cn/wp-content/plugins/apikey/zwj/24506466/Buy-Sell_Agreement_24506466_04272020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353225/","spamhaus"
+"353225","2020-04-28 16:52:13","https://www.dzyzz.cn/wp-content/plugins/apikey/zwj/24506466/Buy-Sell_Agreement_24506466_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353225/","spamhaus"
 "353224","2020-04-28 16:52:06","http://kandiandcolor.codeworkscanada.com/v/85073/Buy-Sell_Agreement_85073_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353224/","spamhaus"
 "353223","2020-04-28 16:52:02","http://yucatanentiemporeal.com/wp-content/uploads/2020/04/nwl/000923/Buy-Sell_Agreement_000923_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353223/","spamhaus"
 "353222","2020-04-28 16:51:56","http://cyberemprende.cl/wjoh/Buy-Sell_Agreement_01828_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353222/","spamhaus"
@@ -592,8 +1112,8 @@
 "353219","2020-04-28 16:51:39","https://aliyousefpoor.com/urcu/Buy-Sell_Agreement_173827_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353219/","spamhaus"
 "353218","2020-04-28 16:51:35","https://www.dzyzz.cn/wp-content/plugins/apikey/zwj/Buy-Sell_Agreement_0131373_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353218/","spamhaus"
 "353217","2020-04-28 16:51:20","http://elabugablog.ru/zzj/Buy-Sell_Agreement_956935_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353217/","spamhaus"
-"353216","2020-04-28 16:51:17","http://147.75.67.253/bins/arm8","online","malware_download","None","https://urlhaus.abuse.ch/url/353216/","anonymous"
-"353215","2020-04-28 16:51:05","http://147.75.67.253/bins/arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/353215/","anonymous"
+"353216","2020-04-28 16:51:17","http://147.75.67.253/bins/arm8","offline","malware_download","None","https://urlhaus.abuse.ch/url/353216/","anonymous"
+"353215","2020-04-28 16:51:05","http://147.75.67.253/bins/arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/353215/","anonymous"
 "353214","2020-04-28 16:50:05","http://merbay.ru/wp-content/plugins/lucas_eLPHjMks0.bin","offline","malware_download","AgentTesla,GuLoader","https://urlhaus.abuse.ch/url/353214/","abuse_ch"
 "353213","2020-04-28 16:31:28","http://167.114.129.9/bins/dark.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/353213/","JayTHL"
 "353212","2020-04-28 16:31:26","http://167.114.129.9/bins/dark.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/353212/","JayTHL"
@@ -626,8 +1146,8 @@
 "353185","2020-04-28 15:55:03","http://104.168.44.166/bins/dvrbot.arc","offline","malware_download","None","https://urlhaus.abuse.ch/url/353185/","JayTHL"
 "353184","2020-04-28 15:35:09","http://bookmytripping.com/tgxmxcm/05756348/Buy-Sell_Agreement_05756348_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353184/","spamhaus"
 "353183","2020-04-28 15:35:05","https://www.foreveramericabrands.com/xaayvq/Buy-Sell_Agreement_6525353_04272020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353183/","spamhaus"
-"353182","2020-04-28 15:29:19","http://147.75.67.253/bins/arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/353182/","anonymous"
-"353181","2020-04-28 15:29:12","http://147.75.67.253/bins/arm5","online","malware_download","None","https://urlhaus.abuse.ch/url/353181/","anonymous"
+"353182","2020-04-28 15:29:19","http://147.75.67.253/bins/arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/353182/","anonymous"
+"353181","2020-04-28 15:29:12","http://147.75.67.253/bins/arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/353181/","anonymous"
 "353180","2020-04-28 15:23:03","https://pastebin.com/raw/KekGG3V1","offline","malware_download","None","https://urlhaus.abuse.ch/url/353180/","JayTHL"
 "353179","2020-04-28 15:20:05","http://220.82.140.17:52649/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353179/","geenensp"
 "353178","2020-04-28 15:16:04","https://onedrive.live.com/download?cid=165468846F076EE7&resid=165468846F076EE7%21118&authkey=ANTAsh3IG98aQTE","online","malware_download","None","https://urlhaus.abuse.ch/url/353178/","JayTHL"
@@ -642,14 +1162,14 @@
 "353169","2020-04-28 15:05:22","http://111.43.223.53:58587/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353169/","Gandylyan1"
 "353168","2020-04-28 15:04:36","http://218.21.170.85:41086/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353168/","Gandylyan1"
 "353167","2020-04-28 15:04:33","http://115.59.77.8:50096/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353167/","Gandylyan1"
-"353166","2020-04-28 15:04:27","http://111.43.223.201:41979/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353166/","Gandylyan1"
+"353166","2020-04-28 15:04:27","http://111.43.223.201:41979/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353166/","Gandylyan1"
 "353165","2020-04-28 15:04:24","http://182.113.55.206:50053/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353165/","Gandylyan1"
 "353164","2020-04-28 15:04:17","http://172.39.12.113:43931/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353164/","Gandylyan1"
 "353163","2020-04-28 15:03:45","http://123.10.30.133:54258/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353163/","Gandylyan1"
 "353162","2020-04-28 15:03:40","http://218.21.171.55:59848/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353162/","Gandylyan1"
 "353161","2020-04-28 15:03:37","http://123.122.232.190:48768/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353161/","Gandylyan1"
 "353160","2020-04-28 15:03:33","http://116.22.49.238:46488/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353160/","Gandylyan1"
-"353159","2020-04-28 15:03:24","http://49.68.250.118:55732/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353159/","Gandylyan1"
+"353159","2020-04-28 15:03:24","http://49.68.250.118:55732/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353159/","Gandylyan1"
 "353158","2020-04-28 15:03:06","http://117.63.51.128:41970/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353158/","Gandylyan1"
 "353157","2020-04-28 14:59:33","https://pastebin.com/raw/xJEXBszH","offline","malware_download","None","https://urlhaus.abuse.ch/url/353157/","JayTHL"
 "353156","2020-04-28 14:56:39","http://mcdc.club/pics/103211187.jpg","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353156/","zbetcheckin"
@@ -677,15 +1197,15 @@
 "353134","2020-04-28 14:19:11","http://arcyten.cl/iulbxki/88888.png","offline","malware_download","exe,Qakbot,Quakbot,spx107","https://urlhaus.abuse.ch/url/353134/","lazyactivist192"
 "353133","2020-04-28 14:19:07","http://clair-salon.info/docs_xgy/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx106","https://urlhaus.abuse.ch/url/353133/","lazyactivist192"
 "353132","2020-04-28 14:18:55","http://svvlive.com/docs_fbz/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx106","https://urlhaus.abuse.ch/url/353132/","lazyactivist192"
-"353131","2020-04-28 14:18:50","http://tianmaouae.com/docs_9qu/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx106","https://urlhaus.abuse.ch/url/353131/","lazyactivist192"
-"353130","2020-04-28 14:18:40","http://beforeshithappens.com/docs_2re/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx106","https://urlhaus.abuse.ch/url/353130/","lazyactivist192"
+"353131","2020-04-28 14:18:50","http://tianmaouae.com/docs_9qu/55555.png","online","malware_download","exe,Qakbot,Quakbot,spx106","https://urlhaus.abuse.ch/url/353131/","lazyactivist192"
+"353130","2020-04-28 14:18:40","http://beforeshithappens.com/docs_2re/55555.png","online","malware_download","exe,Qakbot,Quakbot,spx106","https://urlhaus.abuse.ch/url/353130/","lazyactivist192"
 "353129","2020-04-28 14:18:35","http://themmacoach.com/wp-content/uploads/2020/04/docs_cv0/55555.png","online","malware_download","exe,Qakbot,Quakbot,spx106","https://urlhaus.abuse.ch/url/353129/","lazyactivist192"
-"353128","2020-04-28 14:18:30","http://y-sani.com/docs_bcx/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx106","https://urlhaus.abuse.ch/url/353128/","lazyactivist192"
+"353128","2020-04-28 14:18:30","http://y-sani.com/docs_bcx/55555.png","online","malware_download","exe,Qakbot,Quakbot,spx106","https://urlhaus.abuse.ch/url/353128/","lazyactivist192"
 "353127","2020-04-28 14:05:12","http://1.246.223.15:3221/","online","malware_download","None","https://urlhaus.abuse.ch/url/353127/","JayTHL"
 "353126","2020-04-28 14:05:06","http://1.246.223.15:3221/i","online","malware_download","None","https://urlhaus.abuse.ch/url/353126/","JayTHL"
 "353125","2020-04-28 13:56:33","https://pastebin.com/raw/T3DXfqKx","offline","malware_download","None","https://urlhaus.abuse.ch/url/353125/","JayTHL"
 "353124","2020-04-28 13:52:04","http://189.223.27.185:37278/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353124/","geenensp"
-"353123","2020-04-28 13:42:41","http://201.202.55.118:37469/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353123/","geenensp"
+"353123","2020-04-28 13:42:41","http://201.202.55.118:37469/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353123/","geenensp"
 "353122","2020-04-28 13:18:26","http://mail.autoshops.online/gbh.exe","offline","malware_download","exe,ParallaxRAT","https://urlhaus.abuse.ch/url/353122/","abuse_ch"
 "353121","2020-04-28 12:58:06","http://thesecuritysoftwarescannerindustrgreat.duckdns.org/ba/vbc.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/353121/","oppimaniac"
 "353120","2020-04-28 12:45:17","http://bbfjjf8.com//we20lo85/aio0i32p.php?l=nok9.cab","offline","malware_download","None","https://urlhaus.abuse.ch/url/353120/","cocaman"
@@ -705,7 +1225,7 @@
 "353106","2020-04-28 12:05:33","http://221.160.177.130:4912/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353106/","Gandylyan1"
 "353105","2020-04-28 12:05:27","http://115.58.100.249:40282/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353105/","Gandylyan1"
 "353104","2020-04-28 12:05:23","http://42.231.253.177:38603/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353104/","Gandylyan1"
-"353103","2020-04-28 12:04:50","http://124.230.99.203:40112/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353103/","Gandylyan1"
+"353103","2020-04-28 12:04:50","http://124.230.99.203:40112/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353103/","Gandylyan1"
 "353102","2020-04-28 12:04:44","http://172.45.10.241:41931/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353102/","Gandylyan1"
 "353101","2020-04-28 12:04:12","http://162.212.113.168:59351/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353101/","Gandylyan1"
 "353100","2020-04-28 12:04:06","http://42.239.189.246:46831/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353100/","Gandylyan1"
@@ -721,7 +1241,7 @@
 "353090","2020-04-28 10:47:08","http://177.137.107.131:53429/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353090/","geenensp"
 "353089","2020-04-28 10:39:12","https://pastebin.com/raw/fGfiai1q","offline","malware_download","None","https://urlhaus.abuse.ch/url/353089/","JayTHL"
 "353088","2020-04-28 10:29:10","http://saglikbakanligindanhediye20gb.com/HediyeGB.apk","offline","malware_download","apk ","https://urlhaus.abuse.ch/url/353088/","mertcangokgoz"
-"353087","2020-04-28 10:29:08","http://saglikliapp.live/files/covvidapp.apk","online","malware_download","apk ","https://urlhaus.abuse.ch/url/353087/","mertcangokgoz"
+"353087","2020-04-28 10:29:08","http://saglikliapp.live/files/covvidapp.apk","offline","malware_download","apk ","https://urlhaus.abuse.ch/url/353087/","mertcangokgoz"
 "353086","2020-04-28 10:13:03","http://wmwifbajxxbcxmucxmlc.com/files/april27.dll","offline","malware_download","zloader","https://urlhaus.abuse.ch/url/353086/","sravan_g"
 "353085","2020-04-28 10:12:17","http://www.highlight-pyrotechnik.at/wp-content/plugins/envira-gallery-lite/nbproject/private/class.lib.php","offline","malware_download","None","https://urlhaus.abuse.ch/url/353085/","JAMESWT_MHT"
 "353084","2020-04-28 10:09:09","http://periotexas.com/wp-content/plugins/bwd-custom-plugin/chklist/_notes/api.lib.php&e=ef9e3341&h=8443a43b&f=n&p=y","offline","malware_download","None","https://urlhaus.abuse.ch/url/353084/","JAMESWT_MHT"
@@ -750,16 +1270,16 @@
 "353061","2020-04-28 09:17:04","http://23.228.143.58:44467/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/353061/","geenensp"
 "353060","2020-04-28 09:12:05","https://pastebin.com/raw/hEFKMgw8","offline","malware_download","None","https://urlhaus.abuse.ch/url/353060/","JayTHL"
 "353059","2020-04-28 09:06:06","http://49.68.122.135:42492/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353059/","Gandylyan1"
-"353058","2020-04-28 09:06:00","http://111.43.223.108:47843/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353058/","Gandylyan1"
+"353058","2020-04-28 09:06:00","http://111.43.223.108:47843/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353058/","Gandylyan1"
 "353057","2020-04-28 09:05:57","http://106.111.36.97:51459/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353057/","Gandylyan1"
 "353056","2020-04-28 09:05:52","http://172.45.16.82:57329/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353056/","Gandylyan1"
 "353055","2020-04-28 09:05:20","http://49.117.189.177:55281/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353055/","Gandylyan1"
 "353054","2020-04-28 09:05:17","http://62.16.48.25:35032/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353054/","Gandylyan1"
 "353053","2020-04-28 09:04:45","http://115.59.15.145:49712/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353053/","Gandylyan1"
-"353052","2020-04-28 09:04:19","http://111.42.102.89:48737/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353052/","Gandylyan1"
+"353052","2020-04-28 09:04:19","http://111.42.102.89:48737/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353052/","Gandylyan1"
 "353051","2020-04-28 09:04:16","http://31.146.129.206:34215/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353051/","Gandylyan1"
 "353050","2020-04-28 09:04:13","http://61.52.115.251:46545/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353050/","Gandylyan1"
-"353049","2020-04-28 09:04:07","http://42.225.217.216:42773/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353049/","Gandylyan1"
+"353049","2020-04-28 09:04:07","http://42.225.217.216:42773/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353049/","Gandylyan1"
 "353048","2020-04-28 09:04:04","http://36.34.150.235:41597/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/353048/","Gandylyan1"
 "353047","2020-04-28 08:50:05","http://180.104.77.224:57014/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/353047/","zbetcheckin"
 "353046","2020-04-28 08:22:09","https://drive.google.com/file/d/17NPtkoB3zBnCXoDLNcLUKTF_K5G2SeRj/view","offline","malware_download","None","https://urlhaus.abuse.ch/url/353046/","JAMESWT_MHT"
@@ -802,8 +1322,8 @@
 "353009","2020-04-28 07:36:03","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/1026888/Buy-Sell%20Agreement_1026888_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353009/","spamhaus"
 "353008","2020-04-28 07:35:59","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/Buy-Sell%20Agreement_5519370_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353008/","spamhaus"
 "353007","2020-04-28 07:35:55","http://orujedu.com/wp-content/uploads/2020/04/docs_f8n/02449/Buy-Sell%20Agreement_02449_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353007/","spamhaus"
-"353006","2020-04-28 07:35:51","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/Buy-Sell%20Agreement_7223_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353006/","spamhaus"
-"353005","2020-04-28 07:35:36","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_20133_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353005/","spamhaus"
+"353006","2020-04-28 07:35:51","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/Buy-Sell%20Agreement_7223_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353006/","spamhaus"
+"353005","2020-04-28 07:35:36","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_20133_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353005/","spamhaus"
 "353004","2020-04-28 07:35:28","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/31086224/Buy-Sell%20Agreement_31086224_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353004/","spamhaus"
 "353003","2020-04-28 07:35:25","http://www.running-bike.com/docs_155/7449/Buy-Sell%20Agreement_7449_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353003/","spamhaus"
 "353002","2020-04-28 07:35:14","https://youngspiritshop.com/docs_8s0/1548/Buy-Sell%20Agreement_1548_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/353002/","spamhaus"
@@ -813,7 +1333,7 @@
 "352998","2020-04-28 07:32:14","http://www.running-bike.com/docs_155/Buy-Sell%20Agreement_7169205_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352998/","spamhaus"
 "352997","2020-04-28 07:32:10","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_6745783_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352997/","spamhaus"
 "352996","2020-04-28 07:32:02","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/698283/Buy-Sell%20Agreement_698283_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352996/","spamhaus"
-"352995","2020-04-28 07:31:59","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/Buy-Sell%20Agreement_563232_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352995/","spamhaus"
+"352995","2020-04-28 07:31:59","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/Buy-Sell%20Agreement_563232_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352995/","spamhaus"
 "352994","2020-04-28 07:31:56","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/Buy-Sell%20Agreement_5299045_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352994/","spamhaus"
 "352993","2020-04-28 07:31:54","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_78170227_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352993/","spamhaus"
 "352992","2020-04-28 07:31:46","https://www.leaksfly.com/docs_1tj/71964624/Buy-Sell%20Agreement_71964624_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352992/","spamhaus"
@@ -823,7 +1343,7 @@
 "352988","2020-04-28 07:31:07","https://parmisco.com/docs_mc0/5349/Buy-Sell%20Agreement_5349_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352988/","spamhaus"
 "352987","2020-04-28 07:31:04","https://youngspiritshop.com/docs_8s0/9072097/Buy-Sell%20Agreement_9072097_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352987/","spamhaus"
 "352986","2020-04-28 07:30:47","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/Buy-Sell%20Agreement_11948_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352986/","spamhaus"
-"352985","2020-04-28 07:30:15","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/114946/Buy-Sell%20Agreement_114946_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352985/","spamhaus"
+"352985","2020-04-28 07:30:15","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/114946/Buy-Sell%20Agreement_114946_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352985/","spamhaus"
 "352984","2020-04-28 07:29:41","https://blog.macwap.com/wp-content/themes/calliope/docs_wdp/52459011/Buy-Sell%20Agreement_52459011_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352984/","spamhaus"
 "352983","2020-04-28 07:29:06","https://www.leaksfly.com/docs_1tj/93939/Buy-Sell%20Agreement_93939_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352983/","spamhaus"
 "352982","2020-04-28 07:28:34","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_15176424_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352982/","spamhaus"
@@ -850,7 +1370,7 @@
 "352961","2020-04-28 07:00:34","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/Buy-Sell%20Agreement_401858_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352961/","spamhaus"
 "352960","2020-04-28 06:59:59","https://youngspiritshop.com/docs_8s0/7534976/Buy-Sell%20Agreement_7534976_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352960/","spamhaus"
 "352959","2020-04-28 06:59:26","https://blog.macwap.com/wp-content/themes/calliope/docs_wdp/5618/Buy-Sell%20Agreement_5618_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352959/","spamhaus"
-"352958","2020-04-28 06:58:51","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/6894097/Buy-Sell%20Agreement_6894097_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352958/","spamhaus"
+"352958","2020-04-28 06:58:51","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/6894097/Buy-Sell%20Agreement_6894097_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352958/","spamhaus"
 "352957","2020-04-28 06:58:18","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/34870/Buy-Sell%20Agreement_34870_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352957/","spamhaus"
 "352956","2020-04-28 06:57:43","https://altatecnica.com.mx/wp-content/uploads/2020/04/docs_qvi/Buy-Sell%20Agreement_6410_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352956/","spamhaus"
 "352955","2020-04-28 06:57:09","https://mirandaspaintingca.com/wp-content/uploads/2020/04/docs_kjk/8850608/Buy-Sell%20Agreement_8850608_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352955/","spamhaus"
@@ -871,9 +1391,9 @@
 "352940","2020-04-28 06:42:51","https://mirandaspaintingca.com/wp-content/uploads/2020/04/docs_kjk/Buy-Sell%20Agreement_38753_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352940/","spamhaus"
 "352939","2020-04-28 06:42:48","http://orujedu.com/wp-content/uploads/2020/04/docs_f8n/416447/Buy-Sell%20Agreement_416447_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352939/","spamhaus"
 "352938","2020-04-28 06:42:45","http://www.running-bike.com/docs_155/Buy-Sell%20Agreement_7032322_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352938/","spamhaus"
-"352937","2020-04-28 06:42:41","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/21733673/Buy-Sell%20Agreement_21733673_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352937/","spamhaus"
+"352937","2020-04-28 06:42:41","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/21733673/Buy-Sell%20Agreement_21733673_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352937/","spamhaus"
 "352936","2020-04-28 06:42:34","https://manamobile.store/wp-content/uploads/2020/04/docs_s1f/Buy-Sell%20Agreement_427779_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352936/","spamhaus"
-"352935","2020-04-28 06:42:32","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_52007906_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352935/","spamhaus"
+"352935","2020-04-28 06:42:32","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_52007906_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352935/","spamhaus"
 "352934","2020-04-28 06:42:28","https://onikstrgovina.com/docs_0nd/13880/Buy-Sell%20Agreement_13880_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352934/","spamhaus"
 "352933","2020-04-28 06:41:57","https://youngspiritshop.com/docs_8s0/571982/Buy-Sell%20Agreement_571982_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352933/","spamhaus"
 "352932","2020-04-28 06:41:54","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/823296/Buy-Sell%20Agreement_823296_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352932/","spamhaus"
@@ -890,7 +1410,7 @@
 "352921","2020-04-28 06:36:40","https://ftvlicenses.in/wp-content/uploads/2020/04/docs_ypk/Buy-Sell%20Agreement_9002_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352921/","spamhaus"
 "352920","2020-04-28 06:36:32","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/7991268/Buy-Sell%20Agreement_7991268_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352920/","spamhaus"
 "352919","2020-04-28 06:36:24","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/Buy-Sell%20Agreement_7602_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352919/","spamhaus"
-"352918","2020-04-28 06:36:15","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/Buy-Sell%20Agreement_17881360_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352918/","spamhaus"
+"352918","2020-04-28 06:36:15","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/Buy-Sell%20Agreement_17881360_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352918/","spamhaus"
 "352917","2020-04-28 06:36:05","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_5898_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352917/","spamhaus"
 "352916","2020-04-28 06:35:58","https://msquare.xyz/wp-content/uploads/2020/04/docs_ymn/Buy-Sell%20Agreement_26624288_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352916/","spamhaus"
 "352915","2020-04-28 06:35:54","https://myheromydadthenurse.com/wp-content/plugins/apikey/docs_tqo/873627/Buy-Sell%20Agreement_873627_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352915/","spamhaus"
@@ -918,7 +1438,7 @@
 "352893","2020-04-28 06:32:36","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/51465/Buy-Sell%20Agreement_51465_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352893/","spamhaus"
 "352892","2020-04-28 06:32:30","https://www.vagtachobrasil.com/wp-content/uploads/2020/04/docs_w7f/Buy-Sell%20Agreement_46042922_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352892/","spamhaus"
 "352891","2020-04-28 06:32:27","https://bestappliances.in/wp-content/uploads/2020/04/docs_0mg/Buy-Sell%20Agreement_24623_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352891/","spamhaus"
-"352890","2020-04-28 06:32:23","https://www.leaksfly.com/docs_1tj/Buy-Sell%20Agreement_21589022_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352890/","spamhaus"
+"352890","2020-04-28 06:32:23","https://www.leaksfly.com/docs_1tj/Buy-Sell%20Agreement_21589022_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352890/","spamhaus"
 "352889","2020-04-28 06:25:16","https://bestappliances.in/wp-content/uploads/2020/04/docs_0mg/Buy-Sell%20Agreement_83730362_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352889/","spamhaus"
 "352888","2020-04-28 06:25:14","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/498158/Buy-Sell%20Agreement_498158_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352888/","spamhaus"
 "352887","2020-04-28 06:25:11","https://altatecnica.com.mx/wp-content/uploads/2020/04/docs_qvi/6156/Buy-Sell%20Agreement_6156_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352887/","spamhaus"
@@ -944,14 +1464,14 @@
 "352867","2020-04-28 06:16:17","http://huniandijual.com/wp-content/uploads/2020/04/docs_x5r/11501951/Buy-Sell%20Agreement_11501951_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352867/","spamhaus"
 "352866","2020-04-28 06:16:13","https://formadiksiuij.com/wp-content/uploads/2020/04/docs_25c/Buy-Sell%20Agreement_52692_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352866/","spamhaus"
 "352865","2020-04-28 06:16:10","https://www.vagtachobrasil.com/wp-content/uploads/2020/04/docs_w7f/5018360/Buy-Sell%20Agreement_5018360_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352865/","spamhaus"
-"352864","2020-04-28 06:16:03","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/77443/Buy-Sell%20Agreement_77443_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352864/","spamhaus"
+"352864","2020-04-28 06:16:03","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/77443/Buy-Sell%20Agreement_77443_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352864/","spamhaus"
 "352863","2020-04-28 06:08:30","http://hediye-internet-saglik.org/20gb_hediye_internet.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/352863/","JayTHL"
 "352862","2020-04-28 06:08:16","http://orujedu.com/wp-content/uploads/2020/04/docs_f8n/Buy-Sell%20Agreement_2421266_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352862/","spamhaus"
 "352861","2020-04-28 06:08:12","https://www.leaksfly.com/docs_1tj/6503758/Buy-Sell%20Agreement_6503758_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352861/","spamhaus"
-"352860","2020-04-28 06:08:10","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_66754080_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352860/","spamhaus"
+"352860","2020-04-28 06:08:10","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_66754080_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352860/","spamhaus"
 "352859","2020-04-28 06:07:06","http://162.212.114.150:45928/","offline","malware_download","None","https://urlhaus.abuse.ch/url/352859/","JayTHL"
 "352858","2020-04-28 06:07:02","http://162.212.114.150:45928/i","offline","malware_download","None","https://urlhaus.abuse.ch/url/352858/","JayTHL"
-"352857","2020-04-28 06:06:58","http://113.245.189.4:38557/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352857/","Gandylyan1"
+"352857","2020-04-28 06:06:58","http://113.245.189.4:38557/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352857/","Gandylyan1"
 "352856","2020-04-28 06:06:50","http://222.74.186.136:46226/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352856/","Gandylyan1"
 "352855","2020-04-28 06:05:53","http://222.74.186.134:50040/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352855/","Gandylyan1"
 "352854","2020-04-28 06:05:51","http://112.123.61.18:59722/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352854/","Gandylyan1"
@@ -962,20 +1482,20 @@
 "352849","2020-04-28 06:04:51","http://60.186.83.82:42618/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352849/","Gandylyan1"
 "352848","2020-04-28 06:04:44","http://123.10.128.227:59979/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352848/","Gandylyan1"
 "352847","2020-04-28 06:04:39","http://180.123.59.159:53945/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352847/","Gandylyan1"
-"352846","2020-04-28 06:04:34","http://119.125.131.57:52606/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352846/","Gandylyan1"
+"352846","2020-04-28 06:04:34","http://119.125.131.57:52606/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352846/","Gandylyan1"
 "352845","2020-04-28 06:04:30","http://111.43.223.136:53549/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352845/","Gandylyan1"
 "352844","2020-04-28 06:04:20","http://125.45.59.107:52130/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352844/","Gandylyan1"
 "352843","2020-04-28 06:04:10","http://183.215.188.45:49767/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352843/","Gandylyan1"
-"352842","2020-04-28 06:01:44","https://kiaowadubai.com/docs_qsb/9131/Buy-Sell%20Agreement_9131_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352842/","spamhaus"
+"352842","2020-04-28 06:01:44","https://kiaowadubai.com/docs_qsb/9131/Buy-Sell%20Agreement_9131_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352842/","spamhaus"
 "352841","2020-04-28 06:01:29","https://premiumshop.id/wp-content/uploads/2020/04/docs_ha7/97601837/Buy-Sell%20Agreement_97601837_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352841/","spamhaus"
 "352840","2020-04-28 06:01:23","https://youngspiritshop.com/docs_8s0/96791/Buy-Sell%20Agreement_96791_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352840/","spamhaus"
 "352839","2020-04-28 06:01:15","http://huniandijual.com/wp-content/uploads/2020/04/docs_x5r/Buy-Sell%20Agreement_440176_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352839/","spamhaus"
 "352838","2020-04-28 06:01:09","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/9851/Buy-Sell%20Agreement_9851_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352838/","spamhaus"
-"352837","2020-04-28 06:00:35","https://www.corazondelcielo.mx/docs_5zp/5067380/Buy-Sell%20Agreement_5067380_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352837/","spamhaus"
-"352836","2020-04-28 05:55:13","http://webxposndytechnologyhardsoftware6buyers.duckdns.org/webdoc/win32.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/352836/","oppimaniac"
+"352837","2020-04-28 06:00:35","https://www.corazondelcielo.mx/docs_5zp/5067380/Buy-Sell%20Agreement_5067380_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352837/","spamhaus"
+"352836","2020-04-28 05:55:13","http://webxposndytechnologyhardsoftware6buyers.duckdns.org/webdoc/win32.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/352836/","oppimaniac"
 "352835","2020-04-28 05:55:09","https://beeps.my/file/NewNewNew_utZXpBmuG45.bin","offline","malware_download","encrypted","https://urlhaus.abuse.ch/url/352835/","oppimaniac"
 "352834","2020-04-28 05:55:05","http://cassiagumrefined.com/js/file/TH98/SWIFT%20(MTC%20103).xlsx","online","malware_download","encrypted,Formbook,xls","https://urlhaus.abuse.ch/url/352834/","oppimaniac"
-"352833","2020-04-28 05:54:22","http://121.148.122.219:5895/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352833/","geenensp"
+"352833","2020-04-28 05:54:22","http://121.148.122.219:5895/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352833/","geenensp"
 "352832","2020-04-28 05:54:17","http://106.248.202.245:45017/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352832/","geenensp"
 "352831","2020-04-28 05:54:13","http://1.64.98.249:62482/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352831/","geenensp"
 "352830","2020-04-28 05:54:07","http://dongiln.co/paymentslip/paymentslip.rar","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352830/","spamhaus"
@@ -1134,13 +1654,13 @@
 "352677","2020-04-28 03:08:03","http://138.197.153.117/fearlesshitter.arm4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/352677/","zbetcheckin"
 "352676","2020-04-28 03:07:03","http://167.172.167.26/axisbins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/352676/","zbetcheckin"
 "352675","2020-04-28 03:06:07","http://182.126.193.9:35162/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352675/","Gandylyan1"
-"352674","2020-04-28 03:06:04","http://42.226.69.42:56747/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352674/","Gandylyan1"
+"352674","2020-04-28 03:06:04","http://42.226.69.42:56747/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352674/","Gandylyan1"
 "352673","2020-04-28 03:06:00","http://125.42.234.118:48829/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352673/","Gandylyan1"
 "352672","2020-04-28 03:05:55","http://211.137.225.125:58434/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352672/","Gandylyan1"
 "352671","2020-04-28 03:05:52","http://121.226.143.49:59184/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352671/","Gandylyan1"
 "352670","2020-04-28 03:05:44","http://111.43.223.163:58816/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352670/","Gandylyan1"
 "352669","2020-04-28 03:05:39","http://36.34.234.8:60259/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352669/","Gandylyan1"
-"352668","2020-04-28 03:05:35","http://110.18.194.234:45469/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352668/","Gandylyan1"
+"352668","2020-04-28 03:05:35","http://110.18.194.234:45469/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352668/","Gandylyan1"
 "352667","2020-04-28 03:05:32","http://222.138.17.196:48367/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352667/","Gandylyan1"
 "352666","2020-04-28 03:05:28","http://218.21.170.244:33600/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352666/","Gandylyan1"
 "352665","2020-04-28 03:05:23","http://114.239.112.118:53998/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352665/","Gandylyan1"
@@ -1216,7 +1736,7 @@
 "352595","2020-04-28 00:04:51","http://115.49.197.228:56193/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352595/","Gandylyan1"
 "352594","2020-04-28 00:04:47","http://1.30.215.144:34208/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352594/","Gandylyan1"
 "352593","2020-04-28 00:04:44","http://115.52.163.164:39072/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352593/","Gandylyan1"
-"352592","2020-04-28 00:04:40","http://175.4.192.21:34060/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352592/","Gandylyan1"
+"352592","2020-04-28 00:04:40","http://175.4.192.21:34060/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352592/","Gandylyan1"
 "352591","2020-04-28 00:04:27","http://182.124.77.75:38722/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352591/","Gandylyan1"
 "352590","2020-04-28 00:04:24","http://111.42.66.137:53652/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352590/","Gandylyan1"
 "352589","2020-04-28 00:04:20","http://106.110.129.163:33094/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352589/","Gandylyan1"
@@ -1245,7 +1765,7 @@
 "352566","2020-04-27 21:03:35","http://221.161.31.8:56066/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352566/","Gandylyan1"
 "352565","2020-04-27 21:03:31","http://36.35.160.240:38882/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352565/","Gandylyan1"
 "352564","2020-04-27 21:03:25","http://120.212.208.227:48733/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352564/","Gandylyan1"
-"352563","2020-04-27 21:03:20","http://175.10.73.252:48250/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352563/","Gandylyan1"
+"352563","2020-04-27 21:03:20","http://175.10.73.252:48250/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352563/","Gandylyan1"
 "352562","2020-04-27 21:03:14","http://176.113.161.93:42166/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352562/","Gandylyan1"
 "352561","2020-04-27 21:03:12","http://162.212.113.18:35888/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352561/","Gandylyan1"
 "352560","2020-04-27 21:03:08","http://42.231.65.39:54545/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352560/","Gandylyan1"
@@ -1271,23 +1791,23 @@
 "352540","2020-04-27 20:28:33","https://www.tulsairishpub.com/blog/wp-content/themes/calliope/docs_khi/01882/Buy-Sell%20Agreement_01882_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352540/","malware_traffic"
 "352539","2020-04-27 20:28:28","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/Buy-Sell%20Agreement_3061_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352539/","malware_traffic"
 "352538","2020-04-27 20:28:19","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/Buy-Sell%20Agreement_6748936_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352538/","malware_traffic"
-"352537","2020-04-27 20:28:15","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/128073/Buy-Sell%20Agreement_128073_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352537/","malware_traffic"
-"352536","2020-04-27 20:28:07","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/10717/Buy-Sell%20Agreement_10717_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352536/","malware_traffic"
+"352537","2020-04-27 20:28:15","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/128073/Buy-Sell%20Agreement_128073_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352537/","malware_traffic"
+"352536","2020-04-27 20:28:07","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/10717/Buy-Sell%20Agreement_10717_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352536/","malware_traffic"
 "352535","2020-04-27 20:27:17","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/Buy-Sell%20Agreement_1550_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352535/","malware_traffic"
 "352534","2020-04-27 20:27:12","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/030827/Buy-Sell%20Agreement_030827_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352534/","malware_traffic"
-"352533","2020-04-27 20:27:07","https://www.leaksfly.com/docs_1tj/Buy-Sell%20Agreement_7162450_04242020.zip","online","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352533/","malware_traffic"
-"352532","2020-04-27 20:27:05","https://www.leaksfly.com/docs_1tj/8378/Buy-Sell%20Agreement_8378_04242020.zip","online","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352532/","malware_traffic"
+"352533","2020-04-27 20:27:07","https://www.leaksfly.com/docs_1tj/Buy-Sell%20Agreement_7162450_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352533/","malware_traffic"
+"352532","2020-04-27 20:27:05","https://www.leaksfly.com/docs_1tj/8378/Buy-Sell%20Agreement_8378_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352532/","malware_traffic"
 "352531","2020-04-27 20:27:03","https://www.leaksfly.com/docs_1tj/53924094/Buy-Sell%20Agreement_53924094_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352531/","malware_traffic"
-"352530","2020-04-27 20:27:01","https://www.leaksfly.com/docs_1tj/215774/Buy-Sell%20Agreement_215774_04242020.zip","online","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352530/","malware_traffic"
+"352530","2020-04-27 20:27:01","https://www.leaksfly.com/docs_1tj/215774/Buy-Sell%20Agreement_215774_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352530/","malware_traffic"
 "352529","2020-04-27 20:26:59","https://www.internaut.in/wp-content/uploads/2020/04/docs_kl7/8184013/Buy-Sell%20Agreement_8184013_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352529/","malware_traffic"
 "352528","2020-04-27 20:26:27","https://www.internaut.in/wp-content/uploads/2020/04/docs_kl7/49992772/Buy-Sell%20Agreement_49992772_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352528/","malware_traffic"
 "352527","2020-04-27 20:25:55","https://www.internaut.in/wp-content/uploads/2020/04/docs_kl7/4234531/Buy-Sell%20Agreement_4234531_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352527/","malware_traffic"
 "352526","2020-04-27 20:25:47","https://www.h2obbs.cn/wp-content/themes/calliope/docs_3kj/Buy-Sell%20Agreement_87209_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352526/","malware_traffic"
 "352525","2020-04-27 20:25:43","https://www.h2obbs.cn/wp-content/themes/calliope/docs_3kj/98674/Buy-Sell%20Agreement_98674_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352525/","malware_traffic"
 "352524","2020-04-27 20:25:37","https://www.h2obbs.cn/wp-content/themes/calliope/docs_3kj/7380/Buy-Sell%20Agreement_7380_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352524/","malware_traffic"
-"352523","2020-04-27 20:25:30","https://www.corazondelcielo.mx/docs_5zp/Buy-Sell%20Agreement_4957_04242020.zip","online","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352523/","malware_traffic"
-"352522","2020-04-27 20:25:26","https://www.corazondelcielo.mx/docs_5zp/Buy-Sell%20Agreement_2623_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352522/","malware_traffic"
-"352521","2020-04-27 20:25:23","https://www.corazondelcielo.mx/docs_5zp/12676804/Buy-Sell%20Agreement_12676804_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352521/","malware_traffic"
+"352523","2020-04-27 20:25:30","https://www.corazondelcielo.mx/docs_5zp/Buy-Sell%20Agreement_4957_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352523/","malware_traffic"
+"352522","2020-04-27 20:25:26","https://www.corazondelcielo.mx/docs_5zp/Buy-Sell%20Agreement_2623_04242020.zip","online","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352522/","malware_traffic"
+"352521","2020-04-27 20:25:23","https://www.corazondelcielo.mx/docs_5zp/12676804/Buy-Sell%20Agreement_12676804_04242020.zip","online","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352521/","malware_traffic"
 "352520","2020-04-27 20:25:14","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/Buy-Sell%20Agreement_3728606_04242020.zip","online","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352520/","malware_traffic"
 "352519","2020-04-27 20:25:11","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/3113304/Buy-Sell%20Agreement_3113304_04242020.zip","online","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352519/","malware_traffic"
 "352518","2020-04-27 20:24:39","https://premiumshop.id/wp-content/uploads/2020/04/docs_ha7/Buy-Sell%20Agreement_76053_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352518/","malware_traffic"
@@ -1317,18 +1837,18 @@
 "352494","2020-04-27 20:22:33","http://www.s172.com/wp-content/uploads/2020/04/docs_x1c/Buy-Sell%20Agreement_4720922_04242020.zip","offline","malware_download","Qakbot,qbot,sxp105,zip","https://urlhaus.abuse.ch/url/352494/","malware_traffic"
 "352493","2020-04-27 20:14:14","http://huniandijual.com/wp-content/uploads/2020/04/docs_x5r/Buy-Sell%20Agreement_290361_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352493/","malware_traffic"
 "352492","2020-04-27 20:14:10","http://huniandijual.com/wp-content/uploads/2020/04/docs_x5r/83556/Buy-Sell%20Agreement_83556_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352492/","malware_traffic"
-"352491","2020-04-27 20:14:08","http://cecadesayu.corazondelcielo.mx/docs_ytk/Buy-Sell%20Agreement_13386_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352491/","malware_traffic"
-"352490","2020-04-27 20:14:05","http://cecadesayu.corazondelcielo.mx/docs_ytk/50385871/Buy-Sell%20Agreement_50385871_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352490/","malware_traffic"
+"352491","2020-04-27 20:14:08","http://cecadesayu.corazondelcielo.mx/docs_ytk/Buy-Sell%20Agreement_13386_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352491/","malware_traffic"
+"352490","2020-04-27 20:14:05","http://cecadesayu.corazondelcielo.mx/docs_ytk/50385871/Buy-Sell%20Agreement_50385871_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352490/","malware_traffic"
 "352489","2020-04-27 20:14:03","http://cecadesayu.corazondelcielo.mx/docs_ytk/3746/Buy-Sell%20Agreement_3746_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352489/","malware_traffic"
 "352488","2020-04-27 20:13:58","http://cecadesayu.corazondelcielo.mx/docs_ytk/0191867/Buy-Sell%20Agreement_0191867_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352488/","malware_traffic"
-"352487","2020-04-27 20:13:55","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_37855099_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352487/","malware_traffic"
-"352486","2020-04-27 20:13:50","https://kiaowadubai.com/docs_qsb/6455/Buy-Sell%20Agreement_6455_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352486/","malware_traffic"
+"352487","2020-04-27 20:13:55","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_37855099_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352487/","malware_traffic"
+"352486","2020-04-27 20:13:50","https://kiaowadubai.com/docs_qsb/6455/Buy-Sell%20Agreement_6455_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352486/","malware_traffic"
 "352485","2020-04-27 20:13:47","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/387824/Buy-Sell%20Agreement_387824_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352485/","malware_traffic"
-"352484","2020-04-27 20:13:45","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/9116273/Buy-Sell%20Agreement_9116273_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352484/","malware_traffic"
-"352483","2020-04-27 20:13:41","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/0070320/Buy-Sell%20Agreement_0070320_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352483/","malware_traffic"
-"352482","2020-04-27 20:13:36","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_85693132_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352482/","malware_traffic"
-"352481","2020-04-27 20:13:32","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_8473004_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352481/","malware_traffic"
-"352480","2020-04-27 20:13:27","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/385661/Buy-Sell%20Agreement_385661_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352480/","malware_traffic"
+"352484","2020-04-27 20:13:45","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/9116273/Buy-Sell%20Agreement_9116273_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352484/","malware_traffic"
+"352483","2020-04-27 20:13:41","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/0070320/Buy-Sell%20Agreement_0070320_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352483/","malware_traffic"
+"352482","2020-04-27 20:13:36","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_85693132_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352482/","malware_traffic"
+"352481","2020-04-27 20:13:32","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_8473004_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352481/","malware_traffic"
+"352480","2020-04-27 20:13:27","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/385661/Buy-Sell%20Agreement_385661_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352480/","malware_traffic"
 "352479","2020-04-27 20:13:23","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/20826984/Buy-Sell%20Agreement_20826984_04242020.zip","online","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352479/","malware_traffic"
 "352478","2020-04-27 20:13:19","https://formadiksiuij.com/wp-content/uploads/2020/04/docs_25c/Buy-Sell%20Agreement_305245_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352478/","malware_traffic"
 "352477","2020-04-27 20:13:15","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/Buy-Sell%20Agreement_4032_04242020.zip","offline","malware_download","Qakbot,qbot,spx105,zip","https://urlhaus.abuse.ch/url/352477/","malware_traffic"
@@ -1389,7 +1909,7 @@
 "352422","2020-04-27 18:51:48","https://mirandaspaintingca.com/wp-content/uploads/2020/04/docs_kjk/Buy-Sell%20Agreement_57220_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352422/","spamhaus"
 "352421","2020-04-27 18:51:43","https://ftvlicenses.in/wp-content/uploads/2020/04/docs_ypk/92640/Buy-Sell%20Agreement_92640_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352421/","spamhaus"
 "352420","2020-04-27 18:51:30","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/803206/Buy-Sell%20Agreement_803206_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352420/","spamhaus"
-"352419","2020-04-27 18:51:11","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/06501/Buy-Sell%20Agreement_06501_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352419/","spamhaus"
+"352419","2020-04-27 18:51:11","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/06501/Buy-Sell%20Agreement_06501_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352419/","spamhaus"
 "352418","2020-04-27 18:51:08","https://formadiksiuij.com/wp-content/uploads/2020/04/docs_25c/32556444/Buy-Sell%20Agreement_32556444_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352418/","spamhaus"
 "352417","2020-04-27 18:51:05","https://myheromydadthenurse.com/wp-content/plugins/apikey/docs_tqo/9134/Buy-Sell%20Agreement_9134_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352417/","spamhaus"
 "352416","2020-04-27 18:47:32","http://www.s172.com/wp-content/uploads/2020/04/docs_x1c/Buy-Sell%20Agreement_67685568_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352416/","spamhaus"
@@ -1428,14 +1948,14 @@
 "352383","2020-04-27 18:37:09","http://www.pacificstarimpex.com/wp-content/themes/calliope/docs_v79/529767/Buy-Sell%20Agreement_529767_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352383/","spamhaus"
 "352382","2020-04-27 18:37:04","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/4501/Buy-Sell%20Agreement_4501_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352382/","spamhaus"
 "352381","2020-04-27 18:27:45","https://pastebin.com/raw/9EH2MwwL","offline","malware_download","None","https://urlhaus.abuse.ch/url/352381/","JayTHL"
-"352380","2020-04-27 18:27:13","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/1517405/Buy-Sell%20Agreement_1517405_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352380/","spamhaus"
+"352380","2020-04-27 18:27:13","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/1517405/Buy-Sell%20Agreement_1517405_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352380/","spamhaus"
 "352379","2020-04-27 18:26:11","https://parmisco.com/docs_mc0/Buy-Sell%20Agreement_01206107_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352379/","spamhaus"
 "352378","2020-04-27 18:25:38","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/718577/Buy-Sell%20Agreement_718577_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352378/","spamhaus"
 "352377","2020-04-27 18:21:03","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/91278/Buy-Sell%20Agreement_91278_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352377/","spamhaus"
 "352376","2020-04-27 18:19:38","http://79.159.207.150:1524/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352376/","geenensp"
 "352375","2020-04-27 18:19:36","https://onikstrgovina.com/docs_0nd/62718678/Buy-Sell%20Agreement_62718678_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352375/","spamhaus"
-"352374","2020-04-27 18:15:23","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_1197_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352374/","spamhaus"
-"352373","2020-04-27 18:15:13","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/106811/Buy-Sell%20Agreement_106811_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352373/","spamhaus"
+"352374","2020-04-27 18:15:23","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/Buy-Sell%20Agreement_1197_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352374/","spamhaus"
+"352373","2020-04-27 18:15:13","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/106811/Buy-Sell%20Agreement_106811_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352373/","spamhaus"
 "352372","2020-04-27 18:09:02","https://onikstrgovina.com/docs_0nd/Buy-Sell%20Agreement_433299_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352372/","spamhaus"
 "352371","2020-04-27 18:07:16","http://www.pacificstarimpex.com/wp-content/themes/calliope/docs_v79/Buy-Sell%20Agreement_571385_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352371/","spamhaus"
 "352370","2020-04-27 18:07:09","http://orujedu.com/wp-content/uploads/2020/04/docs_f8n/Buy-Sell%20Agreement_7855_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352370/","spamhaus"
@@ -1444,7 +1964,7 @@
 "352367","2020-04-27 18:06:27","http://14.113.228.59:36810/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352367/","Gandylyan1"
 "352366","2020-04-27 18:06:23","http://124.230.172.94:51560/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352366/","Gandylyan1"
 "352365","2020-04-27 18:06:17","http://125.42.233.198:50120/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352365/","Gandylyan1"
-"352364","2020-04-27 18:06:12","http://122.227.125.161:35318/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352364/","Gandylyan1"
+"352364","2020-04-27 18:06:12","http://122.227.125.161:35318/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352364/","Gandylyan1"
 "352363","2020-04-27 18:06:04","http://172.39.14.205:60126/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352363/","Gandylyan1"
 "352362","2020-04-27 18:05:33","http://182.127.71.166:48340/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352362/","Gandylyan1"
 "352361","2020-04-27 18:05:29","http://211.137.225.59:57775/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352361/","Gandylyan1"
@@ -1460,19 +1980,19 @@
 "352351","2020-04-27 18:03:13","http://117.86.24.209:43284/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352351/","Gandylyan1"
 "352350","2020-04-27 18:03:09","http://123.9.233.170:46389/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352350/","Gandylyan1"
 "352349","2020-04-27 18:03:04","http://219.155.135.6:44227/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352349/","Gandylyan1"
-"352348","2020-04-27 17:58:04","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/Buy-Sell%20Agreement_057093_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352348/","spamhaus"
+"352348","2020-04-27 17:58:04","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/Buy-Sell%20Agreement_057093_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352348/","spamhaus"
 "352347","2020-04-27 17:56:03","http://88.218.16.37/9dudiNwDI5cxFKk.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/352347/","abuse_ch"
-"352346","2020-04-27 17:55:12","https://www.leaksfly.com/docs_1tj/944378/Buy-Sell%20Agreement_944378_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352346/","spamhaus"
+"352346","2020-04-27 17:55:12","https://www.leaksfly.com/docs_1tj/944378/Buy-Sell%20Agreement_944378_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352346/","spamhaus"
 "352345","2020-04-27 17:55:10","http://www.s172.com/wp-content/uploads/2020/04/docs_x1c/Buy-Sell%20Agreement_316191_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352345/","spamhaus"
 "352344","2020-04-27 17:54:38","http://www.s172.com/wp-content/uploads/2020/04/docs_x1c/Buy-Sell%20Agreement_63216730_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352344/","spamhaus"
-"352343","2020-04-27 17:54:06","http://cecadesayu.corazondelcielo.mx/docs_ytk/Buy-Sell%20Agreement_20922_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352343/","spamhaus"
+"352343","2020-04-27 17:54:06","http://cecadesayu.corazondelcielo.mx/docs_ytk/Buy-Sell%20Agreement_20922_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352343/","spamhaus"
 "352342","2020-04-27 17:51:19","http://221.155.68.193:54408/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352342/","geenensp"
-"352341","2020-04-27 17:51:14","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/0161/Buy-Sell%20Agreement_0161_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352341/","spamhaus"
-"352340","2020-04-27 17:51:11","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/6260776/Buy-Sell%20Agreement_6260776_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352340/","spamhaus"
+"352341","2020-04-27 17:51:14","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/0161/Buy-Sell%20Agreement_0161_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352341/","spamhaus"
+"352340","2020-04-27 17:51:11","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/6260776/Buy-Sell%20Agreement_6260776_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352340/","spamhaus"
 "352339","2020-04-27 17:51:08","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/22158/Buy-Sell%20Agreement_22158_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352339/","spamhaus"
 "352338","2020-04-27 17:51:05","https://altatecnica.com.mx/wp-content/uploads/2020/04/docs_qvi/Buy-Sell%20Agreement_104703_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352338/","spamhaus"
 "352337","2020-04-27 17:50:58","https://bestappliances.in/wp-content/uploads/2020/04/docs_0mg/Buy-Sell%20Agreement_2913784_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352337/","spamhaus"
-"352336","2020-04-27 17:50:17","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/17604096/Buy-Sell%20Agreement_17604096_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352336/","spamhaus"
+"352336","2020-04-27 17:50:17","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/17604096/Buy-Sell%20Agreement_17604096_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352336/","spamhaus"
 "352335","2020-04-27 17:43:04","http://outcaste-television.000webhostapp.com/VPN.scr","offline","malware_download","None","https://urlhaus.abuse.ch/url/352335/","vxvault"
 "352334","2020-04-27 17:40:49","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/Buy-Sell%20Agreement_34830887_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352334/","spamhaus"
 "352333","2020-04-27 17:40:47","https://ftvlicenses.in/wp-content/uploads/2020/04/docs_ypk/Buy-Sell%20Agreement_8601_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352333/","spamhaus"
@@ -1484,8 +2004,8 @@
 "352327","2020-04-27 17:39:55","https://www.tulsairishpub.com/blog/wp-content/themes/calliope/docs_khi/0166159/Buy-Sell%20Agreement_0166159_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352327/","spamhaus"
 "352326","2020-04-27 17:39:52","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/06893779/Buy-Sell%20Agreement_06893779_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352326/","spamhaus"
 "352325","2020-04-27 17:39:43","https://www.patrickchan-hk.net/wp-content/uploads/2020/04/docs_csa/Buy-Sell%20Agreement_7580_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352325/","spamhaus"
-"352324","2020-04-27 17:39:29","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_15171881_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352324/","spamhaus"
-"352323","2020-04-27 17:39:24","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/Buy-Sell%20Agreement_57903931_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352323/","spamhaus"
+"352324","2020-04-27 17:39:29","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_15171881_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352324/","spamhaus"
+"352323","2020-04-27 17:39:24","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/Buy-Sell%20Agreement_57903931_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352323/","spamhaus"
 "352322","2020-04-27 17:39:22","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/33365/Buy-Sell%20Agreement_33365_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352322/","spamhaus"
 "352321","2020-04-27 17:39:17","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/0856517/Buy-Sell%20Agreement_0856517_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352321/","spamhaus"
 "352320","2020-04-27 17:39:14","https://msquare.xyz/wp-content/uploads/2020/04/docs_ymn/Buy-Sell%20Agreement_027146_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352320/","spamhaus"
@@ -1494,7 +2014,7 @@
 "352317","2020-04-27 17:38:29","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/8096673/Buy-Sell%20Agreement_8096673_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352317/","spamhaus"
 "352316","2020-04-27 17:38:20","http://121.123.37.121:5229/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352316/","geenensp"
 "352315","2020-04-27 17:38:14","http://80.210.20.94:37396/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/352315/","geenensp"
-"352314","2020-04-27 17:38:10","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/0259743/Buy-Sell%20Agreement_0259743_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352314/","spamhaus"
+"352314","2020-04-27 17:38:10","https://heavenif.co.za/blog/wp-content/themes/calliope/docs_kwc/0259743/Buy-Sell%20Agreement_0259743_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352314/","spamhaus"
 "352313","2020-04-27 17:38:03","https://darazexpress.pk/wp-content/uploads/2020/04/docs_7tp/807898/Buy-Sell%20Agreement_807898_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352313/","spamhaus"
 "352312","2020-04-27 17:38:00","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/Buy-Sell%20Agreement_99062_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352312/","spamhaus"
 "352311","2020-04-27 17:37:57","https://manamobile.store/wp-content/uploads/2020/04/docs_s1f/Buy-Sell%20Agreement_74658_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352311/","spamhaus"
@@ -1505,7 +2025,7 @@
 "352306","2020-04-27 17:37:32","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/4410/Buy-Sell%20Agreement_4410_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352306/","spamhaus"
 "352305","2020-04-27 17:37:25","http://www.pacificstarimpex.com/wp-content/themes/calliope/docs_v79/Buy-Sell%20Agreement_5593_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352305/","spamhaus"
 "352304","2020-04-27 17:37:19","https://youngspiritshop.com/docs_8s0/Buy-Sell%20Agreement_2708_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352304/","spamhaus"
-"352303","2020-04-27 17:37:15","https://www.leaksfly.com/docs_1tj/Buy-Sell%20Agreement_1825952_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352303/","spamhaus"
+"352303","2020-04-27 17:37:15","https://www.leaksfly.com/docs_1tj/Buy-Sell%20Agreement_1825952_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352303/","spamhaus"
 "352302","2020-04-27 17:37:12","https://youngspiritshop.com/docs_8s0/Buy-Sell%20Agreement_4972116_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352302/","spamhaus"
 "352301","2020-04-27 17:37:09","https://itohukuk.com/wp-content/uploads/2020/04/docs_u9n/Buy-Sell%20Agreement_8769895_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352301/","spamhaus"
 "352300","2020-04-27 17:37:05","https://premiumshop.id/wp-content/uploads/2020/04/docs_ha7/Buy-Sell%20Agreement_5290_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352300/","spamhaus"
@@ -1515,10 +2035,10 @@
 "352296","2020-04-27 17:33:34","https://mindseed.in/blog/wp-content/uploads/2020/04/docs_yfg/Buy-Sell%20Agreement_34622860_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352296/","spamhaus"
 "352295","2020-04-27 17:33:30","https://altatecnica.com.mx/wp-content/uploads/2020/04/docs_qvi/42260377/Buy-Sell%20Agreement_42260377_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352295/","spamhaus"
 "352294","2020-04-27 17:33:27","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/4344/Buy-Sell%20Agreement_4344_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352294/","spamhaus"
-"352293","2020-04-27 17:33:17","http://cecadesayu.corazondelcielo.mx/docs_ytk/5429/Buy-Sell%20Agreement_5429_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352293/","spamhaus"
+"352293","2020-04-27 17:33:17","http://cecadesayu.corazondelcielo.mx/docs_ytk/5429/Buy-Sell%20Agreement_5429_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352293/","spamhaus"
 "352292","2020-04-27 17:33:14","https://premiumshop.id/wp-content/uploads/2020/04/docs_ha7/Buy-Sell%20Agreement_33302_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352292/","spamhaus"
 "352291","2020-04-27 17:33:02","https://mirandaspaintingca.com/wp-content/uploads/2020/04/docs_kjk/Buy-Sell%20Agreement_49527214_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352291/","spamhaus"
-"352290","2020-04-27 17:32:56","https://kiaowadubai.com/docs_qsb/05879673/Buy-Sell%20Agreement_05879673_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352290/","spamhaus"
+"352290","2020-04-27 17:32:56","https://kiaowadubai.com/docs_qsb/05879673/Buy-Sell%20Agreement_05879673_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352290/","spamhaus"
 "352289","2020-04-27 17:32:50","https://altatecnica.com.mx/wp-content/uploads/2020/04/docs_qvi/Buy-Sell%20Agreement_4391114_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352289/","spamhaus"
 "352288","2020-04-27 17:32:38","https://altatecnica.com.mx/wp-content/uploads/2020/04/docs_qvi/Buy-Sell%20Agreement_27772_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352288/","spamhaus"
 "352287","2020-04-27 17:32:25","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/29240443/Buy-Sell%20Agreement_29240443_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352287/","spamhaus"
@@ -1541,12 +2061,12 @@
 "352270","2020-04-27 16:42:05","http://80.235.214.123:45202/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/352270/","zbetcheckin"
 "352269","2020-04-27 16:35:10","http://zigyyt.com/trix.exe","offline","malware_download","Dridex","https://urlhaus.abuse.ch/url/352269/","anonymous"
 "352268","2020-04-27 16:34:26","https://www.tulsairishpub.com/blog/wp-content/themes/calliope/docs_khi/8656/Buy-Sell%20Agreement_8656_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352268/","spamhaus"
-"352267","2020-04-27 16:34:23","http://cecadesayu.corazondelcielo.mx/docs_ytk/145765/Buy-Sell%20Agreement_145765_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352267/","spamhaus"
+"352267","2020-04-27 16:34:23","http://cecadesayu.corazondelcielo.mx/docs_ytk/145765/Buy-Sell%20Agreement_145765_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352267/","spamhaus"
 "352266","2020-04-27 16:34:20","https://coberturasgenerales.pe/wp-content/uploads/2020/04/docs_2hj/11680/Buy-Sell%20Agreement_11680_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352266/","spamhaus"
 "352265","2020-04-27 16:34:17","https://youngspiritshop.com/docs_8s0/Buy-Sell%20Agreement_55601975_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352265/","spamhaus"
-"352264","2020-04-27 16:34:09","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/293599/Buy-Sell%20Agreement_293599_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352264/","spamhaus"
+"352264","2020-04-27 16:34:09","https://ticte.in/wp-content/uploads/2020/04/docs_o2i/293599/Buy-Sell%20Agreement_293599_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352264/","spamhaus"
 "352263","2020-04-27 16:34:06","https://kiaowadubai.com/docs_qsb/Buy-Sell%20Agreement_4632_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352263/","spamhaus"
-"352262","2020-04-27 16:34:01","http://cecadesayu.corazondelcielo.mx/docs_ytk/4272/Buy-Sell%20Agreement_4272_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352262/","spamhaus"
+"352262","2020-04-27 16:34:01","http://cecadesayu.corazondelcielo.mx/docs_ytk/4272/Buy-Sell%20Agreement_4272_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352262/","spamhaus"
 "352261","2020-04-27 16:33:57","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/Buy-Sell%20Agreement_558030_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352261/","spamhaus"
 "352260","2020-04-27 16:33:51","http://www.running-bike.com/docs_155/2522/Buy-Sell%20Agreement_2522_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352260/","spamhaus"
 "352259","2020-04-27 16:33:42","https://paste.ee/r/tBvxw","offline","malware_download","Encoded","https://urlhaus.abuse.ch/url/352259/","abuse_ch"
@@ -1555,7 +2075,7 @@
 "352256","2020-04-27 16:33:26","https://coberturasgenerales.pe/wp-content/uploads/2020/04/docs_2hj/Buy-Sell%20Agreement_0476691_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352256/","spamhaus"
 "352255","2020-04-27 16:33:21","http://huniandijual.com/wp-content/uploads/2020/04/docs_x5r/Buy-Sell%20Agreement_334311_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352255/","spamhaus"
 "352254","2020-04-27 16:33:08","https://www.vagtachobrasil.com/wp-content/uploads/2020/04/docs_w7f/Buy-Sell%20Agreement_2686679_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352254/","spamhaus"
-"352253","2020-04-27 16:33:00","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/6987817/Buy-Sell%20Agreement_6987817_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352253/","spamhaus"
+"352253","2020-04-27 16:33:00","https://pakdesighee.com/wp-content/uploads/2020/04/docs_l9e/6987817/Buy-Sell%20Agreement_6987817_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352253/","spamhaus"
 "352252","2020-04-27 16:32:57","https://ftvlicenses.in/wp-content/uploads/2020/04/docs_ypk/79834712/Buy-Sell%20Agreement_79834712_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352252/","spamhaus"
 "352251","2020-04-27 16:32:54","http://orujedu.com/wp-content/uploads/2020/04/docs_f8n/51439450/Buy-Sell%20Agreement_51439450_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352251/","spamhaus"
 "352250","2020-04-27 16:32:51","http://orujedu.com/wp-content/uploads/2020/04/docs_f8n/Buy-Sell%20Agreement_92646947_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352250/","spamhaus"
@@ -1564,14 +2084,14 @@
 "352247","2020-04-27 16:32:40","http://orujedu.com/wp-content/uploads/2020/04/docs_f8n/7031640/Buy-Sell%20Agreement_7031640_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352247/","spamhaus"
 "352246","2020-04-27 16:32:33","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/Buy-Sell%20Agreement_13227_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352246/","spamhaus"
 "352245","2020-04-27 16:32:27","https://minimalisku.com/wp-content/uploads/2020/04/docs_tp8/7552813/Buy-Sell%20Agreement_7552813_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352245/","spamhaus"
-"352244","2020-04-27 16:32:19","https://www.corazondelcielo.mx/docs_5zp/945665/Buy-Sell%20Agreement_945665_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352244/","spamhaus"
+"352244","2020-04-27 16:32:19","https://www.corazondelcielo.mx/docs_5zp/945665/Buy-Sell%20Agreement_945665_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352244/","spamhaus"
 "352243","2020-04-27 16:32:15","http://www.s172.com/wp-content/uploads/2020/04/docs_x1c/7848/Buy-Sell%20Agreement_7848_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352243/","spamhaus"
 "352242","2020-04-27 16:32:08","https://www.internaut.in/wp-content/uploads/2020/04/docs_kl7/56223/Buy-Sell%20Agreement_56223_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352242/","spamhaus"
 "352241","2020-04-27 16:32:05","https://blog.macwap.com/wp-content/themes/calliope/docs_wdp/Buy-Sell%20Agreement_35921263_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352241/","spamhaus"
 "352240","2020-04-27 16:30:58","http://lehzig.com/trix.exe","offline","malware_download","Dridex","https://urlhaus.abuse.ch/url/352240/","anonymous"
 "352239","2020-04-27 16:30:53","https://altatecnica.com.mx/wp-content/uploads/2020/04/docs_qvi/285752/Buy-Sell%20Agreement_285752_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352239/","spamhaus"
 "352238","2020-04-27 16:30:29","http://cecadesayu.corazondelcielo.mx/docs_ytk/47079/Buy-Sell%20Agreement_47079_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352238/","spamhaus"
-"352237","2020-04-27 16:29:55","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/42458/Buy-Sell%20Agreement_42458_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352237/","spamhaus"
+"352237","2020-04-27 16:29:55","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/42458/Buy-Sell%20Agreement_42458_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352237/","spamhaus"
 "352236","2020-04-27 16:29:19","https://coberturasgenerales.pe/wp-content/uploads/2020/04/docs_2hj/53600169/Buy-Sell%20Agreement_53600169_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352236/","spamhaus"
 "352235","2020-04-27 16:28:45","https://www.internaut.in/wp-content/uploads/2020/04/docs_kl7/83448/Buy-Sell%20Agreement_83448_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352235/","spamhaus"
 "352234","2020-04-27 16:28:08","https://bestappliances.in/wp-content/uploads/2020/04/docs_0mg/5220570/Buy-Sell%20Agreement_5220570_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352234/","spamhaus"
@@ -1586,8 +2106,8 @@
 "352225","2020-04-27 16:22:37","https://www.netfeed.club/wp-content/themes/calliope/docs_wd2/4583612/Buy-Sell%20Agreement_4583612_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352225/","spamhaus"
 "352224","2020-04-27 16:21:26","https://www.teleporterhire.ie/wp-content/uploads/2020/04/docs_1sn/29138/Buy-Sell%20Agreement_29138_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352224/","spamhaus"
 "352223","2020-04-27 16:20:53","https://youngspiritshop.com/docs_8s0/Buy-Sell%20Agreement_90665735_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352223/","spamhaus"
-"352222","2020-04-27 16:20:17","https://www.corazondelcielo.mx/docs_5zp/40939/Buy-Sell%20Agreement_40939_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352222/","spamhaus"
-"352221","2020-04-27 16:19:42","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/97898/Buy-Sell%20Agreement_97898_04242020.zip","online","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352221/","spamhaus"
+"352222","2020-04-27 16:20:17","https://www.corazondelcielo.mx/docs_5zp/40939/Buy-Sell%20Agreement_40939_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352222/","spamhaus"
+"352221","2020-04-27 16:19:42","https://ineyes360.com/wp-content/uploads/2020/04/docs_m9l/97898/Buy-Sell%20Agreement_97898_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352221/","spamhaus"
 "352220","2020-04-27 16:19:07","https://manamobile.store/wp-content/uploads/2020/04/docs_s1f/3100/Buy-Sell%20Agreement_3100_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352220/","spamhaus"
 "352219","2020-04-27 16:18:34","https://youngspiritshop.com/docs_8s0/325802/Buy-Sell%20Agreement_325802_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352219/","spamhaus"
 "352218","2020-04-27 16:17:36","https://bestappliances.in/wp-content/uploads/2020/04/docs_0mg/Buy-Sell%20Agreement_51983362_04242020.zip","offline","malware_download","ESP,geofenced,Qakbot,Quakbot,zip","https://urlhaus.abuse.ch/url/352218/","spamhaus"
@@ -1614,9 +2134,9 @@
 "352197","2020-04-27 15:04:09","http://182.113.235.86:45057/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352197/","Gandylyan1"
 "352196","2020-04-27 15:04:04","http://111.42.66.18:54276/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352196/","Gandylyan1"
 "352195","2020-04-27 15:04:01","http://172.39.36.46:55566/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352195/","Gandylyan1"
-"352194","2020-04-27 15:03:29","http://222.188.222.71:38621/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352194/","Gandylyan1"
+"352194","2020-04-27 15:03:29","http://222.188.222.71:38621/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352194/","Gandylyan1"
 "352193","2020-04-27 15:03:23","http://199.83.203.28:43856/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352193/","Gandylyan1"
-"352192","2020-04-27 15:03:18","http://60.188.101.182:44556/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352192/","Gandylyan1"
+"352192","2020-04-27 15:03:18","http://60.188.101.182:44556/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352192/","Gandylyan1"
 "352191","2020-04-27 15:03:11","http://123.10.159.189:60403/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/352191/","Gandylyan1"
 "352190","2020-04-27 15:01:26","http://zlatemoravce.fara.sk/wp-content/uploads/docs_8su/8888.png","offline","malware_download","exe,Qakbot,Quakbot,spx105","https://urlhaus.abuse.ch/url/352190/","lazyactivist192"
 "352189","2020-04-27 15:01:20","http://faisalburger.pk/docs_ogj/8888.png","offline","malware_download","exe,Qakbot,spx105","https://urlhaus.abuse.ch/url/352189/","lazyactivist192"
@@ -1661,17 +2181,17 @@
 "352150","2020-04-27 14:12:52","http://92.53.64.203/bins/arm6.neiru","offline","malware_download","None","https://urlhaus.abuse.ch/url/352150/","JayTHL"
 "352149","2020-04-27 14:12:50","http://92.53.64.203/bins/arm5.neiru","offline","malware_download","None","https://urlhaus.abuse.ch/url/352149/","JayTHL"
 "352148","2020-04-27 14:12:48","http://92.53.64.203/bins/arm.neiru","offline","malware_download","None","https://urlhaus.abuse.ch/url/352148/","JayTHL"
-"352147","2020-04-27 14:12:45","http://51.178.81.75/Pandoras_Box/pandora.x86","online","malware_download","None","https://urlhaus.abuse.ch/url/352147/","JayTHL"
-"352146","2020-04-27 14:12:42","http://51.178.81.75/Pandoras_Box/pandora.spc","online","malware_download","None","https://urlhaus.abuse.ch/url/352146/","JayTHL"
-"352145","2020-04-27 14:12:34","http://51.178.81.75/Pandoras_Box/pandora.sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/352145/","JayTHL"
-"352144","2020-04-27 14:12:28","http://51.178.81.75/Pandoras_Box/pandora.ppc","online","malware_download","None","https://urlhaus.abuse.ch/url/352144/","JayTHL"
-"352143","2020-04-27 14:12:26","http://51.178.81.75/Pandoras_Box/pandora.mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/352143/","JayTHL"
-"352142","2020-04-27 14:12:19","http://51.178.81.75/Pandoras_Box/pandora.mips","online","malware_download","None","https://urlhaus.abuse.ch/url/352142/","JayTHL"
-"352141","2020-04-27 14:11:52","http://51.178.81.75/Pandoras_Box/pandora.m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/352141/","JayTHL"
-"352140","2020-04-27 14:11:21","http://51.178.81.75/Pandoras_Box/pandora.arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/352140/","JayTHL"
-"352139","2020-04-27 14:11:10","http://51.178.81.75/Pandoras_Box/pandora.arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/352139/","JayTHL"
-"352138","2020-04-27 14:11:02","http://51.178.81.75/Pandoras_Box/pandora.arm5","online","malware_download","None","https://urlhaus.abuse.ch/url/352138/","JayTHL"
-"352137","2020-04-27 14:10:54","http://51.178.81.75/Pandoras_Box/pandora.arm","online","malware_download","None","https://urlhaus.abuse.ch/url/352137/","JayTHL"
+"352147","2020-04-27 14:12:45","http://51.178.81.75/Pandoras_Box/pandora.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/352147/","JayTHL"
+"352146","2020-04-27 14:12:42","http://51.178.81.75/Pandoras_Box/pandora.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/352146/","JayTHL"
+"352145","2020-04-27 14:12:34","http://51.178.81.75/Pandoras_Box/pandora.sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/352145/","JayTHL"
+"352144","2020-04-27 14:12:28","http://51.178.81.75/Pandoras_Box/pandora.ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/352144/","JayTHL"
+"352143","2020-04-27 14:12:26","http://51.178.81.75/Pandoras_Box/pandora.mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/352143/","JayTHL"
+"352142","2020-04-27 14:12:19","http://51.178.81.75/Pandoras_Box/pandora.mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/352142/","JayTHL"
+"352141","2020-04-27 14:11:52","http://51.178.81.75/Pandoras_Box/pandora.m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/352141/","JayTHL"
+"352140","2020-04-27 14:11:21","http://51.178.81.75/Pandoras_Box/pandora.arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/352140/","JayTHL"
+"352139","2020-04-27 14:11:10","http://51.178.81.75/Pandoras_Box/pandora.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/352139/","JayTHL"
+"352138","2020-04-27 14:11:02","http://51.178.81.75/Pandoras_Box/pandora.arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/352138/","JayTHL"
+"352137","2020-04-27 14:10:54","http://51.178.81.75/Pandoras_Box/pandora.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/352137/","JayTHL"
 "352136","2020-04-27 14:10:38","http://50.3.177.106/SBIDIOT/zte","online","malware_download","None","https://urlhaus.abuse.ch/url/352136/","JayTHL"
 "352135","2020-04-27 14:10:36","http://50.3.177.106/SBIDIOT/yarn","online","malware_download","None","https://urlhaus.abuse.ch/url/352135/","JayTHL"
 "352134","2020-04-27 14:10:33","http://50.3.177.106/SBIDIOT/x86","online","malware_download","None","https://urlhaus.abuse.ch/url/352134/","JayTHL"
@@ -1691,20 +2211,20 @@
 "352120","2020-04-27 14:09:57","http://45.95.169.232/bins/sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/352120/","JayTHL"
 "352119","2020-04-27 14:09:55","http://45.95.169.232/bins/ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/352119/","JayTHL"
 "352118","2020-04-27 14:09:53","http://45.95.169.232/update.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/352118/","JayTHL"
-"352117","2020-04-27 14:09:51","http://37.49.226.186/SBIDIOT/zte","online","malware_download","None","https://urlhaus.abuse.ch/url/352117/","JayTHL"
-"352116","2020-04-27 14:09:49","http://37.49.226.186/SBIDIOT/yarn","online","malware_download","None","https://urlhaus.abuse.ch/url/352116/","JayTHL"
-"352115","2020-04-27 14:09:47","http://37.49.226.186/SBIDIOT/x86","online","malware_download","None","https://urlhaus.abuse.ch/url/352115/","JayTHL"
-"352114","2020-04-27 14:09:45","http://37.49.226.186/SBIDIOT/spc","online","malware_download","None","https://urlhaus.abuse.ch/url/352114/","JayTHL"
-"352113","2020-04-27 14:09:43","http://37.49.226.186/SBIDIOT/sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/352113/","JayTHL"
-"352112","2020-04-27 14:09:41","http://37.49.226.186/SBIDIOT/rtk","online","malware_download","None","https://urlhaus.abuse.ch/url/352112/","JayTHL"
-"352111","2020-04-27 14:09:39","http://37.49.226.186/SBIDIOT/root","online","malware_download","None","https://urlhaus.abuse.ch/url/352111/","JayTHL"
-"352110","2020-04-27 14:09:37","http://37.49.226.186/SBIDIOT/ppc","online","malware_download","None","https://urlhaus.abuse.ch/url/352110/","JayTHL"
-"352109","2020-04-27 14:09:35","http://37.49.226.186/SBIDIOT/mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/352109/","JayTHL"
-"352108","2020-04-27 14:09:33","http://37.49.226.186/SBIDIOT/mips","online","malware_download","None","https://urlhaus.abuse.ch/url/352108/","JayTHL"
-"352107","2020-04-27 14:09:31","http://37.49.226.186/SBIDIOT/m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/352107/","JayTHL"
-"352106","2020-04-27 14:09:29","http://37.49.226.186/SBIDIOT/arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/352106/","JayTHL"
-"352105","2020-04-27 14:09:27","http://37.49.226.186/SBIDIOT/arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/352105/","JayTHL"
-"352104","2020-04-27 14:09:25","http://37.49.226.186/SBIDIOT/arm","online","malware_download","None","https://urlhaus.abuse.ch/url/352104/","JayTHL"
+"352117","2020-04-27 14:09:51","http://37.49.226.186/SBIDIOT/zte","offline","malware_download","None","https://urlhaus.abuse.ch/url/352117/","JayTHL"
+"352116","2020-04-27 14:09:49","http://37.49.226.186/SBIDIOT/yarn","offline","malware_download","None","https://urlhaus.abuse.ch/url/352116/","JayTHL"
+"352115","2020-04-27 14:09:47","http://37.49.226.186/SBIDIOT/x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/352115/","JayTHL"
+"352114","2020-04-27 14:09:45","http://37.49.226.186/SBIDIOT/spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/352114/","JayTHL"
+"352113","2020-04-27 14:09:43","http://37.49.226.186/SBIDIOT/sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/352113/","JayTHL"
+"352112","2020-04-27 14:09:41","http://37.49.226.186/SBIDIOT/rtk","offline","malware_download","None","https://urlhaus.abuse.ch/url/352112/","JayTHL"
+"352111","2020-04-27 14:09:39","http://37.49.226.186/SBIDIOT/root","offline","malware_download","None","https://urlhaus.abuse.ch/url/352111/","JayTHL"
+"352110","2020-04-27 14:09:37","http://37.49.226.186/SBIDIOT/ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/352110/","JayTHL"
+"352109","2020-04-27 14:09:35","http://37.49.226.186/SBIDIOT/mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/352109/","JayTHL"
+"352108","2020-04-27 14:09:33","http://37.49.226.186/SBIDIOT/mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/352108/","JayTHL"
+"352107","2020-04-27 14:09:31","http://37.49.226.186/SBIDIOT/m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/352107/","JayTHL"
+"352106","2020-04-27 14:09:29","http://37.49.226.186/SBIDIOT/arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/352106/","JayTHL"
+"352105","2020-04-27 14:09:27","http://37.49.226.186/SBIDIOT/arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/352105/","JayTHL"
+"352104","2020-04-27 14:09:25","http://37.49.226.186/SBIDIOT/arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/352104/","JayTHL"
 "352103","2020-04-27 14:09:23","http://37.49.226.162/beastmode/b3astmode.x86","online","malware_download","None","https://urlhaus.abuse.ch/url/352103/","JayTHL"
 "352102","2020-04-27 14:09:21","http://37.49.226.162/beastmode/b3astmode.spc","online","malware_download","None","https://urlhaus.abuse.ch/url/352102/","JayTHL"
 "352101","2020-04-27 14:09:19","http://37.49.226.162/beastmode/b3astmode.sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/352101/","JayTHL"
@@ -1795,17 +2315,17 @@
 "352016","2020-04-27 14:05:05","http://138.68.10.222/zehir/z3hir.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/352016/","JayTHL"
 "352015","2020-04-27 14:05:02","http://138.68.10.222/zehir/z3hir.arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/352015/","JayTHL"
 "352014","2020-04-27 14:05:00","http://138.68.10.222/zehir/z3hir.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/352014/","JayTHL"
-"352013","2020-04-27 14:04:57","http://108.174.197.76/bins/LOTMOT.x86","online","malware_download","None","https://urlhaus.abuse.ch/url/352013/","JayTHL"
-"352012","2020-04-27 14:04:54","http://108.174.197.76/bins/LOTMOT.spc","online","malware_download","None","https://urlhaus.abuse.ch/url/352012/","JayTHL"
-"352011","2020-04-27 14:04:52","http://108.174.197.76/bins/LOTMOT.sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/352011/","JayTHL"
-"352010","2020-04-27 14:04:50","http://108.174.197.76/bins/LOTMOT.ppc","online","malware_download","None","https://urlhaus.abuse.ch/url/352010/","JayTHL"
-"352009","2020-04-27 14:04:47","http://108.174.197.76/bins/LOTMOT.mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/352009/","JayTHL"
-"352008","2020-04-27 14:04:45","http://108.174.197.76/bins/LOTMOT.mips","online","malware_download","None","https://urlhaus.abuse.ch/url/352008/","JayTHL"
-"352007","2020-04-27 14:04:43","http://108.174.197.76/bins/LOTMOT.m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/352007/","JayTHL"
-"352006","2020-04-27 14:04:41","http://108.174.197.76/bins/LOTMOT.arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/352006/","JayTHL"
-"352005","2020-04-27 14:04:38","http://108.174.197.76/bins/LOTMOT.arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/352005/","JayTHL"
-"352004","2020-04-27 14:04:36","http://108.174.197.76/bins/LOTMOT.arm5","online","malware_download","None","https://urlhaus.abuse.ch/url/352004/","JayTHL"
-"352003","2020-04-27 14:04:34","http://108.174.197.76/bins/LOTMOT.arm","online","malware_download","None","https://urlhaus.abuse.ch/url/352003/","JayTHL"
+"352013","2020-04-27 14:04:57","http://108.174.197.76/bins/LOTMOT.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/352013/","JayTHL"
+"352012","2020-04-27 14:04:54","http://108.174.197.76/bins/LOTMOT.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/352012/","JayTHL"
+"352011","2020-04-27 14:04:52","http://108.174.197.76/bins/LOTMOT.sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/352011/","JayTHL"
+"352010","2020-04-27 14:04:50","http://108.174.197.76/bins/LOTMOT.ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/352010/","JayTHL"
+"352009","2020-04-27 14:04:47","http://108.174.197.76/bins/LOTMOT.mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/352009/","JayTHL"
+"352008","2020-04-27 14:04:45","http://108.174.197.76/bins/LOTMOT.mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/352008/","JayTHL"
+"352007","2020-04-27 14:04:43","http://108.174.197.76/bins/LOTMOT.m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/352007/","JayTHL"
+"352006","2020-04-27 14:04:41","http://108.174.197.76/bins/LOTMOT.arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/352006/","JayTHL"
+"352005","2020-04-27 14:04:38","http://108.174.197.76/bins/LOTMOT.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/352005/","JayTHL"
+"352004","2020-04-27 14:04:36","http://108.174.197.76/bins/LOTMOT.arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/352004/","JayTHL"
+"352003","2020-04-27 14:04:34","http://108.174.197.76/bins/LOTMOT.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/352003/","JayTHL"
 "352002","2020-04-27 14:04:30","http://104.168.198.26/nope/daddyscum.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/352002/","JayTHL"
 "352001","2020-04-27 14:03:59","http://104.168.198.26/nope/daddyscum.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/352001/","JayTHL"
 "352000","2020-04-27 14:03:56","http://104.168.198.26/nope/daddyscum.sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/352000/","JayTHL"
@@ -1856,12 +2376,12 @@
 "351955","2020-04-27 13:13:14","http://yesxx.xyz/chrome.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/351955/","JayTHL"
 "351954","2020-04-27 13:13:10","http://hrrwn.xyz/chrome.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/351954/","JayTHL"
 "351953","2020-04-27 13:12:16","http://68.170.93.182:36011/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351953/","zbetcheckin"
-"351952","2020-04-27 13:12:11","http://45.95.168.251/powerpc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351952/","zbetcheckin"
-"351951","2020-04-27 13:12:09","http://45.95.168.251/sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351951/","zbetcheckin"
-"351950","2020-04-27 13:12:07","http://45.95.168.251/m68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351950/","zbetcheckin"
-"351949","2020-04-27 13:12:05","http://45.95.168.251/i686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351949/","zbetcheckin"
-"351948","2020-04-27 13:12:03","http://45.95.168.251/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351948/","zbetcheckin"
-"351947","2020-04-27 13:08:03","http://45.95.168.251/i586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351947/","zbetcheckin"
+"351952","2020-04-27 13:12:11","http://45.95.168.251/powerpc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351952/","zbetcheckin"
+"351951","2020-04-27 13:12:09","http://45.95.168.251/sparc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351951/","zbetcheckin"
+"351950","2020-04-27 13:12:07","http://45.95.168.251/m68k","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351950/","zbetcheckin"
+"351949","2020-04-27 13:12:05","http://45.95.168.251/i686","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351949/","zbetcheckin"
+"351948","2020-04-27 13:12:03","http://45.95.168.251/sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351948/","zbetcheckin"
+"351947","2020-04-27 13:08:03","http://45.95.168.251/i586","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351947/","zbetcheckin"
 "351946","2020-04-27 12:26:03","https://pastebin.com/raw/L6gHgWpj","offline","malware_download","None","https://urlhaus.abuse.ch/url/351946/","JayTHL"
 "351945","2020-04-27 12:08:05","http://78.188.224.31:47692/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351945/","geenensp"
 "351944","2020-04-27 12:06:06","http://221.210.211.15:37334/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351944/","Gandylyan1"
@@ -1884,13 +2404,13 @@
 "351927","2020-04-27 12:04:17","http://178.64.69.237:55563/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351927/","Gandylyan1"
 "351926","2020-04-27 12:04:09","http://115.59.77.58:49440/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351926/","Gandylyan1"
 "351925","2020-04-27 12:04:04","http://116.114.95.68:45538/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351925/","Gandylyan1"
-"351924","2020-04-27 11:55:12","http://45.95.168.251/armv6l","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351924/","Gandylyan1"
-"351923","2020-04-27 11:55:10","http://45.95.168.251/armv5l","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351923/","Gandylyan1"
-"351922","2020-04-27 11:55:07","http://45.95.168.251/armv4l","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351922/","Gandylyan1"
-"351921","2020-04-27 11:55:05","http://45.95.168.251/mipsel","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351921/","Gandylyan1"
-"351920","2020-04-27 11:55:03","http://45.95.168.251/x86","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351920/","Gandylyan1"
-"351919","2020-04-27 11:47:05","http://45.95.168.251/mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/351919/","geenensp"
-"351918","2020-04-27 11:47:02","http://45.95.168.251/bbins.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/351918/","geenensp"
+"351924","2020-04-27 11:55:12","http://45.95.168.251/armv6l","online","malware_download",",elf","https://urlhaus.abuse.ch/url/351924/","Gandylyan1"
+"351923","2020-04-27 11:55:10","http://45.95.168.251/armv5l","online","malware_download",",elf","https://urlhaus.abuse.ch/url/351923/","Gandylyan1"
+"351922","2020-04-27 11:55:07","http://45.95.168.251/armv4l","online","malware_download",",elf","https://urlhaus.abuse.ch/url/351922/","Gandylyan1"
+"351921","2020-04-27 11:55:05","http://45.95.168.251/mipsel","online","malware_download",",elf","https://urlhaus.abuse.ch/url/351921/","Gandylyan1"
+"351920","2020-04-27 11:55:03","http://45.95.168.251/x86","online","malware_download",",elf","https://urlhaus.abuse.ch/url/351920/","Gandylyan1"
+"351919","2020-04-27 11:47:05","http://45.95.168.251/mips","online","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/351919/","geenensp"
+"351918","2020-04-27 11:47:02","http://45.95.168.251/bbins.sh","online","malware_download","script","https://urlhaus.abuse.ch/url/351918/","geenensp"
 "351917","2020-04-27 11:27:16","https://bitbucket.org/destek21/3reklam/downloads/20gbhediyesi.apk","online","malware_download","None","https://urlhaus.abuse.ch/url/351917/","JAMESWT_MHT"
 "351916","2020-04-27 11:23:07","https://20gbverdimgitti.com/hediye20gb.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/351916/","JAMESWT_MHT"
 "351915","2020-04-27 11:08:18","http://hmbwgroup.com/wp-includes/js/tinymce/skins/wordpress/yu.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/351915/","JAMESWT_MHT"
@@ -1907,16 +2427,16 @@
 "351904","2020-04-27 10:16:08","http://89.34.27.10/fbot.arm5","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351904/","Gandylyan1"
 "351903","2020-04-27 10:16:05","http://89.34.27.10/fbot.arm","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351903/","Gandylyan1"
 "351902","2020-04-27 10:16:03","http://89.34.27.10/fbot.x86","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351902/","Gandylyan1"
-"351901","2020-04-27 10:05:08","http://45.95.168.254:1691/dvrbot.x86","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351901/","Gandylyan1"
-"351900","2020-04-27 10:05:05","http://45.95.168.254:1691/dvrbot.mips","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351900/","Gandylyan1"
-"351899","2020-04-27 10:05:03","http://45.95.168.254:1691/dvrbot.arm5","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351899/","Gandylyan1"
+"351901","2020-04-27 10:05:08","http://45.95.168.254:1691/dvrbot.x86","online","malware_download",",elf","https://urlhaus.abuse.ch/url/351901/","Gandylyan1"
+"351900","2020-04-27 10:05:05","http://45.95.168.254:1691/dvrbot.mips","online","malware_download",",elf","https://urlhaus.abuse.ch/url/351900/","Gandylyan1"
+"351899","2020-04-27 10:05:03","http://45.95.168.254:1691/dvrbot.arm5","online","malware_download",",elf","https://urlhaus.abuse.ch/url/351899/","Gandylyan1"
 "351898","2020-04-27 10:01:33","http://vmi367745.contaboserver.net/bins/mpsl","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351898/","Gandylyan1"
 "351897","2020-04-27 10:01:31","http://vmi367745.contaboserver.net/bins/arm7","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351897/","Gandylyan1"
 "351896","2020-04-27 10:01:23","http://vmi367745.contaboserver.net/bins/arm6","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351896/","Gandylyan1"
 "351895","2020-04-27 10:01:19","http://vmi367745.contaboserver.net/bins/arm5","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351895/","Gandylyan1"
 "351894","2020-04-27 10:01:07","http://vmi367745.contaboserver.net/bins/arm","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351894/","Gandylyan1"
 "351893","2020-04-27 09:57:03","http://45.95.169.232/bins/m68k","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351893/","Gandylyan1"
-"351892","2020-04-27 09:50:03","http://45.95.168.254:1691/dvrbot.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351892/","zbetcheckin"
+"351892","2020-04-27 09:50:03","http://45.95.168.254:1691/dvrbot.arm7","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351892/","zbetcheckin"
 "351891","2020-04-27 09:47:40","https://pastebin.com/raw/bH0sjMPS","offline","malware_download","None","https://urlhaus.abuse.ch/url/351891/","JayTHL"
 "351890","2020-04-27 09:47:36","https://paste.ee/r/kKv90","offline","malware_download","Encoded,powershell,smokeloader","https://urlhaus.abuse.ch/url/351890/","Jouliok"
 "351889","2020-04-27 09:47:32","https://paste.ee/r/VfRGk","offline","malware_download","Encoded,powershell,smokeloader","https://urlhaus.abuse.ch/url/351889/","Jouliok"
@@ -1928,7 +2448,7 @@
 "351883","2020-04-27 09:45:36","http://152.250.68.72:14114/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351883/","geenensp"
 "351882","2020-04-27 09:45:04","http://109.165.170.178:3456/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351882/","geenensp"
 "351881","2020-04-27 09:15:06","https://www.dropbox.com/s/9ppzut30mno1omj/00293876373344.pdf.z?dl=1","offline","malware_download","gz","https://urlhaus.abuse.ch/url/351881/","abuse_ch"
-"351880","2020-04-27 09:05:41","http://58.54.84.129:47987/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351880/","Gandylyan1"
+"351880","2020-04-27 09:05:41","http://58.54.84.129:47987/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351880/","Gandylyan1"
 "351879","2020-04-27 09:05:37","http://61.52.73.157:59419/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351879/","Gandylyan1"
 "351878","2020-04-27 09:05:34","http://221.210.211.16:40398/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351878/","Gandylyan1"
 "351877","2020-04-27 09:05:28","http://49.89.234.53:53534/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351877/","Gandylyan1"
@@ -1936,13 +2456,13 @@
 "351875","2020-04-27 09:05:19","http://218.21.171.45:38598/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351875/","Gandylyan1"
 "351874","2020-04-27 09:05:16","http://42.239.93.155:40076/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351874/","Gandylyan1"
 "351873","2020-04-27 09:05:11","http://123.4.32.19:58861/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351873/","Gandylyan1"
-"351872","2020-04-27 09:05:06","http://222.217.65.112:57728/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351872/","Gandylyan1"
+"351872","2020-04-27 09:05:06","http://222.217.65.112:57728/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351872/","Gandylyan1"
 "351871","2020-04-27 09:04:52","http://111.38.8.71:51412/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351871/","Gandylyan1"
 "351870","2020-04-27 09:04:37","http://116.114.95.86:41825/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351870/","Gandylyan1"
 "351869","2020-04-27 09:04:34","http://77.43.131.238:34278/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351869/","Gandylyan1"
 "351868","2020-04-27 09:04:31","http://221.210.211.23:55422/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351868/","Gandylyan1"
 "351867","2020-04-27 09:04:28","http://122.254.18.24:1080/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351867/","Gandylyan1"
-"351866","2020-04-27 09:04:23","http://123.10.51.103:48112/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351866/","Gandylyan1"
+"351866","2020-04-27 09:04:23","http://123.10.51.103:48112/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351866/","Gandylyan1"
 "351865","2020-04-27 09:04:19","http://122.234.175.245:40776/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351865/","Gandylyan1"
 "351864","2020-04-27 09:04:14","http://162.212.113.10:50151/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351864/","Gandylyan1"
 "351863","2020-04-27 09:04:10","http://222.136.118.116:60581/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351863/","Gandylyan1"
@@ -1965,7 +2485,7 @@
 "351846","2020-04-27 07:33:06","http://107.175.8.75/powerpc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351846/","zbetcheckin"
 "351845","2020-04-27 07:33:04","http://107.175.8.75/mipsel","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351845/","zbetcheckin"
 "351844","2020-04-27 07:30:04","http://disk.karelia.pro/rkeIbsm/zzzzzzzzz.exe","offline","malware_download","Taurus","https://urlhaus.abuse.ch/url/351844/","vxvault"
-"351843","2020-04-27 07:22:04","http://45.95.168.254:1691/dvrbot.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351843/","zbetcheckin"
+"351843","2020-04-27 07:22:04","http://45.95.168.254:1691/dvrbot.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351843/","zbetcheckin"
 "351842","2020-04-27 06:51:08","http://191.37.220.200:16972/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351842/","geenensp"
 "351841","2020-04-27 06:47:06","http://bibpap.com/Qa/56071822.jpg","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/351841/","abuse_ch"
 "351840","2020-04-27 06:46:05","http://bibpap.com/Qa/618883.jpg","offline","malware_download","exe,lucifer","https://urlhaus.abuse.ch/url/351840/","abuse_ch"
@@ -1978,7 +2498,7 @@
 "351833","2020-04-27 06:17:08","http://78.186.190.222:17012/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351833/","geenensp"
 "351832","2020-04-27 06:16:43","http://106.104.115.213:30358/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351832/","geenensp"
 "351831","2020-04-27 06:16:38","http://59.125.190.210:56936/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351831/","geenensp"
-"351830","2020-04-27 06:16:34","http://221.158.124.81:2063/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351830/","geenensp"
+"351830","2020-04-27 06:16:34","http://221.158.124.81:2063/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351830/","geenensp"
 "351829","2020-04-27 06:16:30","http://107.175.8.75/mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/351829/","geenensp"
 "351828","2020-04-27 06:16:27","http://107.175.8.75/niggabins.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/351828/","geenensp"
 "351827","2020-04-27 06:16:25","http://1.34.183.212:62109/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351827/","geenensp"
@@ -1987,7 +2507,7 @@
 "351824","2020-04-27 06:16:10","http://5.29.175.150:59666/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351824/","geenensp"
 "351823","2020-04-27 06:16:06","http://1.34.128.245:62501/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351823/","geenensp"
 "351822","2020-04-27 06:15:21","http://chnesstdywealthandmoduleorganisationap16.duckdns.org/secure/svchost.exe","offline","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/351822/","gorimpthon"
-"351821","2020-04-27 06:14:56","http://stdykungeduationaldeveloper15investmenqg.duckdns.org/kungdoc/winlog.exe","online","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/351821/","gorimpthon"
+"351821","2020-04-27 06:14:56","http://stdykungeduationaldeveloper15investmenqg.duckdns.org/kungdoc/winlog.exe","offline","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/351821/","gorimpthon"
 "351820","2020-04-27 06:14:35","http://42.82.191.105:3898/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351820/","geenensp"
 "351819","2020-04-27 06:14:31","http://122.116.9.14:15816/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351819/","geenensp"
 "351818","2020-04-27 06:14:25","http://69.229.0.133:53066/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351818/","geenensp"
@@ -2016,8 +2536,8 @@
 "351795","2020-04-27 06:04:14","http://42.238.188.54:55147/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351795/","Gandylyan1"
 "351794","2020-04-27 06:04:10","http://113.243.0.76:34060/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351794/","Gandylyan1"
 "351793","2020-04-27 06:04:06","http://125.42.254.127:33045/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351793/","Gandylyan1"
-"351792","2020-04-27 05:50:37","http://uniteddefence8forstdygorvermentsocialeyx.duckdns.org/chnsfrnd1/vbc.exe","online","malware_download","exe,Formbook,Loki","https://urlhaus.abuse.ch/url/351792/","oppimaniac"
-"351791","2020-04-27 05:50:18","http://anaekppystdy4initalymedicalconsultancy.duckdns.org/anaekdoc/win32.exe","online","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/351791/","oppimaniac"
+"351792","2020-04-27 05:50:37","http://uniteddefence8forstdygorvermentsocialeyx.duckdns.org/chnsfrnd1/vbc.exe","offline","malware_download","exe,Formbook,Loki","https://urlhaus.abuse.ch/url/351792/","oppimaniac"
+"351791","2020-04-27 05:50:18","http://anaekppystdy4initalymedicalconsultancy.duckdns.org/anaekdoc/win32.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/351791/","oppimaniac"
 "351790","2020-04-27 05:49:03","https://cherinetiles.com/wp-content/xnd/Swf%20Payment%2009-01-20.pif","offline","malware_download","exe","https://urlhaus.abuse.ch/url/351790/","zbetcheckin"
 "351789","2020-04-27 05:40:04","https://pastebin.com/raw/Q53tXje7","offline","malware_download","None","https://urlhaus.abuse.ch/url/351789/","JayTHL"
 "351788","2020-04-27 05:28:03","https://pastebin.com/raw/JGcTdMAH","offline","malware_download","None","https://urlhaus.abuse.ch/url/351788/","JayTHL"
@@ -2160,7 +2680,7 @@
 "351651","2020-04-26 23:08:09","http://37.49.226.16/luoqxbocmkxnexy/tbox.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351651/","zbetcheckin"
 "351650","2020-04-26 23:08:07","http://81.17.16.122:34343/ds8yg8wbaja2/ch1n4.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351650/","zbetcheckin"
 "351649","2020-04-26 23:08:05","http://37.49.226.16/luoqxbocmkxnexy/tbox.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351649/","zbetcheckin"
-"351648","2020-04-26 23:08:03","http://51.255.170.237/pandora.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351648/","zbetcheckin"
+"351648","2020-04-26 23:08:03","http://51.255.170.237/pandora.mips","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351648/","zbetcheckin"
 "351647","2020-04-26 23:07:05","https://pastebin.com/raw/qN1aCzmi","offline","malware_download","None","https://urlhaus.abuse.ch/url/351647/","JayTHL"
 "351646","2020-04-26 22:53:06","http://81.17.16.122:42069/wp-admin/php64.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/351646/","zbetcheckin"
 "351645","2020-04-26 22:53:04","http://222.187.191.224:57094/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351645/","zbetcheckin"
@@ -2183,7 +2703,7 @@
 "351628","2020-04-26 21:04:11","http://182.127.2.37:46436/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351628/","Gandylyan1"
 "351627","2020-04-26 21:04:07","http://42.230.255.54:45121/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351627/","Gandylyan1"
 "351626","2020-04-26 21:04:03","http://182.113.223.215:38308/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351626/","Gandylyan1"
-"351625","2020-04-26 20:57:06","http://onlink-aoiuvr.com/Shipment-Invoice.jar","online","malware_download","None","https://urlhaus.abuse.ch/url/351625/","JayTHL"
+"351625","2020-04-26 20:57:06","http://onlink-aoiuvr.com/Shipment-Invoice.jar","offline","malware_download","None","https://urlhaus.abuse.ch/url/351625/","JayTHL"
 "351624","2020-04-26 20:24:07","http://80.184.103.90:16636/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351624/","zbetcheckin"
 "351623","2020-04-26 20:15:04","https://pastebin.com/raw/xhFKTdB7","offline","malware_download","None","https://urlhaus.abuse.ch/url/351623/","JayTHL"
 "351622","2020-04-26 19:30:08","http://ewrwr.xyz/sagawa2.6.7.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/351622/","JayTHL"
@@ -2232,7 +2752,7 @@
 "351579","2020-04-26 15:05:30","http://140.224.135.187:42532/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351579/","Gandylyan1"
 "351578","2020-04-26 15:05:05","http://77.43.171.16:35006/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351578/","Gandylyan1"
 "351577","2020-04-26 15:05:02","http://58.218.7.222:37621/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351577/","Gandylyan1"
-"351576","2020-04-26 15:04:56","http://36.107.174.111:57540/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351576/","Gandylyan1"
+"351576","2020-04-26 15:04:56","http://36.107.174.111:57540/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351576/","Gandylyan1"
 "351575","2020-04-26 15:04:48","http://216.180.117.98:57030/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351575/","Gandylyan1"
 "351574","2020-04-26 15:04:34","http://116.114.95.218:40982/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351574/","Gandylyan1"
 "351573","2020-04-26 15:04:30","http://176.113.161.51:34472/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351573/","Gandylyan1"
@@ -2270,7 +2790,7 @@
 "351541","2020-04-26 11:41:05","http://10gamestop.com/app/watchdog.exe","offline","malware_download","exe,glupteba","https://urlhaus.abuse.ch/url/351541/","zbetcheckin"
 "351540","2020-04-26 11:38:13","https://pastebin.com/raw/WuycRT6N","offline","malware_download","None","https://urlhaus.abuse.ch/url/351540/","JayTHL"
 "351539","2020-04-26 11:38:03","https://pastebin.com/raw/g9sT5RZ9","offline","malware_download","None","https://urlhaus.abuse.ch/url/351539/","JayTHL"
-"351538","2020-04-26 11:36:06","http://178.233.234.188:41647/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351538/","geenensp"
+"351538","2020-04-26 11:36:06","http://178.233.234.188:41647/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351538/","geenensp"
 "351537","2020-04-26 11:32:04","http://46.176.44.211:56680/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351537/","geenensp"
 "351536","2020-04-26 11:28:03","https://cdn.discordapp.com/attachments/703043908958945395/703043994116030484/Valve_Purchase_Order_-_PO_3400448631.gz","offline","malware_download","AgentTesla,gz","https://urlhaus.abuse.ch/url/351536/","abuse_ch"
 "351535","2020-04-26 11:25:10","https://cdn.discordapp.com/attachments/703043908958945395/703146782430986361/Valve_Purchase_Order_-_PO_3400448631.gz","offline","malware_download","AgentTesla,gz","https://urlhaus.abuse.ch/url/351535/","abuse_ch"
@@ -2286,7 +2806,7 @@
 "351525","2020-04-26 10:04:09","http://114.236.30.144:60065/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351525/","zbetcheckin"
 "351524","2020-04-26 09:25:09","http://shahtoba.faqserv.com/resmin.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/351524/","zbetcheckin"
 "351523","2020-04-26 09:15:04","http://89.136.197.170:33046/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351523/","geenensp"
-"351522","2020-04-26 09:14:05","http://183.107.57.170:47002/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351522/","zbetcheckin"
+"351522","2020-04-26 09:14:05","http://183.107.57.170:47002/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351522/","zbetcheckin"
 "351521","2020-04-26 09:07:07","http://221.210.211.114:33181/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351521/","Gandylyan1"
 "351520","2020-04-26 09:07:03","http://123.11.166.0:52608/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351520/","Gandylyan1"
 "351519","2020-04-26 09:06:58","http://180.116.96.229:40670/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351519/","Gandylyan1"
@@ -2372,7 +2892,7 @@
 "351439","2020-04-26 06:43:21","http://213.202.255.4/zeros6x.sh","online","malware_download","script","https://urlhaus.abuse.ch/url/351439/","geenensp"
 "351438","2020-04-26 06:43:19","http://165.227.184.147/bins/Hilix.mips","offline","malware_download","32-bit,elf,mips","https://urlhaus.abuse.ch/url/351438/","geenensp"
 "351437","2020-04-26 06:43:16","http://165.227.184.147/bins/Hilix.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/351437/","geenensp"
-"351436","2020-04-26 06:43:14","http://200.207.64.90:20663/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351436/","geenensp"
+"351436","2020-04-26 06:43:14","http://200.207.64.90:20663/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351436/","geenensp"
 "351435","2020-04-26 06:43:08","http://179.95.98.10:21992/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351435/","geenensp"
 "351434","2020-04-26 06:42:38","https://pastebin.com/raw/ekMzAnyX","offline","malware_download","None","https://urlhaus.abuse.ch/url/351434/","JayTHL"
 "351433","2020-04-26 06:42:36","https://pastebin.com/raw/Earh9hGr","offline","malware_download","None","https://urlhaus.abuse.ch/url/351433/","JayTHL"
@@ -2393,7 +2913,7 @@
 "351418","2020-04-26 06:05:59","http://114.235.190.4:46201/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351418/","Gandylyan1"
 "351417","2020-04-26 06:05:52","http://125.42.234.248:58270/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351417/","Gandylyan1"
 "351416","2020-04-26 06:05:48","http://182.115.212.78:36875/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351416/","Gandylyan1"
-"351415","2020-04-26 06:05:45","http://111.42.103.93:58772/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351415/","Gandylyan1"
+"351415","2020-04-26 06:05:45","http://111.42.103.93:58772/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351415/","Gandylyan1"
 "351414","2020-04-26 06:05:39","http://116.114.95.190:58682/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351414/","Gandylyan1"
 "351413","2020-04-26 06:05:34","http://173.161.208.193:4120/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351413/","Gandylyan1"
 "351412","2020-04-26 06:05:31","http://116.114.95.158:51931/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351412/","Gandylyan1"
@@ -2402,7 +2922,7 @@
 "351409","2020-04-26 06:05:16","http://162.212.115.86:45727/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351409/","Gandylyan1"
 "351408","2020-04-26 06:05:12","http://219.155.211.187:34395/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351408/","Gandylyan1"
 "351407","2020-04-26 06:05:08","http://111.38.8.81:57192/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351407/","Gandylyan1"
-"351406","2020-04-26 06:04:54","http://42.234.202.142:47562/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351406/","Gandylyan1"
+"351406","2020-04-26 06:04:54","http://42.234.202.142:47562/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351406/","Gandylyan1"
 "351405","2020-04-26 06:04:49","http://111.42.102.153:46877/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351405/","Gandylyan1"
 "351404","2020-04-26 06:04:45","http://27.41.227.194:52727/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351404/","Gandylyan1"
 "351403","2020-04-26 06:04:37","http://172.36.16.47:57514/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351403/","Gandylyan1"
@@ -2539,7 +3059,7 @@
 "351272","2020-04-26 00:06:19","http://111.42.66.42:44563/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351272/","Gandylyan1"
 "351271","2020-04-26 00:06:11","http://120.32.11.38:55836/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351271/","Gandylyan1"
 "351270","2020-04-26 00:05:38","http://115.49.42.66:53146/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351270/","Gandylyan1"
-"351269","2020-04-26 00:05:34","http://111.42.102.136:46356/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351269/","Gandylyan1"
+"351269","2020-04-26 00:05:34","http://111.42.102.136:46356/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351269/","Gandylyan1"
 "351268","2020-04-26 00:05:15","http://42.230.204.161:43878/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351268/","Gandylyan1"
 "351267","2020-04-26 00:05:11","http://116.114.95.68:44261/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351267/","Gandylyan1"
 "351266","2020-04-26 00:05:07","http://36.44.78.166:38457/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351266/","Gandylyan1"
@@ -2577,7 +3097,7 @@
 "351234","2020-04-25 21:03:27","http://221.210.211.50:58428/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351234/","Gandylyan1"
 "351233","2020-04-25 21:03:22","http://182.115.203.21:46689/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351233/","Gandylyan1"
 "351232","2020-04-25 21:03:18","http://222.139.109.216:47403/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351232/","Gandylyan1"
-"351231","2020-04-25 21:03:15","http://124.119.138.199:34504/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351231/","Gandylyan1"
+"351231","2020-04-25 21:03:15","http://124.119.138.199:34504/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351231/","Gandylyan1"
 "351230","2020-04-25 21:03:10","http://114.239.25.119:43169/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351230/","Gandylyan1"
 "351229","2020-04-25 21:03:05","http://123.96.36.221:49858/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351229/","Gandylyan1"
 "351228","2020-04-25 21:00:06","https://pastebin.com/raw/jjTB3bus","offline","malware_download","None","https://urlhaus.abuse.ch/url/351228/","JayTHL"
@@ -2641,8 +3161,8 @@
 "351170","2020-04-25 16:33:35","http://download.xp666.com/xzqswf/WebConSer.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/351170/","zbetcheckin"
 "351169","2020-04-25 16:25:03","http://88.218.16.38/0Tcpy3zTGfBYlm0.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/351169/","zbetcheckin"
 "351168","2020-04-25 16:19:05","http://kristofferdaniels.com/wp-content/themes/twentyseventeen/VHHMBJFzkvXoU.txt","offline","malware_download","powershell","https://urlhaus.abuse.ch/url/351168/","abuse_ch"
-"351167","2020-04-25 16:07:24","http://chantdownproster.com/EFTERMLETILLE.exe","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351167/","abuse_ch"
-"351166","2020-04-25 16:07:17","http://chantdownproster.com/order_encrypted_310A9E0.bin","online","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/351166/","abuse_ch"
+"351167","2020-04-25 16:07:24","http://chantdownproster.com/EFTERMLETILLE.exe","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/351167/","abuse_ch"
+"351166","2020-04-25 16:07:17","http://chantdownproster.com/order_encrypted_310A9E0.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/351166/","abuse_ch"
 "351165","2020-04-25 16:04:03","https://pastebin.com/raw/pWk6pFDt","offline","malware_download","None","https://urlhaus.abuse.ch/url/351165/","JayTHL"
 "351164","2020-04-25 15:52:03","https://pastebin.com/raw/EnkACpyD","offline","malware_download","None","https://urlhaus.abuse.ch/url/351164/","JayTHL"
 "351163","2020-04-25 15:08:02","http://115.61.2.70:48620/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351163/","Gandylyan1"
@@ -2664,7 +3184,7 @@
 "351147","2020-04-25 15:04:06","http://222.138.183.4:39368/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351147/","Gandylyan1"
 "351146","2020-04-25 14:38:16","https://pastebin.com/raw/ZGjPxXi1","offline","malware_download","None","https://urlhaus.abuse.ch/url/351146/","JayTHL"
 "351145","2020-04-25 14:38:11","https://pastebin.com/raw/YHh73p9Y","offline","malware_download","None","https://urlhaus.abuse.ch/url/351145/","JayTHL"
-"351144","2020-04-25 14:12:03","http://91.177.139.132:14677/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351144/","geenensp"
+"351144","2020-04-25 14:12:03","http://91.177.139.132:14677/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/351144/","geenensp"
 "351143","2020-04-25 14:01:10","https://pastebin.com/raw/n4pq0gRF","offline","malware_download","None","https://urlhaus.abuse.ch/url/351143/","JayTHL"
 "351142","2020-04-25 13:54:11","http://27.206.66.103:34642/Mozi.a","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/351142/","zbetcheckin"
 "351141","2020-04-25 13:54:05","http://121.135.146.40:1560/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351141/","zbetcheckin"
@@ -2711,7 +3231,7 @@
 "351100","2020-04-25 10:28:05","http://45.95.169.232/bins/arm5","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351100/","Gandylyan1"
 "351099","2020-04-25 10:28:03","http://45.95.169.232/bins/arm","offline","malware_download",",elf","https://urlhaus.abuse.ch/url/351099/","Gandylyan1"
 "351098","2020-04-25 10:02:06","http://187.142.7.199:53178/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351098/","zbetcheckin"
-"351097","2020-04-25 09:15:05","http://76.108.23.131:24240/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351097/","zbetcheckin"
+"351097","2020-04-25 09:15:05","http://76.108.23.131:24240/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/351097/","zbetcheckin"
 "351096","2020-04-25 09:06:04","https://pastebin.com/raw/1Jtt0mbD","offline","malware_download","None","https://urlhaus.abuse.ch/url/351096/","JayTHL"
 "351095","2020-04-25 09:05:35","http://162.212.115.58:44775/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351095/","Gandylyan1"
 "351094","2020-04-25 09:05:32","http://182.113.200.223:39107/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/351094/","Gandylyan1"
@@ -2871,7 +3391,7 @@
 "350940","2020-04-25 03:06:43","http://219.156.160.77:46314/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350940/","Gandylyan1"
 "350939","2020-04-25 03:06:38","http://42.227.184.13:46472/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350939/","Gandylyan1"
 "350938","2020-04-25 03:06:34","http://123.11.75.109:34408/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350938/","Gandylyan1"
-"350937","2020-04-25 03:06:31","http://111.42.102.131:54192/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350937/","Gandylyan1"
+"350937","2020-04-25 03:06:31","http://111.42.102.131:54192/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350937/","Gandylyan1"
 "350936","2020-04-25 03:06:27","http://116.114.95.92:57025/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350936/","Gandylyan1"
 "350935","2020-04-25 03:06:20","http://182.126.212.59:60492/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350935/","Gandylyan1"
 "350934","2020-04-25 03:06:16","http://42.231.167.230:37608/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350934/","Gandylyan1"
@@ -2891,31 +3411,31 @@
 "350920","2020-04-25 03:04:15","http://116.114.95.142:33619/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350920/","Gandylyan1"
 "350919","2020-04-25 03:04:12","http://58.243.189.248:43383/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350919/","Gandylyan1"
 "350918","2020-04-25 03:04:05","http://182.114.208.185:38551/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350918/","Gandylyan1"
-"350917","2020-04-25 02:54:24","http://45.148.122.113/s-h.4-.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350917/","zbetcheckin"
+"350917","2020-04-25 02:54:24","http://45.148.122.113/s-h.4-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350917/","zbetcheckin"
 "350916","2020-04-25 02:54:22","http://185.255.130.202/ARMV5L","offline","malware_download","elf","https://urlhaus.abuse.ch/url/350916/","zbetcheckin"
 "350915","2020-04-25 02:54:19","http://95.217.49.251/vtyhat","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350915/","zbetcheckin"
 "350914","2020-04-25 02:54:17","http://185.255.130.202/M68K","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350914/","zbetcheckin"
-"350913","2020-04-25 02:54:14","http://45.148.122.113/m-p.s-l.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350913/","zbetcheckin"
-"350912","2020-04-25 02:54:12","http://45.148.122.113/a-r.m-5.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350912/","zbetcheckin"
-"350911","2020-04-25 02:54:10","http://45.148.122.113/a-r.m-4.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350911/","zbetcheckin"
+"350913","2020-04-25 02:54:14","http://45.148.122.113/m-p.s-l.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350913/","zbetcheckin"
+"350912","2020-04-25 02:54:12","http://45.148.122.113/a-r.m-5.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350912/","zbetcheckin"
+"350911","2020-04-25 02:54:10","http://45.148.122.113/a-r.m-4.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350911/","zbetcheckin"
 "350910","2020-04-25 02:54:08","http://185.255.130.202/MIPS","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350910/","zbetcheckin"
 "350909","2020-04-25 02:54:05","http://95.217.49.251/earyzq","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350909/","zbetcheckin"
-"350908","2020-04-25 02:54:03","http://45.148.122.113/m-i.p-s.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350908/","zbetcheckin"
+"350908","2020-04-25 02:54:03","http://45.148.122.113/m-i.p-s.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350908/","zbetcheckin"
 "350907","2020-04-25 02:53:08","http://95.217.49.251/razdzn","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350907/","zbetcheckin"
-"350906","2020-04-25 02:53:05","http://45.148.122.113/x-3.2-.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350906/","zbetcheckin"
+"350906","2020-04-25 02:53:05","http://45.148.122.113/x-3.2-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350906/","zbetcheckin"
 "350905","2020-04-25 02:53:04","http://95.217.49.251/qtmzbn","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350905/","zbetcheckin"
 "350904","2020-04-25 02:49:27","http://95.217.49.251/atxhua","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350904/","zbetcheckin"
-"350903","2020-04-25 02:49:25","http://45.148.122.113/a-r.m-7.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350903/","zbetcheckin"
-"350902","2020-04-25 02:49:23","http://45.148.122.113/a-r.m-6.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350902/","zbetcheckin"
+"350903","2020-04-25 02:49:25","http://45.148.122.113/a-r.m-7.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350903/","zbetcheckin"
+"350902","2020-04-25 02:49:23","http://45.148.122.113/a-r.m-6.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350902/","zbetcheckin"
 "350901","2020-04-25 02:49:21","http://161.35.64.46/tftp","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350901/","zbetcheckin"
 "350900","2020-04-25 02:49:20","http://95.217.49.251/cemtop","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350900/","zbetcheckin"
-"350899","2020-04-25 02:49:18","http://45.148.122.113/i-5.8-6.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350899/","zbetcheckin"
+"350899","2020-04-25 02:49:18","http://45.148.122.113/i-5.8-6.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350899/","zbetcheckin"
 "350898","2020-04-25 02:49:16","http://185.255.130.202/I686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350898/","zbetcheckin"
 "350897","2020-04-25 02:49:13","http://95.217.49.251/vvglma","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350897/","zbetcheckin"
 "350896","2020-04-25 02:49:10","http://185.255.130.202/X86_64","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350896/","zbetcheckin"
 "350895","2020-04-25 02:49:07","http://185.255.130.202/POWERPC","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350895/","zbetcheckin"
 "350894","2020-04-25 02:49:05","http://185.255.130.202/I586","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350894/","zbetcheckin"
-"350893","2020-04-25 02:49:02","http://45.148.122.113/m-6.8-k.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350893/","zbetcheckin"
+"350893","2020-04-25 02:49:02","http://45.148.122.113/m-6.8-k.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350893/","zbetcheckin"
 "350892","2020-04-25 02:46:35","http://161.35.64.46/ntpd","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350892/","zbetcheckin"
 "350891","2020-04-25 02:46:34","http://185.214.10.180/sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350891/","zbetcheckin"
 "350890","2020-04-25 02:46:02","http://161.35.64.46/wget","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350890/","zbetcheckin"
@@ -2925,20 +3445,20 @@
 "350886","2020-04-25 02:45:17","http://161.35.64.46/pftp","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350886/","zbetcheckin"
 "350885","2020-04-25 02:45:09","http://161.35.64.46/sh","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350885/","zbetcheckin"
 "350884","2020-04-25 02:44:19","http://185.255.130.202/MIPSEL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350884/","zbetcheckin"
-"350883","2020-04-25 02:44:15","http://45.148.122.113/x-8.6-.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350883/","zbetcheckin"
+"350883","2020-04-25 02:44:15","http://45.148.122.113/x-8.6-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350883/","zbetcheckin"
 "350882","2020-04-25 02:44:12","http://95.217.49.251/lnkfmx","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350882/","zbetcheckin"
 "350881","2020-04-25 02:44:03","http://95.217.49.251/nvitpj","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350881/","zbetcheckin"
 "350880","2020-04-25 02:40:22","http://185.214.10.180/mipsel","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350880/","zbetcheckin"
 "350879","2020-04-25 02:40:20","http://185.214.10.180/armv4l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350879/","zbetcheckin"
 "350878","2020-04-25 02:40:18","http://185.214.10.180/armv6l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350878/","zbetcheckin"
-"350877","2020-04-25 02:40:16","http://45.148.122.113/p-p.c-.SNOOPY","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350877/","zbetcheckin"
+"350877","2020-04-25 02:40:16","http://45.148.122.113/p-p.c-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350877/","zbetcheckin"
 "350876","2020-04-25 02:40:14","http://185.214.10.180/powerpc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350876/","zbetcheckin"
 "350875","2020-04-25 02:40:12","http://95.217.49.251/fwdfvf","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350875/","zbetcheckin"
 "350874","2020-04-25 02:40:10","http://185.255.130.202/ARMV6L","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350874/","zbetcheckin"
 "350873","2020-04-25 02:40:07","http://185.255.130.202/ARMV4L","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350873/","zbetcheckin"
 "350872","2020-04-25 02:40:04","http://185.255.130.202/SH4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350872/","zbetcheckin"
 "350871","2020-04-25 02:36:15","http://185.214.10.180/axisbins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/350871/","zbetcheckin"
-"350870","2020-04-25 02:36:12","http://95.217.49.251/bins.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/350870/","zbetcheckin"
+"350870","2020-04-25 02:36:12","http://95.217.49.251/bins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/350870/","zbetcheckin"
 "350869","2020-04-25 02:36:11","http://161.35.64.46/bins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/350869/","zbetcheckin"
 "350868","2020-04-25 02:36:09","http://45.148.122.113/SnOoPy.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/350868/","zbetcheckin"
 "350867","2020-04-25 02:36:07","http://95.217.49.251/qvmxvl","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/350867/","zbetcheckin"
@@ -2971,7 +3491,7 @@
 "350840","2020-04-25 00:04:51","http://221.160.177.34:1804/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350840/","Gandylyan1"
 "350839","2020-04-25 00:04:45","http://222.246.255.112:46358/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350839/","Gandylyan1"
 "350838","2020-04-25 00:04:38","http://106.111.210.62:56787/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350838/","Gandylyan1"
-"350837","2020-04-25 00:04:30","http://219.139.237.174:44798/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350837/","Gandylyan1"
+"350837","2020-04-25 00:04:30","http://219.139.237.174:44798/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350837/","Gandylyan1"
 "350836","2020-04-25 00:04:24","http://182.127.202.23:34677/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350836/","Gandylyan1"
 "350835","2020-04-25 00:04:21","http://116.114.95.198:43355/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350835/","Gandylyan1"
 "350834","2020-04-25 00:04:17","http://111.42.66.137:52575/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350834/","Gandylyan1"
@@ -2990,9 +3510,9 @@
 "350821","2020-04-24 22:54:03","http://178.128.242.198/Pandoras_Box/pandora.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/350821/","JayTHL"
 "350820","2020-04-24 22:20:07","http://114.35.158.123:54597/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/350820/","zbetcheckin"
 "350819","2020-04-24 22:12:08","http://auxilioenergiacovid19.com/LoadMain.dll","offline","malware_download","exe","https://urlhaus.abuse.ch/url/350819/","zbetcheckin"
-"350818","2020-04-24 21:44:06","https://zethla.com/wp-content/themes/calliope/docs_osb/61488/Buy-Sell%20Agreement_61488_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350818/","malware_traffic"
+"350818","2020-04-24 21:44:06","https://zethla.com/wp-content/themes/calliope/docs_osb/61488/Buy-Sell%20Agreement_61488_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350818/","malware_traffic"
 "350817","2020-04-24 21:43:09","http://https:/zethla.com/wp-content/themes/calliope/docs_osb/3242815/Buy-Sell%20Agreement_3242815_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350817/","malware_traffic"
-"350816","2020-04-24 21:43:07","https://zethla.com/wp-content/themes/calliope/docs_osb/3242815/Buy-Sell%20Agreement_3242815_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350816/","malware_traffic"
+"350816","2020-04-24 21:43:07","https://zethla.com/wp-content/themes/calliope/docs_osb/3242815/Buy-Sell%20Agreement_3242815_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350816/","malware_traffic"
 "350815","2020-04-24 21:42:52","https://www.qelie.com/wp-content/docs_q30/19188/Buy-Sell%20Agreement_19188_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350815/","malware_traffic"
 "350814","2020-04-24 21:42:47","https://www.e24bay.in/docs_6su/Buy-Sell%20Agreement_683710_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350814/","malware_traffic"
 "350813","2020-04-24 21:42:45","https://www.e24bay.in/docs_6su/Buy-Sell%20Agreement_30590_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350813/","malware_traffic"
@@ -3000,14 +3520,14 @@
 "350811","2020-04-24 21:42:35","https://www.e24bay.in/docs_6su/926274/Buy-Sell%20Agreement_926274_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350811/","malware_traffic"
 "350810","2020-04-24 21:42:32","https://woodofkosta.com/docs_hcv/Buy-Sell%20Agreement_08894_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350810/","malware_traffic"
 "350809","2020-04-24 21:42:26","https://test.aosex.club/wp-content/themes/calliope/docs_941/Buy-Sell%20Agreement_067627_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350809/","malware_traffic"
-"350808","2020-04-24 21:42:21","https://tecnobella.cl/docs_dte/Buy-Sell%20Agreement_96341540_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350808/","malware_traffic"
+"350808","2020-04-24 21:42:21","https://tecnobella.cl/docs_dte/Buy-Sell%20Agreement_96341540_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350808/","malware_traffic"
 "350807","2020-04-24 21:42:18","https://serviciosinfoware.cl/docs_846/Buy-Sell%20Agreement_14067_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350807/","malware_traffic"
 "350806","2020-04-24 21:42:15","https://serviciosinfoware.cl/docs_846/8289510/Buy-Sell%20Agreement_8289510_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350806/","malware_traffic"
-"350805","2020-04-24 21:42:09","https://seibee.biz/docs_3z8/976048239/Buy-Sell%20Agreement_976048239_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350805/","malware_traffic"
+"350805","2020-04-24 21:42:09","https://seibee.biz/docs_3z8/976048239/Buy-Sell%20Agreement_976048239_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350805/","malware_traffic"
 "350804","2020-04-24 21:42:00","https://redeemerssports.com/wp-content/themes/calliope/docs_i4t/6737406/Buy-Sell%20Agreement_6737406_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350804/","malware_traffic"
-"350803","2020-04-24 21:41:57","https://redeemerssports.com/wp-content/themes/calliope/docs_i4t/346947/Buy-Sell%20Agreement_346947_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350803/","malware_traffic"
+"350803","2020-04-24 21:41:57","https://redeemerssports.com/wp-content/themes/calliope/docs_i4t/346947/Buy-Sell%20Agreement_346947_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350803/","malware_traffic"
 "350802","2020-04-24 21:41:51","https://melusinkiwane.com/docs_c95/Buy-Sell%20Agreement_615778_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350802/","malware_traffic"
-"350801","2020-04-24 21:41:49","https://melusinkiwane.com/docs_c95/87464/Buy-Sell%20Agreement_87464_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350801/","malware_traffic"
+"350801","2020-04-24 21:41:49","https://melusinkiwane.com/docs_c95/87464/Buy-Sell%20Agreement_87464_04232020.zip","online","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350801/","malware_traffic"
 "350800","2020-04-24 21:41:46","https://melusinkiwane.com/docs_c95/82941186/Buy-Sell%20Agreement_82941186_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350800/","malware_traffic"
 "350799","2020-04-24 21:41:43","https://buyitshop.in/docs_x2a/777494/Buy-Sell%20Agreement_777494_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350799/","malware_traffic"
 "350798","2020-04-24 21:41:39","https://buyitshop.in/docs_x2a/63747893/Buy-Sell%20Agreement_63747893_04232020.zip","offline","malware_download","Qakbot,qbot,spx104,zip","https://urlhaus.abuse.ch/url/350798/","malware_traffic"
@@ -3057,7 +3577,7 @@
 "350754","2020-04-24 21:04:20","http://211.137.225.125:54419/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350754/","Gandylyan1"
 "350753","2020-04-24 21:04:15","http://111.42.66.6:49919/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350753/","Gandylyan1"
 "350752","2020-04-24 21:04:11","http://182.114.253.58:51846/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350752/","Gandylyan1"
-"350751","2020-04-24 21:04:08","http://111.42.103.28:43247/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350751/","Gandylyan1"
+"350751","2020-04-24 21:04:08","http://111.42.103.28:43247/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350751/","Gandylyan1"
 "350750","2020-04-24 21:04:04","http://115.49.73.152:45757/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350750/","Gandylyan1"
 "350749","2020-04-24 20:35:05","http://37.49.230.199/Pandoras_Box/pandora.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/350749/","zbetcheckin"
 "350748","2020-04-24 20:35:03","http://37.49.230.199/Pandoras_Box/pandora.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/350748/","zbetcheckin"
@@ -3234,14 +3754,14 @@
 "350576","2020-04-24 11:26:03","http://80.211.110.143:1691/dvrbot.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/350576/","zbetcheckin"
 "350575","2020-04-24 11:22:05","http://hfye22gy.3b3kb3.com/juuu/ifhwwyy.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/350575/","zbetcheckin"
 "350574","2020-04-24 11:18:10","http://hfye22gy.3b3kb3.com/iuww/jhuimme.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/350574/","zbetcheckin"
-"350573","2020-04-24 11:18:05","http://tovarentertainment.in/3/IMG-5667-7079-PDF-EG.exe","online","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/350573/","zbetcheckin"
+"350573","2020-04-24 11:18:05","http://tovarentertainment.in/3/IMG-5667-7079-PDF-EG.exe","offline","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/350573/","zbetcheckin"
 "350572","2020-04-24 11:15:07","http://hfye22gy.3b3kb3.com/juuu/ifhvvyy.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/350572/","zbetcheckin"
 "350571","2020-04-24 11:10:20","http://prepaidgift.co/kpo.exe","offline","malware_download","exe,KPOTStealer","https://urlhaus.abuse.ch/url/350571/","zbetcheckin"
 "350570","2020-04-24 11:10:10","http://hfye22gy.3b3kb3.com/iuww/huesaa.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/350570/","zbetcheckin"
 "350569","2020-04-24 11:10:04","http://zeytinyagisabun.com/xntt.exe","online","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/350569/","zbetcheckin"
 "350568","2020-04-24 11:06:39","http://mrtool.ir/wp-admin/network/fern.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/350568/","zbetcheckin"
 "350567","2020-04-24 11:06:34","http://mrtool.ir/wp-includes/faye.exe","online","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/350567/","zbetcheckin"
-"350566","2020-04-24 11:06:31","https://tovarentertainment.in/BI/DRAFTCOPY-487474-BILL-BB393948PDF.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/350566/","zbetcheckin"
+"350566","2020-04-24 11:06:31","https://tovarentertainment.in/BI/DRAFTCOPY-487474-BILL-BB393948PDF.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/350566/","zbetcheckin"
 "350565","2020-04-24 11:03:35","http://prepaidgift.co/493286492837.exe","offline","malware_download","exe,KPOTStealer","https://urlhaus.abuse.ch/url/350565/","zbetcheckin"
 "350564","2020-04-24 10:48:11","http://37.49.226.204/bins/vcimanagement.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/350564/","zbetcheckin"
 "350563","2020-04-24 10:48:10","http://37.49.226.204/bins/vcimanagement.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/350563/","zbetcheckin"
@@ -3348,10 +3868,10 @@
 "350462","2020-04-24 06:04:41","http://42.239.121.133:32844/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350462/","Gandylyan1"
 "350461","2020-04-24 06:04:36","http://111.43.223.100:45967/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350461/","Gandylyan1"
 "350460","2020-04-24 06:04:32","http://123.11.9.216:36142/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350460/","Gandylyan1"
-"350459","2020-04-24 06:04:23","http://176.113.161.40:42166/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350459/","Gandylyan1"
+"350459","2020-04-24 06:04:23","http://176.113.161.40:42166/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350459/","Gandylyan1"
 "350458","2020-04-24 06:04:21","http://111.42.103.19:50751/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350458/","Gandylyan1"
 "350457","2020-04-24 06:04:17","http://120.157.115.143:56574/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350457/","Gandylyan1"
-"350456","2020-04-24 06:04:12","http://1.246.223.60:1927/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350456/","Gandylyan1"
+"350456","2020-04-24 06:04:12","http://1.246.223.60:1927/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350456/","Gandylyan1"
 "350455","2020-04-24 06:04:09","http://111.42.102.93:33854/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350455/","Gandylyan1"
 "350454","2020-04-24 06:04:04","http://111.43.223.112:57466/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350454/","Gandylyan1"
 "350453","2020-04-24 06:03:59","http://49.68.179.178:33682/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/350453/","Gandylyan1"
@@ -4589,7 +5109,7 @@
 "349221","2020-04-24 00:20:32","https://apbfiber.com/openme/989dd3optoor.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/349221/","p5yb34m"
 "349220","2020-04-24 00:20:16","https://apbfiber.com/openme/1512345.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/349220/","p5yb34m"
 "349219","2020-04-24 00:18:24","http://softdown.55.la/soft/down/PDF2EXCEL_1.0.0.1_sogou.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/349219/","zbetcheckin"
-"349216","2020-04-24 00:15:38","http://softdown.55.la/soft/down/PDF2EXCEL_1.0.0.0_360hy.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/349216/","zbetcheckin"
+"349216","2020-04-24 00:15:38","http://softdown.55.la/soft/down/PDF2EXCEL_1.0.0.0_360hy.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/349216/","zbetcheckin"
 "349214","2020-04-24 00:14:11","https://apbfiber.com/openme/198312345.exe","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/349214/","p5yb34m"
 "349213","2020-04-24 00:14:09","https://apbfiber.com/openme/195712345.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/349213/","p5yb34m"
 "349212","2020-04-24 00:14:07","https://apbfiber.com/openme/170912345.exe","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/349212/","p5yb34m"
@@ -4614,7 +5134,7 @@
 "349188","2020-04-24 00:05:47","http://199.83.206.219:38372/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349188/","Gandylyan1"
 "349187","2020-04-24 00:05:42","http://222.138.181.62:49550/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349187/","Gandylyan1"
 "349186","2020-04-24 00:05:37","http://31.146.124.131:34815/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349186/","Gandylyan1"
-"349185","2020-04-24 00:05:33","http://115.52.126.127:58273/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349185/","Gandylyan1"
+"349185","2020-04-24 00:05:33","http://115.52.126.127:58273/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349185/","Gandylyan1"
 "349184","2020-04-24 00:05:29","http://219.156.172.168:42733/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349184/","Gandylyan1"
 "349183","2020-04-24 00:05:23","http://123.11.13.145:33627/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349183/","Gandylyan1"
 "349182","2020-04-24 00:05:18","http://123.4.53.148:45539/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349182/","Gandylyan1"
@@ -4682,37 +5202,37 @@
 "349120","2020-04-23 21:04:14","http://61.52.82.27:53554/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349120/","Gandylyan1"
 "349119","2020-04-23 21:04:10","http://115.58.64.71:50053/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349119/","Gandylyan1"
 "349118","2020-04-23 21:04:05","http://116.114.95.86:34216/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/349118/","Gandylyan1"
-"349117","2020-04-23 20:58:03","https://onedrive.live.com/download?cid=FF1D187273DFBF73&resid=FF1D187273DFBF73!693&authkey=AGcpKHnEWFTE_Yc","online","malware_download","None","https://urlhaus.abuse.ch/url/349117/","JayTHL"
-"349116","2020-04-23 20:57:30","https://onedrive.live.com/download?cid=F293CEBB54E5EA71&resid=F293CEBB54E5EA71!195&authkey=AB6tMixR6iRg3d0","online","malware_download","None","https://urlhaus.abuse.ch/url/349116/","JayTHL"
+"349117","2020-04-23 20:58:03","https://onedrive.live.com/download?cid=FF1D187273DFBF73&resid=FF1D187273DFBF73!693&authkey=AGcpKHnEWFTE_Yc","offline","malware_download","None","https://urlhaus.abuse.ch/url/349117/","JayTHL"
+"349116","2020-04-23 20:57:30","https://onedrive.live.com/download?cid=F293CEBB54E5EA71&resid=F293CEBB54E5EA71!195&authkey=AB6tMixR6iRg3d0","offline","malware_download","None","https://urlhaus.abuse.ch/url/349116/","JayTHL"
 "349115","2020-04-23 20:56:58","https://onedrive.live.com/download?cid=EAE9B5435CFAEBAA&resid=EAE9B5435CFAEBAA!232&authkey=AAuY9sGJCcGPZX8","online","malware_download","None","https://urlhaus.abuse.ch/url/349115/","JayTHL"
 "349114","2020-04-23 20:56:25","https://onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA!124&authkey=ADKlC5yRN_vbmt8","online","malware_download","None","https://urlhaus.abuse.ch/url/349114/","JayTHL"
 "349113","2020-04-23 20:55:51","https://onedrive.live.com/download?cid=D5825CD44FFD03A7&resid=D5825CD44FFD03A7!841&authkey=AJahuq67BKwKerk","offline","malware_download","None","https://urlhaus.abuse.ch/url/349113/","JayTHL"
-"349112","2020-04-23 20:55:19","https://onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85!875&authkey=AKa55YbDhQNOC6c","online","malware_download","None","https://urlhaus.abuse.ch/url/349112/","JayTHL"
+"349112","2020-04-23 20:55:19","https://onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85!875&authkey=AKa55YbDhQNOC6c","offline","malware_download","None","https://urlhaus.abuse.ch/url/349112/","JayTHL"
 "349111","2020-04-23 20:54:45","https://onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85!872&authkey=AP9HcHZTYWO8ZUo","online","malware_download","None","https://urlhaus.abuse.ch/url/349111/","JayTHL"
-"349110","2020-04-23 20:54:12","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1347&authkey=AL-ZGe-TTVr921s","online","malware_download","None","https://urlhaus.abuse.ch/url/349110/","JayTHL"
-"349109","2020-04-23 20:53:39","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1344&authkey=AOzErPpD6MnoKwY","online","malware_download","None","https://urlhaus.abuse.ch/url/349109/","JayTHL"
-"349108","2020-04-23 20:53:06","https://onedrive.live.com/download?cid=B3B98222C3EF96E0&resid=B3B98222C3EF96E0!166&authkey=AM6Hz6Klyos92OY","online","malware_download","None","https://urlhaus.abuse.ch/url/349108/","JayTHL"
-"349107","2020-04-23 20:52:33","https://onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B!5047&authkey=ABGpmXhJe7B2pEQ","online","malware_download","None","https://urlhaus.abuse.ch/url/349107/","JayTHL"
+"349110","2020-04-23 20:54:12","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1347&authkey=AL-ZGe-TTVr921s","offline","malware_download","None","https://urlhaus.abuse.ch/url/349110/","JayTHL"
+"349109","2020-04-23 20:53:39","https://onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1344&authkey=AOzErPpD6MnoKwY","offline","malware_download","None","https://urlhaus.abuse.ch/url/349109/","JayTHL"
+"349108","2020-04-23 20:53:06","https://onedrive.live.com/download?cid=B3B98222C3EF96E0&resid=B3B98222C3EF96E0!166&authkey=AM6Hz6Klyos92OY","offline","malware_download","None","https://urlhaus.abuse.ch/url/349108/","JayTHL"
+"349107","2020-04-23 20:52:33","https://onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B!5047&authkey=ABGpmXhJe7B2pEQ","offline","malware_download","None","https://urlhaus.abuse.ch/url/349107/","JayTHL"
 "349106","2020-04-23 20:52:00","https://onedrive.live.com/download?cid=9CE7F7EAB219AAB3&resid=9CE7F7EAB219AAB3!124&authkey=AEWD5JzUV0ZFe0U","offline","malware_download","None","https://urlhaus.abuse.ch/url/349106/","JayTHL"
 "349105","2020-04-23 20:51:26","https://onedrive.live.com/download?cid=7C41DDCFA01AEFF7&resid=7C41DDCFA01AEFF7!5296&authkey=ANk3vz5syaF6BNY","online","malware_download","None","https://urlhaus.abuse.ch/url/349105/","JayTHL"
-"349104","2020-04-23 20:51:23","https://onedrive.live.com/download?cid=7C41DDCFA01AEFF7&resid=7C41DDCFA01AEFF7!5295&authkey=AASCEQJ1MDoDEuo","online","malware_download","None","https://urlhaus.abuse.ch/url/349104/","JayTHL"
+"349104","2020-04-23 20:51:23","https://onedrive.live.com/download?cid=7C41DDCFA01AEFF7&resid=7C41DDCFA01AEFF7!5295&authkey=AASCEQJ1MDoDEuo","offline","malware_download","None","https://urlhaus.abuse.ch/url/349104/","JayTHL"
 "349103","2020-04-23 20:51:12","https://onedrive.live.com/download?cid=7366FEFC2190D2E3&resid=7366FEFC2190D2E3!211&authkey=AIUVoiDHh8IFdEI","offline","malware_download","None","https://urlhaus.abuse.ch/url/349103/","JayTHL"
 "349102","2020-04-23 20:51:08","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!196&authkey=AEIZSuDu2mLHlHU","online","malware_download","None","https://urlhaus.abuse.ch/url/349102/","JayTHL"
 "349101","2020-04-23 20:50:52","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!190&authkey=AJ-3yQm7eZZ9zmE","online","malware_download","None","https://urlhaus.abuse.ch/url/349101/","JayTHL"
 "349100","2020-04-23 20:50:43","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!185&authkey=AMm2Fsxi2l-Wa9A","online","malware_download","None","https://urlhaus.abuse.ch/url/349100/","JayTHL"
-"349099","2020-04-23 20:50:38","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!184&authkey=ACrLgQEORQqW7bE","online","malware_download","None","https://urlhaus.abuse.ch/url/349099/","JayTHL"
+"349099","2020-04-23 20:50:38","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!184&authkey=ACrLgQEORQqW7bE","offline","malware_download","None","https://urlhaus.abuse.ch/url/349099/","JayTHL"
 "349098","2020-04-23 20:50:32","https://onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46!144&authkey=ACWoeUasuRL8m3M","online","malware_download","None","https://urlhaus.abuse.ch/url/349098/","JayTHL"
 "349097","2020-04-23 20:50:28","https://onedrive.live.com/download?cid=6A1602E410531072&resid=6A1602E410531072!112&authkey=AAsndGbCwol3MYs","online","malware_download","None","https://urlhaus.abuse.ch/url/349097/","JayTHL"
 "349096","2020-04-23 20:50:25","https://onedrive.live.com/download?cid=627BE925DFC4B997&resid=627BE925DFC4B997!145&authkey=ABz8d6UsBiJt_lU","online","malware_download","None","https://urlhaus.abuse.ch/url/349096/","JayTHL"
 "349095","2020-04-23 20:50:19","https://onedrive.live.com/download?cid=57C0958DB500FE0B&resid=57C0958DB500FE0B!68197&authkey=AOWPm7Ocl_21-oc","online","malware_download","None","https://urlhaus.abuse.ch/url/349095/","JayTHL"
-"349094","2020-04-23 20:50:13","https://onedrive.live.com/download?cid=4DF11EDA676A355F&resid=4DF11EDA676A355F!130&authkey=!AKd6uxvLjTLVpxU","online","malware_download","None","https://urlhaus.abuse.ch/url/349094/","JayTHL"
+"349094","2020-04-23 20:50:13","https://onedrive.live.com/download?cid=4DF11EDA676A355F&resid=4DF11EDA676A355F!130&authkey=!AKd6uxvLjTLVpxU","offline","malware_download","None","https://urlhaus.abuse.ch/url/349094/","JayTHL"
 "349093","2020-04-23 20:50:10","https://onedrive.live.com/download?cid=4B676EA3FF139B93&resid=4B676EA3FF139B93!133&authkey=AMfIx63GLyTFLGo","online","malware_download","None","https://urlhaus.abuse.ch/url/349093/","JayTHL"
 "349092","2020-04-23 20:49:55","https://onedrive.live.com/download?cid=41F2978DA9CE0256&resid=41F2978DA9CE0256!113&authkey=AEOaNIW0sQpOAcU","online","malware_download","None","https://urlhaus.abuse.ch/url/349092/","JayTHL"
 "349091","2020-04-23 20:49:46","https://onedrive.live.com/download?cid=18418ADACEFED6E2&resid=18418ADACEFED6E2!129&authkey=APQOONsrCe0ArI4","online","malware_download","None","https://urlhaus.abuse.ch/url/349091/","JayTHL"
 "349090","2020-04-23 20:49:35","https://onedrive.live.com/download?cid=15128527F18DE6B7&resid=15128527F18DE6B7!107&authkey=!ALYQ3vqt_d-o4n4","offline","malware_download","None","https://urlhaus.abuse.ch/url/349090/","JayTHL"
-"349089","2020-04-23 20:49:32","https://onedrive.live.com/download?cid=1164EA2B0783A793&resid=1164EA2B0783A793!128&authkey=AOoJuE9Aw_IzFkA","online","malware_download","None","https://urlhaus.abuse.ch/url/349089/","JayTHL"
+"349089","2020-04-23 20:49:32","https://onedrive.live.com/download?cid=1164EA2B0783A793&resid=1164EA2B0783A793!128&authkey=AOoJuE9Aw_IzFkA","offline","malware_download","None","https://urlhaus.abuse.ch/url/349089/","JayTHL"
 "349088","2020-04-23 20:49:28","https://onedrive.live.com/download?cid=0C707F50E538E089&resid=C707F50E538E089!108&authkey=AFlvxX6otk0Mz4Q","offline","malware_download","None","https://urlhaus.abuse.ch/url/349088/","JayTHL"
-"349087","2020-04-23 20:49:22","https://onedrive.live.com/download?cid=052BCF630286E980&resid=52BCF630286E980!113&authkey=AH3RaTLEdBMNuaY","online","malware_download","None","https://urlhaus.abuse.ch/url/349087/","JayTHL"
+"349087","2020-04-23 20:49:22","https://onedrive.live.com/download?cid=052BCF630286E980&resid=52BCF630286E980!113&authkey=AH3RaTLEdBMNuaY","offline","malware_download","None","https://urlhaus.abuse.ch/url/349087/","JayTHL"
 "349086","2020-04-23 20:49:12","https://onedrive.live.com/download?cid=01F191D863B4D5A4&resid=1F191D863B4D5A4!158&authkey=AMsoii5Nr6PomHc","online","malware_download","None","https://urlhaus.abuse.ch/url/349086/","JayTHL"
 "349085","2020-04-23 20:49:08","https://onedrive.live.com/download?cid=0153C2A7092EE91C&resid=153C2A7092EE91C!111&authkey=AEmrWamaAAIYyjc","online","malware_download","None","https://urlhaus.abuse.ch/url/349085/","JayTHL"
 "349084","2020-04-23 20:29:03","http://185.225.19.57/aq/rxrg","offline","malware_download","None","https://urlhaus.abuse.ch/url/349084/","JayTHL"
@@ -4780,7 +5300,7 @@
 "349022","2020-04-23 17:27:32","https://uvisionpk.com/wp/wp-content/themes/calliope/docs_4ru/Judgement_04222020_70525.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349022/","malware_traffic"
 "349021","2020-04-23 17:27:26","https://uvisionpk.com/wp/wp-content/themes/calliope/docs_4ru/6004556/Judgement_04222020_6004556.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349021/","malware_traffic"
 "349020","2020-04-23 17:27:18","https://tepatitlan.gob.mx/cs/wp-content/themes/calliope/docs_tpm/Judgement_04222020_5460712.zip","online","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349020/","malware_traffic"
-"349019","2020-04-23 17:27:13","https://tepatitlan.gob.mx/cs/wp-content/themes/calliope/docs_tpm/250122449/Judgement_04222020_250122449.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349019/","malware_traffic"
+"349019","2020-04-23 17:27:13","https://tepatitlan.gob.mx/cs/wp-content/themes/calliope/docs_tpm/250122449/Judgement_04222020_250122449.zip","online","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349019/","malware_traffic"
 "349018","2020-04-23 17:27:08","http://playvideo.site/docs_8kj/Judgement_04222020_0736741.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349018/","malware_traffic"
 "349017","2020-04-23 17:27:06","http://playvideo.site/docs_8kj/81588387/Judgement_04222020_81588387.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349017/","malware_traffic"
 "349016","2020-04-23 17:27:03","http://pinangcitygroup.asia/wp-content/uploads/2020/04/docs_cgj/Judgement_04222020_56507748.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349016/","malware_traffic"
@@ -4791,12 +5311,12 @@
 "349011","2020-04-23 17:26:39","http://ngoibitumsinhthai.com.vn/docs_asx/Judgement_04222020_819411.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349011/","malware_traffic"
 "349010","2020-04-23 17:26:29","http://kastom.pw/docs_jvq/80188/Judgement_04222020_80188.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349010/","malware_traffic"
 "349009","2020-04-23 17:26:25","http://ixlarge.net/docs_to2/Judgement_04222020_490035134.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349009/","malware_traffic"
-"349008","2020-04-23 17:26:21","https://jaincakes.xyz/docs_1o2/949025839/Judgement_04222020_949025839.zip","online","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349008/","malware_traffic"
-"349007","2020-04-23 17:26:17","https://jaincakes.xyz/docs_1o2/818263/Judgement_04222020_818263.zip","online","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349007/","malware_traffic"
-"349006","2020-04-23 17:26:14","https://jaincakes.xyz/docs_1o2/108393672/Judgement_04222020_108393672.zip","online","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349006/","malware_traffic"
+"349008","2020-04-23 17:26:21","https://jaincakes.xyz/docs_1o2/949025839/Judgement_04222020_949025839.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349008/","malware_traffic"
+"349007","2020-04-23 17:26:17","https://jaincakes.xyz/docs_1o2/818263/Judgement_04222020_818263.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349007/","malware_traffic"
+"349006","2020-04-23 17:26:14","https://jaincakes.xyz/docs_1o2/108393672/Judgement_04222020_108393672.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349006/","malware_traffic"
 "349005","2020-04-23 17:26:08","http://hlb.ae/docs_q22/Judgement_04222020_69120.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349005/","malware_traffic"
 "349004","2020-04-23 17:26:02","http://hasifria.net/wp-content/uploads/2020/04/docs_jsv/Judgement_04222020_65639.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349004/","malware_traffic"
-"349003","2020-04-23 17:25:59","https://www.foxfennecs.com/wp-content/themes/calliope/docs_v72/084594017/Judgement_04222020_084594017.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349003/","malware_traffic"
+"349003","2020-04-23 17:25:59","https://www.foxfennecs.com/wp-content/themes/calliope/docs_v72/084594017/Judgement_04222020_084594017.zip","online","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349003/","malware_traffic"
 "349002","2020-04-23 17:25:53","http://far-flower.mindsellers.ru/wp-content/plugins/apikey/docs_d64/054309/Judgement_04222020_054309.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349002/","malware_traffic"
 "349001","2020-04-23 17:25:50","http://dubook.co.in/docs_5et/864422649/Judgement_04222020_864422649.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349001/","malware_traffic"
 "349000","2020-04-23 17:25:44","http://www.blueleed.com/wp-content/plugins/advanced-ads-genesis/docs_try/2391241/Judgement_04222020_2391241.zip","offline","malware_download","Qakbot,qbot,spx103,zip","https://urlhaus.abuse.ch/url/349000/","malware_traffic"
@@ -4835,7 +5355,7 @@
 "348967","2020-04-23 16:25:10","http://181.48.187.146:60877/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348967/","geenensp"
 "348966","2020-04-23 16:25:06","http://2.87.229.142:63659/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348966/","geenensp"
 "348965","2020-04-23 15:33:04","http://1.246.222.174:2004/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/348965/","zbetcheckin"
-"348964","2020-04-23 15:25:11","http://physiodelacomba.ch/userfiles/xing.txt","online","malware_download","exe","https://urlhaus.abuse.ch/url/348964/","zbetcheckin"
+"348964","2020-04-23 15:25:11","http://physiodelacomba.ch/userfiles/xing.txt","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348964/","zbetcheckin"
 "348963","2020-04-23 15:09:05","http://siwakotimanpower.com/fontconfig.exe","offline","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/348963/","abuse_ch"
 "348962","2020-04-23 15:07:05","http://172.39.44.197:57172/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348962/","Gandylyan1"
 "348961","2020-04-23 15:06:33","http://60.185.133.110:49519/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348961/","Gandylyan1"
@@ -5194,7 +5714,7 @@
 "348607","2020-04-23 06:04:38","http://125.44.168.138:42040/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348607/","Gandylyan1"
 "348606","2020-04-23 06:04:35","http://159.255.187.225:43430/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348606/","Gandylyan1"
 "348605","2020-04-23 06:04:31","http://111.43.223.129:51250/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348605/","Gandylyan1"
-"348604","2020-04-23 06:04:28","http://84.247.83.74:20807/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348604/","geenensp"
+"348604","2020-04-23 06:04:28","http://84.247.83.74:20807/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348604/","geenensp"
 "348603","2020-04-23 06:04:26","https://onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76%21184&authkey=ACrLgQEORQqW7bE","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348603/","lovemalware"
 "348602","2020-04-23 06:04:21","https://drive.google.com/uc?export=download&id=1bM186_MXLZjfzsOpjET_fhnvM6lOc8SW","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348602/","lovemalware"
 "348601","2020-04-23 06:04:12","https://onedrive.live.com/download?cid=1164EA2B0783A793&resid=1164EA2B0783A793%21128&authkey=AOoJuE9Aw_IzFkA","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/348601/","lovemalware"
@@ -5236,9 +5756,9 @@
 "348565","2020-04-23 05:41:26","http://51.178.81.75/sh4","offline","malware_download","elf,gafgyt","https://urlhaus.abuse.ch/url/348565/","hypoweb"
 "348564","2020-04-23 05:41:24","http://51.178.81.75/mipsel","offline","malware_download","elf,gafgyt","https://urlhaus.abuse.ch/url/348564/","hypoweb"
 "348563","2020-04-23 05:41:21","http://51.178.81.75/mips","offline","malware_download","elf,gafgyt","https://urlhaus.abuse.ch/url/348563/","hypoweb"
-"348562","2020-04-23 05:41:19","http://121.136.137.7:19702/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348562/","geenensp"
+"348562","2020-04-23 05:41:19","http://121.136.137.7:19702/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348562/","geenensp"
 "348561","2020-04-23 05:41:14","http://193.56.28.192/microsoft.vbs","offline","malware_download","RevengeRAT,wshrat","https://urlhaus.abuse.ch/url/348561/","0xCARNAGE"
-"348560","2020-04-23 05:41:11","http://5.185.85.122:59374/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348560/","geenensp"
+"348560","2020-04-23 05:41:11","http://5.185.85.122:59374/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348560/","geenensp"
 "348559","2020-04-23 05:40:10","http://175.215.226.31:46507/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348559/","geenensp"
 "348558","2020-04-23 05:40:06","http://187.172.131.1:31783/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348558/","geenensp"
 "348557","2020-04-23 04:54:07","http://179.43.149.178/Bleach.arm4t","offline","malware_download","elf,tsunami","https://urlhaus.abuse.ch/url/348557/","zbetcheckin"
@@ -5342,7 +5862,7 @@
 "348459","2020-04-22 21:04:17","http://112.17.163.139:44455/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348459/","Gandylyan1"
 "348458","2020-04-22 21:04:13","http://112.17.78.170:60456/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348458/","Gandylyan1"
 "348457","2020-04-22 21:04:09","http://125.44.200.255:57456/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348457/","Gandylyan1"
-"348456","2020-04-22 21:04:05","http://115.216.214.215:34273/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348456/","Gandylyan1"
+"348456","2020-04-22 21:04:05","http://115.216.214.215:34273/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348456/","Gandylyan1"
 "348455","2020-04-22 20:51:04","http://12.171.247.123:11740/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/348455/","zbetcheckin"
 "348454","2020-04-22 20:47:05","http://31.154.232.106:50525/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/348454/","zbetcheckin"
 "348453","2020-04-22 19:11:15","http://162.255.117.11/nop4/sync8.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348453/","zbetcheckin"
@@ -5381,7 +5901,7 @@
 "348419","2020-04-22 18:17:32","http://tedxtest.devbyopeneyes.com/wp-content/themes/mapro/pump/9916/Judgement_04212020_9916.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348419/","malware_traffic"
 "348418","2020-04-22 18:17:22","http://tedxtest.devbyopeneyes.com/wp-content/themes/mapro/pump/7281/Judgement_04212020_7281.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348418/","malware_traffic"
 "348417","2020-04-22 18:17:15","http://beachview.co.za/wp-content/themes/mapro/pump/9056/Judgement_04212020_9056.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348417/","malware_traffic"
-"348416","2020-04-22 18:17:04","http://beachview.co.za/wp-content/themes/mapro/pump/1636/Judgement_04212020_1636.zip","online","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348416/","malware_traffic"
+"348416","2020-04-22 18:17:04","http://beachview.co.za/wp-content/themes/mapro/pump/1636/Judgement_04212020_1636.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348416/","malware_traffic"
 "348415","2020-04-22 18:16:53","http://baiseyapian.com/wp-content/themes/mapro/pump/7514/Judgement_04212020_7514.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348415/","malware_traffic"
 "348414","2020-04-22 18:16:51","http://baiseyapian.com/wp-content/themes/mapro/pump/6034/Judgement_04212020_6034.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348414/","malware_traffic"
 "348413","2020-04-22 18:16:41","http://atelierdegaia.fr/wp-content/themes/mapro/pump/Judgement_04212020_2760.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348413/","malware_traffic"
@@ -5394,7 +5914,7 @@
 "348406","2020-04-22 18:15:47","http://longform.harker.org/wp-content/themes/mapro/pump/Judgement_04212020_9352.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348406/","malware_traffic"
 "348405","2020-04-22 18:15:38","http://longform.harker.org/wp-content/themes/mapro/pump/Judgement_04212020_3626.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348405/","malware_traffic"
 "348404","2020-04-22 18:15:33","http://longform.harker.org/wp-content/themes/mapro/pump/2495/Judgement_04212020_2495.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348404/","malware_traffic"
-"348403","2020-04-22 18:14:54","http://garage.themebuffets.com/wp-content/themes/mapro/pump/0416/judgement_04212020_0416.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348403/","malware_traffic"
+"348403","2020-04-22 18:14:54","http://garage.themebuffets.com/wp-content/themes/mapro/pump/0416/judgement_04212020_0416.zip","online","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348403/","malware_traffic"
 "348402","2020-04-22 18:14:19","http://cirkuscloudhosting.site/wp-content/themes/mapro/pump/Judgement_04212020_4918.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348402/","malware_traffic"
 "348401","2020-04-22 18:13:45","http://cirkuscloudhosting.site/wp-content/themes/mapro/pump/Judgement_04212020_2975.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348401/","malware_traffic"
 "348400","2020-04-22 18:13:10","http://cirkuscloudhosting.site/wp-content/themes/mapro/pump/1529/Judgement_04212020_1529.zip","offline","malware_download","Qakbot,qbot,spx102,zip","https://urlhaus.abuse.ch/url/348400/","malware_traffic"
@@ -5427,13 +5947,13 @@
 "348373","2020-04-22 17:15:04","http://82.253.6.50:32275/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348373/","geenensp"
 "348372","2020-04-22 17:11:05","http://50.115.175.110/bins/Snoopy.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/348372/","0xrb"
 "348371","2020-04-22 17:10:33","http://138.197.222.65/AvaNiggers/x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/348371/","0xrb"
-"348370","2020-04-22 17:08:03","http://51.255.170.237/Pandora.sh","offline","malware_download","script","https://urlhaus.abuse.ch/url/348370/","geenensp"
+"348370","2020-04-22 17:08:03","http://51.255.170.237/Pandora.sh","online","malware_download","script","https://urlhaus.abuse.ch/url/348370/","geenensp"
 "348369","2020-04-22 17:04:04","http://162.255.117.11/razor/sync8.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348369/","0xrb"
 "348368","2020-04-22 17:03:35","http://62.171.189.167/beastmode/b3astmode.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348368/","0xrb"
 "348367","2020-04-22 17:03:33","http://209.97.132.151/SBIDIOT/x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/348367/","0xrb"
 "348366","2020-04-22 17:02:03","http://191.96.25.226/beastmode/b3astmode.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/348366/","0xrb"
 "348365","2020-04-22 16:58:10","https://drive.google.com/u/0/uc?id=1pPDL3bVPKcRW5oANFuDWLxxLlrJBV2jZ&export=download","offline","malware_download","None","https://urlhaus.abuse.ch/url/348365/","James_inthe_box"
-"348364","2020-04-22 16:34:03","http://78.85.18.163:59180/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348364/","geenensp"
+"348364","2020-04-22 16:34:03","http://78.85.18.163:59180/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348364/","geenensp"
 "348363","2020-04-22 16:24:06","http://sosyaldestekcom.ga/30GB.apk","offline","malware_download","anubis,apk ","https://urlhaus.abuse.ch/url/348363/","mertcangokgoz"
 "348362","2020-04-22 16:20:10","http://toliku.com/qmzo.exe","offline","malware_download","Dridex,exe","https://urlhaus.abuse.ch/url/348362/","abuse_ch"
 "348361","2020-04-22 16:15:11","http://5.238.110.62:15238/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/348361/","zbetcheckin"
@@ -5467,30 +5987,30 @@
 "348333","2020-04-22 15:03:12","http://123.11.14.24:33517/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348333/","Gandylyan1"
 "348332","2020-04-22 15:03:08","http://62.16.60.49:36930/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348332/","Gandylyan1"
 "348331","2020-04-22 15:03:05","http://111.43.223.80:36979/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/348331/","Gandylyan1"
-"348330","2020-04-22 14:49:55","http://88.218.17.179/sora/zte","online","malware_download","None","https://urlhaus.abuse.ch/url/348330/","JayTHL"
-"348329","2020-04-22 14:49:53","http://88.218.17.179/sora/yarn","online","malware_download","None","https://urlhaus.abuse.ch/url/348329/","JayTHL"
-"348328","2020-04-22 14:49:51","http://88.218.17.179/sora/x86","online","malware_download","None","https://urlhaus.abuse.ch/url/348328/","JayTHL"
-"348327","2020-04-22 14:49:49","http://88.218.17.179/sora/spc","online","malware_download","None","https://urlhaus.abuse.ch/url/348327/","JayTHL"
-"348326","2020-04-22 14:49:47","http://88.218.17.179/sora/sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/348326/","JayTHL"
-"348325","2020-04-22 14:49:45","http://88.218.17.179/sora/rtk","online","malware_download","None","https://urlhaus.abuse.ch/url/348325/","JayTHL"
-"348324","2020-04-22 14:49:43","http://88.218.17.179/sora/root","online","malware_download","None","https://urlhaus.abuse.ch/url/348324/","JayTHL"
-"348323","2020-04-22 14:49:41","http://88.218.17.179/sora/ppc","online","malware_download","None","https://urlhaus.abuse.ch/url/348323/","JayTHL"
-"348322","2020-04-22 14:49:39","http://88.218.17.179/sora/mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/348322/","JayTHL"
-"348321","2020-04-22 14:49:37","http://88.218.17.179/sora/mips","online","malware_download","None","https://urlhaus.abuse.ch/url/348321/","JayTHL"
-"348320","2020-04-22 14:49:35","http://88.218.17.179/sora/m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/348320/","JayTHL"
-"348319","2020-04-22 14:49:32","http://88.218.17.179/sora/arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/348319/","JayTHL"
-"348318","2020-04-22 14:49:30","http://88.218.17.179/sora/arm","online","malware_download","None","https://urlhaus.abuse.ch/url/348318/","JayTHL"
-"348317","2020-04-22 14:49:28","http://51.255.170.237/Pandoras_Box/pandora.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/348317/","JayTHL"
-"348316","2020-04-22 14:49:26","http://51.255.170.237/Pandoras_Box/pandora.spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/348316/","JayTHL"
-"348315","2020-04-22 14:49:24","http://51.255.170.237/Pandoras_Box/pandora.sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/348315/","JayTHL"
-"348314","2020-04-22 14:49:22","http://51.255.170.237/Pandoras_Box/pandora.ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/348314/","JayTHL"
-"348313","2020-04-22 14:49:20","http://51.255.170.237/Pandoras_Box/pandora.mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/348313/","JayTHL"
-"348312","2020-04-22 14:49:18","http://51.255.170.237/Pandoras_Box/pandora.mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/348312/","JayTHL"
-"348311","2020-04-22 14:49:16","http://51.255.170.237/Pandoras_Box/pandora.m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/348311/","JayTHL"
-"348310","2020-04-22 14:49:14","http://51.255.170.237/Pandoras_Box/pandora.arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/348310/","JayTHL"
-"348309","2020-04-22 14:49:12","http://51.255.170.237/Pandoras_Box/pandora.arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/348309/","JayTHL"
-"348308","2020-04-22 14:49:10","http://51.255.170.237/Pandoras_Box/pandora.arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/348308/","JayTHL"
-"348307","2020-04-22 14:49:07","http://51.255.170.237/Pandoras_Box/pandora.arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/348307/","JayTHL"
+"348330","2020-04-22 14:49:55","http://88.218.17.179/sora/zte","offline","malware_download","None","https://urlhaus.abuse.ch/url/348330/","JayTHL"
+"348329","2020-04-22 14:49:53","http://88.218.17.179/sora/yarn","offline","malware_download","None","https://urlhaus.abuse.ch/url/348329/","JayTHL"
+"348328","2020-04-22 14:49:51","http://88.218.17.179/sora/x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/348328/","JayTHL"
+"348327","2020-04-22 14:49:49","http://88.218.17.179/sora/spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/348327/","JayTHL"
+"348326","2020-04-22 14:49:47","http://88.218.17.179/sora/sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/348326/","JayTHL"
+"348325","2020-04-22 14:49:45","http://88.218.17.179/sora/rtk","offline","malware_download","None","https://urlhaus.abuse.ch/url/348325/","JayTHL"
+"348324","2020-04-22 14:49:43","http://88.218.17.179/sora/root","offline","malware_download","None","https://urlhaus.abuse.ch/url/348324/","JayTHL"
+"348323","2020-04-22 14:49:41","http://88.218.17.179/sora/ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/348323/","JayTHL"
+"348322","2020-04-22 14:49:39","http://88.218.17.179/sora/mpsl","offline","malware_download","None","https://urlhaus.abuse.ch/url/348322/","JayTHL"
+"348321","2020-04-22 14:49:37","http://88.218.17.179/sora/mips","offline","malware_download","None","https://urlhaus.abuse.ch/url/348321/","JayTHL"
+"348320","2020-04-22 14:49:35","http://88.218.17.179/sora/m68k","offline","malware_download","None","https://urlhaus.abuse.ch/url/348320/","JayTHL"
+"348319","2020-04-22 14:49:32","http://88.218.17.179/sora/arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/348319/","JayTHL"
+"348318","2020-04-22 14:49:30","http://88.218.17.179/sora/arm","offline","malware_download","None","https://urlhaus.abuse.ch/url/348318/","JayTHL"
+"348317","2020-04-22 14:49:28","http://51.255.170.237/Pandoras_Box/pandora.x86","online","malware_download","None","https://urlhaus.abuse.ch/url/348317/","JayTHL"
+"348316","2020-04-22 14:49:26","http://51.255.170.237/Pandoras_Box/pandora.spc","online","malware_download","None","https://urlhaus.abuse.ch/url/348316/","JayTHL"
+"348315","2020-04-22 14:49:24","http://51.255.170.237/Pandoras_Box/pandora.sh4","online","malware_download","None","https://urlhaus.abuse.ch/url/348315/","JayTHL"
+"348314","2020-04-22 14:49:22","http://51.255.170.237/Pandoras_Box/pandora.ppc","online","malware_download","None","https://urlhaus.abuse.ch/url/348314/","JayTHL"
+"348313","2020-04-22 14:49:20","http://51.255.170.237/Pandoras_Box/pandora.mpsl","online","malware_download","None","https://urlhaus.abuse.ch/url/348313/","JayTHL"
+"348312","2020-04-22 14:49:18","http://51.255.170.237/Pandoras_Box/pandora.mips","online","malware_download","None","https://urlhaus.abuse.ch/url/348312/","JayTHL"
+"348311","2020-04-22 14:49:16","http://51.255.170.237/Pandoras_Box/pandora.m68k","online","malware_download","None","https://urlhaus.abuse.ch/url/348311/","JayTHL"
+"348310","2020-04-22 14:49:14","http://51.255.170.237/Pandoras_Box/pandora.arm7","online","malware_download","None","https://urlhaus.abuse.ch/url/348310/","JayTHL"
+"348309","2020-04-22 14:49:12","http://51.255.170.237/Pandoras_Box/pandora.arm6","online","malware_download","None","https://urlhaus.abuse.ch/url/348309/","JayTHL"
+"348308","2020-04-22 14:49:10","http://51.255.170.237/Pandoras_Box/pandora.arm5","online","malware_download","None","https://urlhaus.abuse.ch/url/348308/","JayTHL"
+"348307","2020-04-22 14:49:07","http://51.255.170.237/Pandoras_Box/pandora.arm","online","malware_download","None","https://urlhaus.abuse.ch/url/348307/","JayTHL"
 "348306","2020-04-22 14:49:05","http://51.161.68.186/bins/spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/348306/","JayTHL"
 "348305","2020-04-22 14:49:03","http://51.161.68.186/bins/sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/348305/","JayTHL"
 "348304","2020-04-22 14:49:00","http://51.161.68.186/bins/ppc","offline","malware_download","None","https://urlhaus.abuse.ch/url/348304/","JayTHL"
@@ -5615,7 +6135,7 @@
 "348185","2020-04-22 14:27:07","http://modcloudserver.eu/jayz/jayz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348185/","zbetcheckin"
 "348184","2020-04-22 14:26:57","http://modcloudserver.eu/petercodyz/petercodyz.exe","offline","malware_download","AgentTesla,exe,Loki","https://urlhaus.abuse.ch/url/348184/","zbetcheckin"
 "348183","2020-04-22 14:26:25","http://modcloudserver.eu/billiz/billiz.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/348183/","zbetcheckin"
-"348182","2020-04-22 14:18:07","http://179.156.196.13:31972/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348182/","geenensp"
+"348182","2020-04-22 14:18:07","http://179.156.196.13:31972/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348182/","geenensp"
 "348181","2020-04-22 14:08:08","http://42.113.104.40:10796/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348181/","geenensp"
 "348180","2020-04-22 14:03:05","http://173.168.197.166:4638/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348180/","geenensp"
 "348179","2020-04-22 13:35:05","http://206.189.142.52/test.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348179/","zbetcheckin"
@@ -5624,7 +6144,7 @@
 "348176","2020-04-22 13:23:03","https://paste.ee/r/SdssK","offline","malware_download","Encoded","https://urlhaus.abuse.ch/url/348176/","abuse_ch"
 "348175","2020-04-22 13:20:19","http://quecik.com/j1x/1447032.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/348175/","zbetcheckin"
 "348174","2020-04-22 13:20:15","http://modcloudserver.eu/uzmod2/uzmod2.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/348174/","zbetcheckin"
-"348173","2020-04-22 13:19:39","http://modcloudserver.eu/nwamaz/nwamaz.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348173/","zbetcheckin"
+"348173","2020-04-22 13:19:39","http://modcloudserver.eu/nwamaz/nwamaz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/348173/","zbetcheckin"
 "348172","2020-04-22 13:19:07","http://quecik.com/j1x/1856137.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348172/","zbetcheckin"
 "348171","2020-04-22 13:16:07","http://www.apexsruveyors.com/date/eat.png","offline","malware_download","exe,NanoCore,rat","https://urlhaus.abuse.ch/url/348171/","abuse_ch"
 "348170","2020-04-22 13:15:44","http://modcloudserver.eu/uzmod1/uzmod1.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/348170/","zbetcheckin"
@@ -5632,7 +6152,7 @@
 "348168","2020-04-22 13:06:04","http://russchine2specialstdy7plumbingmaterialmk.duckdns.org/russdoc/regasm.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348168/","gorimpthon"
 "348167","2020-04-22 13:06:03","http://cheshirecheetah.com/wp-content/themes/mapro/pump/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx102","https://urlhaus.abuse.ch/url/348167/","lazyactivist192"
 "348166","2020-04-22 13:05:51","http://jeromenetpanel.ml/wp-content/themes/mapro/pump/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx102","https://urlhaus.abuse.ch/url/348166/","lazyactivist192"
-"348165","2020-04-22 13:05:36","http://cloud.wmsinfo.com.br/wordpress/wp-content/themes/mapro/pump/55555.png","online","malware_download","exe,Qakbot,Quakbot,spx102","https://urlhaus.abuse.ch/url/348165/","lazyactivist192"
+"348165","2020-04-22 13:05:36","http://cloud.wmsinfo.com.br/wordpress/wp-content/themes/mapro/pump/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx102","https://urlhaus.abuse.ch/url/348165/","lazyactivist192"
 "348164","2020-04-22 13:05:24","http://4mco.com.pk/wp/wp-content/themes/mapro/pump/55555.png","offline","malware_download","exe,Qakbot,spx102","https://urlhaus.abuse.ch/url/348164/","lazyactivist192"
 "348163","2020-04-22 13:05:20","http://hasumvina.nrglobal.top/wp-content/themes/mapro/pump/55555.png","offline","malware_download","exe,Qakbot,Quakbot,spx102","https://urlhaus.abuse.ch/url/348163/","lazyactivist192"
 "348162","2020-04-22 13:00:07","http://121.226.94.109:59214/Mozi.a","offline","malware_download","elf,gafgyt,Mozi","https://urlhaus.abuse.ch/url/348162/","07ac0n"
@@ -5760,7 +6280,7 @@
 "348040","2020-04-22 06:33:43","http://86.179.186.74:62126/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348040/","geenensp"
 "348039","2020-04-22 06:33:40","http://2.229.41.205:42285/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348039/","geenensp"
 "348038","2020-04-22 06:33:37","http://79.54.115.243:19655/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348038/","geenensp"
-"348037","2020-04-22 06:33:34","http://218.154.126.150:47788/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348037/","geenensp"
+"348037","2020-04-22 06:33:34","http://218.154.126.150:47788/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/348037/","geenensp"
 "348036","2020-04-22 06:33:01","http://systemintergrafileexchangeserverprotocol.duckdns.org/sys/xx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348036/","gorimpthon"
 "348035","2020-04-22 06:32:29","http://systemintergrafileexchangeserverprotocol.duckdns.org/sys/x.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348035/","gorimpthon"
 "348034","2020-04-22 06:31:57","http://systemintergrafileexchangeserverprotocol.duckdns.org/sys/py.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/348034/","gorimpthon"
@@ -5839,14 +6359,14 @@
 "347961","2020-04-22 05:43:10","http://78.24.219.58/owen.arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347961/","hypoweb"
 "347960","2020-04-22 05:43:07","http://78.24.219.58/owen.arm4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347960/","hypoweb"
 "347959","2020-04-22 05:43:05","http://194.180.224.113/nr/sh4","online","malware_download","elf","https://urlhaus.abuse.ch/url/347959/","hypoweb"
-"347958","2020-04-22 05:42:34","http://194.180.224.113/nr/ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/347958/","hypoweb"
+"347958","2020-04-22 05:42:34","http://194.180.224.113/nr/ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347958/","hypoweb"
 "347957","2020-04-22 05:42:30","http://194.180.224.113/nr/i686","online","malware_download","elf","https://urlhaus.abuse.ch/url/347957/","hypoweb"
 "347956","2020-04-22 05:42:27","http://194.180.224.113/nr/i586","online","malware_download","elf","https://urlhaus.abuse.ch/url/347956/","hypoweb"
-"347955","2020-04-22 05:42:25","http://194.180.224.113/nr/arm7","online","malware_download","elf","https://urlhaus.abuse.ch/url/347955/","hypoweb"
+"347955","2020-04-22 05:42:25","http://194.180.224.113/nr/arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347955/","hypoweb"
 "347954","2020-04-22 05:42:23","http://194.180.224.113/nr/arm6","online","malware_download","elf","https://urlhaus.abuse.ch/url/347954/","hypoweb"
 "347953","2020-04-22 05:42:20","http://194.180.224.113/nr/arm5","online","malware_download","elf","https://urlhaus.abuse.ch/url/347953/","hypoweb"
 "347952","2020-04-22 05:42:16","http://194.180.224.113/nr/arm","online","malware_download","elf","https://urlhaus.abuse.ch/url/347952/","hypoweb"
-"347951","2020-04-22 05:41:45","http://45.14.150.29/bins/lessie.ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/347951/","hypoweb"
+"347951","2020-04-22 05:41:45","http://45.14.150.29/bins/lessie.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347951/","hypoweb"
 "347950","2020-04-22 05:41:43","http://189.222.149.237:53258/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347950/","geenensp"
 "347949","2020-04-22 05:41:39","https://drive.google.com/uc?export=download&id=1eviL--HbRjyg4FwfaUe_-SkFZjmqbNKm","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347949/","lovemalware"
 "347948","2020-04-22 05:27:47","http://jppost-to.co/jppost.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/347948/","JayTHL"
@@ -5942,7 +6462,7 @@
 "347858","2020-04-22 00:05:15","http://173.15.162.146:4217/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347858/","Gandylyan1"
 "347857","2020-04-22 00:05:12","http://219.155.98.182:51850/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347857/","Gandylyan1"
 "347856","2020-04-22 00:05:08","http://180.125.172.181:38410/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347856/","Gandylyan1"
-"347855","2020-04-22 00:05:04","http://49.70.137.78:57384/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347855/","Gandylyan1"
+"347855","2020-04-22 00:05:04","http://49.70.137.78:57384/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347855/","Gandylyan1"
 "347854","2020-04-22 00:04:32","http://27.41.141.116:37266/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347854/","Gandylyan1"
 "347853","2020-04-22 00:04:28","http://42.231.173.223:51925/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347853/","Gandylyan1"
 "347852","2020-04-22 00:04:25","http://115.58.74.77:58082/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/347852/","Gandylyan1"
@@ -6020,7 +6540,7 @@
 "347780","2020-04-21 18:47:10","http://music919.com/evolving/708485/708485.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347780/","malware_traffic"
 "347779","2020-04-21 18:47:01","http://mrsphr.ir/wp-content/uploads/2020/04/evolving/1252824/1252824.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347779/","malware_traffic"
 "347778","2020-04-21 18:46:55","http://knowledgetime.co.in/wp-content/uploads/2020/04/evolving/936934838.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347778/","malware_traffic"
-"347777","2020-04-21 18:46:50","http://keckarangdadap.pekalongankab.go.id/wp-content/uploads/2020/04/evolving/809295/809295.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347777/","malware_traffic"
+"347777","2020-04-21 18:46:50","http://keckarangdadap.pekalongankab.go.id/wp-content/uploads/2020/04/evolving/809295/809295.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347777/","malware_traffic"
 "347776","2020-04-21 18:46:17","http://Bretmartinconstructioninc.com/evolving/613862/613862.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347776/","malware_traffic"
 "347775","2020-04-21 18:46:15","http://Bretmartinconstructioninc.com/evolving/082557.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347775/","malware_traffic"
 "347774","2020-04-21 18:46:03","http://artgennesis.com/wp-content/uploads/2020/04/evolving/81653036/81653036.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347774/","malware_traffic"
@@ -6130,7 +6650,7 @@
 "347670","2020-04-21 14:25:59","https://zoodbaz.com/wp-content/uploads/2020/04/evolving/39861/39861.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347670/","malware_traffic"
 "347669","2020-04-21 14:25:52","https://zoodbaz.com/wp-content/uploads/2020/04/evolving/0901086/0901086.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347669/","malware_traffic"
 "347668","2020-04-21 14:25:45","https://villette45.com/wp-content/uploads/2020/04/evolving/5329347/5329347.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347668/","malware_traffic"
-"347667","2020-04-21 14:25:42","https://tianzi8.cn/wp-content/plugins/apikey/evolving/8525382.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347667/","malware_traffic"
+"347667","2020-04-21 14:25:42","https://tianzi8.cn/wp-content/plugins/apikey/evolving/8525382.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347667/","malware_traffic"
 "347666","2020-04-21 14:25:34","https://tianzi8.cn/wp-content/plugins/apikey/evolving/17951100.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347666/","malware_traffic"
 "347665","2020-04-21 14:25:17","https://themenuz.com/wp-content/uploads/2020/04/evolving/992093.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347665/","malware_traffic"
 "347664","2020-04-21 14:25:12","https://themenuz.com/wp-content/uploads/2020/04/evolving/9073043/9073043.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347664/","malware_traffic"
@@ -6153,9 +6673,9 @@
 "347647","2020-04-21 14:23:52","https://male.profertil.ro/wp-content/uploads/2020/04/evolving/522812015/522812015.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347647/","malware_traffic"
 "347646","2020-04-21 14:23:47","https://lamaisongourmande.live/wp-content/uploads/2020/04/evolving/241093858.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347646/","malware_traffic"
 "347645","2020-04-21 14:23:43","https://lamaisongourmande.live/wp-content/uploads/2020/04/evolving/23128159.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347645/","malware_traffic"
-"347644","2020-04-21 14:23:40","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/301543/301543.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347644/","malware_traffic"
-"347643","2020-04-21 14:23:34","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/11044836/11044836.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347643/","malware_traffic"
-"347642","2020-04-21 14:23:30","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/10326.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347642/","malware_traffic"
+"347644","2020-04-21 14:23:40","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/301543/301543.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347644/","malware_traffic"
+"347643","2020-04-21 14:23:34","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/11044836/11044836.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347643/","malware_traffic"
+"347642","2020-04-21 14:23:30","https://ileolaherbalcare.com.ng/wp-content/uploads/2020/04/evolving/10326.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347642/","malware_traffic"
 "347641","2020-04-21 14:23:24","https://icshongkong.com/wp-content/uploads/2020/04/evolving/712611496.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347641/","malware_traffic"
 "347640","2020-04-21 14:23:16","https://icshongkong.com/wp-content/uploads/2020/04/evolving/31084/31084.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347640/","malware_traffic"
 "347639","2020-04-21 14:23:07","https://icshongkong.com/wp-content/uploads/2020/04/evolving/1034048/1034048.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347639/","malware_traffic"
@@ -6215,7 +6735,7 @@
 "347585","2020-04-21 14:16:20","http://knowledgetime.co.in/wp-content/uploads/2020/04/evolving/8234130/8234130.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347585/","malware_traffic"
 "347584","2020-04-21 14:16:15","http://knowledgetime.co.in/wp-content/uploads/2020/04/evolving/801311.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347584/","malware_traffic"
 "347583","2020-04-21 14:16:10","http://knowledgetime.co.in/wp-content/uploads/2020/04/evolving/42895/42895.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347583/","malware_traffic"
-"347582","2020-04-21 14:16:04","http://keckarangdadap.pekalongankab.go.id/wp-content/uploads/2020/04/evolving/98110.zip","online","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347582/","malware_traffic"
+"347582","2020-04-21 14:16:04","http://keckarangdadap.pekalongankab.go.id/wp-content/uploads/2020/04/evolving/98110.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347582/","malware_traffic"
 "347581","2020-04-21 14:15:54","http://Bretmartinconstructioninc.com/evolving/85171077/85171077.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347581/","malware_traffic"
 "347580","2020-04-21 14:15:46","http://Bretmartinconstructioninc.com/evolving/237784083.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347580/","malware_traffic"
 "347579","2020-04-21 14:15:36","http://Bretmartinconstructioninc.com/evolving/0996134.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347579/","malware_traffic"
@@ -6224,23 +6744,23 @@
 "347576","2020-04-21 14:15:06","http://artgennesis.com/wp-content/uploads/2020/04/evolving/742328894.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347576/","malware_traffic"
 "347575","2020-04-21 14:15:04","http://artgennesis.com/wp-content/uploads/2020/04/evolving/67614295.zip","offline","malware_download","Qakbot,qbot,spx101,zip","https://urlhaus.abuse.ch/url/347575/","malware_traffic"
 "347574","2020-04-21 14:11:10","https://prosperworkshops.com/vendor/fting/KOROWOLE.exe","offline","malware_download","exe,RemcosRAT","https://urlhaus.abuse.ch/url/347574/","zbetcheckin"
-"347573","2020-04-21 13:57:02","http://45.14.150.29/bins/lessie.spc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347573/","zbetcheckin"
+"347573","2020-04-21 13:57:02","http://45.14.150.29/bins/lessie.spc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347573/","zbetcheckin"
 "347572","2020-04-21 13:56:30","http://kslanrung.com/evolving/888888.png","offline","malware_download","exe,Qakbot,Quakbot,spx101","https://urlhaus.abuse.ch/url/347572/","lazyactivist192"
 "347571","2020-04-21 13:55:59","http://enlightened-education.com/wp-content/uploads/2020/04/evolving/888888.png","offline","malware_download","exe,Qakbot,Quakbot,spx101","https://urlhaus.abuse.ch/url/347571/","lazyactivist192"
 "347570","2020-04-21 13:55:54","http://econspiracy.se/evolving/888888.png","offline","malware_download","exe,Qakbot,spx101","https://urlhaus.abuse.ch/url/347570/","lazyactivist192"
 "347569","2020-04-21 13:55:50","http://decons.vn/wp-content/uploads/2020/04/evolving/888888.png","offline","malware_download","exe,Qakbot,Quakbot,spx101","https://urlhaus.abuse.ch/url/347569/","lazyactivist192"
 "347568","2020-04-21 13:55:08","http://pickap.io/wp-content/uploads/2020/04/evolving/888888.png","offline","malware_download","exe,Qakbot,spx101","https://urlhaus.abuse.ch/url/347568/","lazyactivist192"
 "347567","2020-04-21 13:52:11","http://promacsolutions.mx/templates/atomic/option.php","offline","malware_download","None","https://urlhaus.abuse.ch/url/347567/","cocaman"
-"347566","2020-04-21 13:52:07","http://45.14.150.29/bins/lessie.arm7","online","malware_download","elf","https://urlhaus.abuse.ch/url/347566/","zbetcheckin"
-"347565","2020-04-21 13:52:05","http://45.14.150.29/bins/lessie.arm","online","malware_download","elf","https://urlhaus.abuse.ch/url/347565/","zbetcheckin"
+"347566","2020-04-21 13:52:07","http://45.14.150.29/bins/lessie.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347566/","zbetcheckin"
+"347565","2020-04-21 13:52:05","http://45.14.150.29/bins/lessie.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347565/","zbetcheckin"
 "347564","2020-04-21 13:52:03","http://taxifeusisberg.ch/wp-includes/ID3/class.api.php","offline","malware_download","None","https://urlhaus.abuse.ch/url/347564/","cocaman"
 "347563","2020-04-21 13:51:04","http://nederlandslinguistischinstituut.nl/termijninschrijven/PHPMailer/defense.php","offline","malware_download","None","https://urlhaus.abuse.ch/url/347563/","cocaman"
-"347562","2020-04-21 13:47:09","http://45.14.150.29/bins/lessie.arm6","online","malware_download","elf","https://urlhaus.abuse.ch/url/347562/","zbetcheckin"
-"347561","2020-04-21 13:47:07","http://45.14.150.29/bins/lessie.m68k","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347561/","zbetcheckin"
-"347560","2020-04-21 13:47:05","http://45.14.150.29/bins/lessie.arm5","online","malware_download","elf","https://urlhaus.abuse.ch/url/347560/","zbetcheckin"
-"347559","2020-04-21 13:47:03","http://45.14.150.29/bins/lessie.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347559/","zbetcheckin"
-"347558","2020-04-21 13:43:05","http://45.14.150.29/bins/lessie.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/347558/","zbetcheckin"
-"347557","2020-04-21 13:43:03","http://45.14.150.29/bins/lessie.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347557/","zbetcheckin"
+"347562","2020-04-21 13:47:09","http://45.14.150.29/bins/lessie.arm6","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347562/","zbetcheckin"
+"347561","2020-04-21 13:47:07","http://45.14.150.29/bins/lessie.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347561/","zbetcheckin"
+"347560","2020-04-21 13:47:05","http://45.14.150.29/bins/lessie.arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347560/","zbetcheckin"
+"347559","2020-04-21 13:47:03","http://45.14.150.29/bins/lessie.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347559/","zbetcheckin"
+"347558","2020-04-21 13:43:05","http://45.14.150.29/bins/lessie.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347558/","zbetcheckin"
+"347557","2020-04-21 13:43:03","http://45.14.150.29/bins/lessie.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347557/","zbetcheckin"
 "347556","2020-04-21 13:39:03","http://80.211.230.27:1691/dvrbot.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347556/","zbetcheckin"
 "347555","2020-04-21 13:33:04","http://taxieinsiedeln.ch/wp-admin/css/lib.php","offline","malware_download","unknown","https://urlhaus.abuse.ch/url/347555/","cocaman"
 "347554","2020-04-21 13:24:03","http://84.38.130.153/JONFIL.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/347554/","abuse_ch"
@@ -6291,7 +6811,7 @@
 "347509","2020-04-21 11:58:05","http://45.84.196.148/bins/Slsmodsd.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347509/","zbetcheckin"
 "347508","2020-04-21 11:58:03","http://23.254.226.60/ABCDEFGHIJKLMNOPQRSTUVWXYZ/whoareyou.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347508/","zbetcheckin"
 "347507","2020-04-21 11:39:02","http://80.211.230.27:1691/dvrbot.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/347507/","zbetcheckin"
-"347506","2020-04-21 11:31:03","http://45.14.150.29/bins/lessie.x86","online","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/347506/","geenensp"
+"347506","2020-04-21 11:31:03","http://45.14.150.29/bins/lessie.x86","offline","malware_download","32-bit,elf,x86-32","https://urlhaus.abuse.ch/url/347506/","geenensp"
 "347505","2020-04-21 11:28:33","https://nephemp.com/neplod/02581650393.jpg","offline","malware_download","None","https://urlhaus.abuse.ch/url/347505/","JAMESWT_MHT"
 "347504","2020-04-21 11:26:33","http://104.238.134.16/SBIDIOT/x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347504/","0xrb"
 "347503","2020-04-21 11:25:10","http://23.254.226.60/ABCDEFGHIJKLMNOPQRSTUVWXYZ/whoareyou.x86","online","malware_download","elf","https://urlhaus.abuse.ch/url/347503/","0xrb"
@@ -6336,7 +6856,7 @@
 "347464","2020-04-21 10:34:06","http://51.161.68.186/bins/arm6","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347464/","Gandylyan1"
 "347463","2020-04-21 10:34:03","http://51.161.68.186/bins/arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347463/","Gandylyan1"
 "347462","2020-04-21 10:30:04","http://51.161.68.186/bins/arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/347462/","Gandylyan1"
-"347461","2020-04-21 10:00:24","http://112.170.165.71:56520/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347461/","geenensp"
+"347461","2020-04-21 10:00:24","http://112.170.165.71:56520/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347461/","geenensp"
 "347460","2020-04-21 10:00:19","http://191.13.47.22:58223/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347460/","geenensp"
 "347459","2020-04-21 10:00:11","http://189.112.131.104:29712/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347459/","geenensp"
 "347458","2020-04-21 10:00:06","http://14.46.51.53:8136/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347458/","geenensp"
@@ -6474,7 +6994,7 @@
 "347326","2020-04-21 05:20:42","https://onedrive.live.com/download?cid=0153C2A7092EE91C&resid=153C2A7092EE91C%21111&authkey=AEmrWamaAAIYyjc","online","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347326/","lovemalware"
 "347325","2020-04-21 05:20:26","https://drive.google.com/uc?export=download&id=1tlaISNHA9iIifF5GgEHGmOjGc_7rYk78","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/347325/","lovemalware"
 "347324","2020-04-21 05:20:18","http://73.233.67.25:50388/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347324/","geenensp"
-"347323","2020-04-21 05:20:14","http://112.184.231.90:47888/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347323/","geenensp"
+"347323","2020-04-21 05:20:14","http://112.184.231.90:47888/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347323/","geenensp"
 "347322","2020-04-21 05:20:09","http://187.136.92.194:35624/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347322/","geenensp"
 "347321","2020-04-21 05:19:18","http://211.76.32.143:48650/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347321/","geenensp"
 "347320","2020-04-21 05:19:14","http://45.229.22.195:42195/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/347320/","geenensp"
@@ -6634,7 +7154,7 @@
 "347166","2020-04-20 23:45:46","https://gnxpublishers.ca/wp-content/uploads/2020/04/vary/152364.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347166/","malware_traffic"
 "347165","2020-04-20 23:45:42","https://51youqun.com/wp-content/plugins/apikey/vary/6141845/6141845.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347165/","malware_traffic"
 "347164","2020-04-20 23:45:30","https://51youqun.com/wp-content/plugins/apikey/vary/468549922/468549922.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347164/","malware_traffic"
-"347163","2020-04-20 23:45:19","http://salvation24.com/wp-admin/vary/324437/324437.zip","online","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347163/","malware_traffic"
+"347163","2020-04-20 23:45:19","http://salvation24.com/wp-admin/vary/324437/324437.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347163/","malware_traffic"
 "347162","2020-04-20 23:45:15","http://ns-hd.co.jp/wp-content/uploads/2020/04/vary/23082.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347162/","malware_traffic"
 "347161","2020-04-20 23:45:10","http://jualankaos.id/wp-content/plugins/apikey/vary/668055.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347161/","malware_traffic"
 "347160","2020-04-20 23:45:05","http://jualankaos.id/wp-content/plugins/apikey/vary/0052410.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347160/","malware_traffic"
@@ -6649,7 +7169,7 @@
 "347151","2020-04-20 23:44:15","https://villette45.com/wp-content/uploads/2020/04/vary/151221/151221.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347151/","malware_traffic"
 "347150","2020-04-20 23:44:12","https://smartfield.co.ke/wp-admin/vary/600763/600763.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347150/","malware_traffic"
 "347149","2020-04-20 23:43:53","https://sawda.nl/vary/103080512/103080512.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347149/","malware_traffic"
-"347148","2020-04-20 23:43:47","https://salvation24.com/wp-admin/vary/856601/856601.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347148/","malware_traffic"
+"347148","2020-04-20 23:43:47","https://salvation24.com/wp-admin/vary/856601/856601.zip","online","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347148/","malware_traffic"
 "347147","2020-04-20 23:43:42","https://salvation24.com/vary/0995862/0995862.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347147/","malware_traffic"
 "347146","2020-04-20 23:43:27","https://roirush.com/wp-content/vary/32054640/32054640.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347146/","malware_traffic"
 "347145","2020-04-20 23:43:24","https://powerrouter.io/wp-content/uploads/2020/04/vary/47549607.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347145/","malware_traffic"
@@ -6678,7 +7198,7 @@
 "347118","2020-04-20 22:29:01","https://villette45.com/wp-content/uploads/2020/04/vary/400898538/400898538.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347118/","malware_traffic"
 "347117","2020-04-20 22:28:59","https://smartfield.co.ke/wp-content/vary/619491/619491.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347117/","malware_traffic"
 "347116","2020-04-20 22:28:53","https://sdeposito.com.br/wp-content/uploads/2020/04/vary/078178.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347116/","malware_traffic"
-"347115","2020-04-20 22:28:40","https://salvation24.com/wp-admin/vary/26662446/26662446.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347115/","malware_traffic"
+"347115","2020-04-20 22:28:40","https://salvation24.com/wp-admin/vary/26662446/26662446.zip","online","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347115/","malware_traffic"
 "347114","2020-04-20 22:28:34","https://salvation24.com/vary/78130.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347114/","malware_traffic"
 "347113","2020-04-20 22:28:30","https://roirush.com/wp-content/vary/42868205/42868205.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347113/","malware_traffic"
 "347112","2020-04-20 22:28:22","https://optica.co.in/vary/557650781.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/347112/","malware_traffic"
@@ -6813,7 +7333,7 @@
 "346983","2020-04-20 17:47:23","http://tianmarket.shop/wp-content/uploads/2020/04/vary/111111.png","offline","malware_download","Qakbot,qbot,Quakbot","https://urlhaus.abuse.ch/url/346983/","notwhickey"
 "346982","2020-04-20 17:47:21","http://trujilloremodelingservicesinc.com/wp-admin/vary/111111.png","offline","malware_download","Qakbot,qbot,Quakbot","https://urlhaus.abuse.ch/url/346982/","notwhickey"
 "346981","2020-04-20 17:47:12","http://177.37.163.174:19501/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346981/","geenensp"
-"346980","2020-04-20 17:47:05","http://45.163.149.85:30005/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346980/","geenensp"
+"346980","2020-04-20 17:47:05","http://45.163.149.85:30005/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346980/","geenensp"
 "346979","2020-04-20 17:31:09","http://187.33.71.68:53365/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/346979/","zbetcheckin"
 "346978","2020-04-20 17:31:05","http://23.252.75.251/21","offline","malware_download","elf","https://urlhaus.abuse.ch/url/346978/","zbetcheckin"
 "346977","2020-04-20 17:22:20","http://104.140.114.108/pbot.i586","offline","malware_download","elf","https://urlhaus.abuse.ch/url/346977/","Gandylyan1"
@@ -6852,7 +7372,7 @@
 "346944","2020-04-20 16:20:42","http://biendaoco.com/wp-content/plugins/revslider/admin/uLNRIJn7GLwuCYw.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/346944/","abuse_ch"
 "346943","2020-04-20 16:19:40","http://194.183.5.242/wp-content/uploads/2020/04/vary/835554765.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/346943/","malware_traffic"
 "346942","2020-04-20 16:19:37","https://51youqun.com/wp-content/plugins/apikey/vary/0292708/0292708.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/346942/","malware_traffic"
-"346941","2020-04-20 16:19:18","https://salvation24.com/wp-admin/vary/324437/324437.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/346941/","malware_traffic"
+"346941","2020-04-20 16:19:18","https://salvation24.com/wp-admin/vary/324437/324437.zip","online","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/346941/","malware_traffic"
 "346940","2020-04-20 16:19:10","https://6686faka.com/wp-content/plugins/apikey/vary/12379.zip","offline","malware_download","Qakbot,qbot,spx100,zip","https://urlhaus.abuse.ch/url/346940/","malware_traffic"
 "346939","2020-04-20 16:17:21","http://218.187.103.198/nhbank.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/346939/","JayTHL"
 "346938","2020-04-20 16:10:09","http://217.8.117.60/mh/files/1587395026_vccubiv.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/346938/","abuse_ch"
@@ -7073,7 +7593,7 @@
 "346723","2020-04-20 10:51:33","https://drive.google.com/uc?export=download&id=1v1Ivm-mgUxc-Zg9Erxs-vVUmCEk7sB2c","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/346723/","lovemalware"
 "346722","2020-04-20 10:51:29","https://drive.google.com/uc?export=download&id=1WBX1KqI18tchBVkWdQPJ8JxbBDxrBdaH","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/346722/","lovemalware"
 "346721","2020-04-20 10:51:11","https://drive.google.com/uc?export=download&id=1Thtbm47ZjIt8mogFwzqT0Uva861yS5KB","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/346721/","lovemalware"
-"346720","2020-04-20 10:51:03","http://85.97.185.220:6719/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346720/","geenensp"
+"346720","2020-04-20 10:51:03","http://85.97.185.220:6719/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346720/","geenensp"
 "346719","2020-04-20 10:21:11","http://biendaoco.com/wp-content/plugins/revslider/admin/JJza1N93VepAw5g.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/346719/","abuse_ch"
 "346718","2020-04-20 10:13:14","https://coronavirusmaps.pro/map.jar","offline","malware_download","Adwind","https://urlhaus.abuse.ch/url/346718/","JAMESWT_MHT"
 "346717","2020-04-20 10:13:05","https://coronavirusmaps.pro/data/mapdata.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/346717/","JAMESWT_MHT"
@@ -7388,7 +7908,7 @@
 "346347","2020-04-19 19:04:03","https://pastebin.com/raw/RMd42XuA","offline","malware_download","None","https://urlhaus.abuse.ch/url/346347/","JayTHL"
 "346346","2020-04-19 18:06:19","http://222.138.96.206:57614/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346346/","Gandylyan1"
 "346345","2020-04-19 18:06:14","http://117.87.130.234:40275/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346345/","Gandylyan1"
-"346344","2020-04-19 18:05:40","http://182.117.101.153:55480/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346344/","Gandylyan1"
+"346344","2020-04-19 18:05:40","http://182.117.101.153:55480/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346344/","Gandylyan1"
 "346343","2020-04-19 18:05:28","http://176.113.161.67:54691/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346343/","Gandylyan1"
 "346342","2020-04-19 18:05:25","http://111.43.223.59:32768/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346342/","Gandylyan1"
 "346341","2020-04-19 18:05:21","http://116.114.95.236:37226/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346341/","Gandylyan1"
@@ -7500,7 +8020,7 @@
 "346235","2020-04-19 12:04:17","http://42.239.243.131:33330/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346235/","Gandylyan1"
 "346234","2020-04-19 12:04:12","http://42.237.6.109:54676/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346234/","Gandylyan1"
 "346233","2020-04-19 12:04:06","http://42.231.66.21:57023/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346233/","Gandylyan1"
-"346232","2020-04-19 10:40:08","http://14.50.235.236:38484/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346232/","geenensp"
+"346232","2020-04-19 10:40:08","http://14.50.235.236:38484/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346232/","geenensp"
 "346231","2020-04-19 10:04:11","http://177.96.38.218:19112/.i","offline","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346231/","geenensp"
 "346230","2020-04-19 10:04:06","http://203.204.217.4:53033/.i","online","malware_download","32-bit,arm,elf","https://urlhaus.abuse.ch/url/346230/","geenensp"
 "346229","2020-04-19 09:47:03","http://51.222.0.40/bins//arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/346229/","Gandylyan1"
@@ -7518,7 +8038,7 @@
 "346217","2020-04-19 09:05:59","http://111.43.223.147:42262/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346217/","Gandylyan1"
 "346216","2020-04-19 09:05:55","http://116.177.177.249:41306/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346216/","Gandylyan1"
 "346215","2020-04-19 09:05:51","http://117.95.192.38:39296/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346215/","Gandylyan1"
-"346214","2020-04-19 09:05:45","http://49.70.237.153:45327/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346214/","Gandylyan1"
+"346214","2020-04-19 09:05:45","http://49.70.237.153:45327/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346214/","Gandylyan1"
 "346213","2020-04-19 09:05:40","http://116.114.95.218:60543/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346213/","Gandylyan1"
 "346212","2020-04-19 09:04:45","http://77.43.237.3:44840/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346212/","Gandylyan1"
 "346211","2020-04-19 09:04:14","http://115.53.21.114:59581/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/346211/","Gandylyan1"
@@ -11249,19 +11769,19 @@
 "342486","2020-04-17 16:14:10","https://pastebin.com/raw/GEYa5yUF","offline","malware_download","None","https://urlhaus.abuse.ch/url/342486/","JayTHL"
 "342485","2020-04-17 16:14:07","https://pastebin.com/raw/UuWMYUT7","offline","malware_download","None","https://urlhaus.abuse.ch/url/342485/","JayTHL"
 "342484","2020-04-17 16:14:04","https://pastebin.com/raw/tngDpGXW","offline","malware_download","None","https://urlhaus.abuse.ch/url/342484/","JayTHL"
-"342483","2020-04-17 16:10:06","https://fairyqueenstore.com/differ/912544/912544.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342483/","malware_traffic"
+"342483","2020-04-17 16:10:06","https://fairyqueenstore.com/differ/912544/912544.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342483/","malware_traffic"
 "342482","2020-04-17 16:09:55","http://192.3.251.44/arm7","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/342482/","zbetcheckin"
 "342481","2020-04-17 16:09:53","http://192.3.251.44/x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/342481/","zbetcheckin"
 "342480","2020-04-17 16:09:50","https://digivisor.website/differ/628212971/628212971.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342480/","malware_traffic"
 "342479","2020-04-17 16:09:40","https://sayiteducation.com/differ/99978717/99978717.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342479/","malware_traffic"
 "342478","2020-04-17 16:09:37","https://quoteslevel.com/differ/73053607/73053607.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342478/","malware_traffic"
-"342477","2020-04-17 16:09:32","https://besthack.co/differ/6053744/6053744.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342477/","malware_traffic"
+"342477","2020-04-17 16:09:32","https://besthack.co/differ/6053744/6053744.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342477/","malware_traffic"
 "342476","2020-04-17 16:09:27","https://globaloilsupply.co/differ/46570680.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342476/","malware_traffic"
 "342475","2020-04-17 16:09:22","https://quoteslevel.com/differ/773147837.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342475/","malware_traffic"
 "342474","2020-04-17 16:09:17","https://film4k.ga/differ/046130044/046130044.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342474/","malware_traffic"
 "342473","2020-04-17 16:08:45","https://clario.biz/differ/24093/24093.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342473/","malware_traffic"
 "342472","2020-04-17 16:08:41","https://heartofvegasfans.club/differ/94809652/94809652.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342472/","malware_traffic"
-"342471","2020-04-17 16:08:36","https://crudenergyllc.com/differ/453657.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342471/","malware_traffic"
+"342471","2020-04-17 16:08:36","https://crudenergyllc.com/differ/453657.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342471/","malware_traffic"
 "342470","2020-04-17 16:08:31","http://192.3.251.44/arm6","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/342470/","zbetcheckin"
 "342469","2020-04-17 16:08:29","http://192.3.251.44/mips","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/342469/","zbetcheckin"
 "342468","2020-04-17 16:08:26","http://192.3.251.44/arm4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/342468/","zbetcheckin"
@@ -11277,10 +11797,10 @@
 "342458","2020-04-17 16:07:41","https://bybysunday.com/differ/7076923.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342458/","malware_traffic"
 "342457","2020-04-17 16:07:35","https://digivisor.website/differ/63176025.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342457/","malware_traffic"
 "342456","2020-04-17 16:07:31","https://globaloilsupply.co/differ/470876/470876.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342456/","malware_traffic"
-"342455","2020-04-17 16:07:26","https://besthack.co/differ/557687/557687.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342455/","malware_traffic"
+"342455","2020-04-17 16:07:26","https://besthack.co/differ/557687/557687.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342455/","malware_traffic"
 "342454","2020-04-17 16:07:20","https://thepyramids.nl/differ/61456.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342454/","malware_traffic"
 "342453","2020-04-17 16:07:15","https://onyourmarkmindsetgo.com/differ/1313258/1313258.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342453/","malware_traffic"
-"342452","2020-04-17 16:07:09","https://420hempizone.co/differ/18188/18188.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342452/","malware_traffic"
+"342452","2020-04-17 16:07:09","https://420hempizone.co/differ/18188/18188.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342452/","malware_traffic"
 "342451","2020-04-17 16:07:04","https://clario.biz/differ/47796/47796.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342451/","malware_traffic"
 "342450","2020-04-17 16:06:19","https://wahat-apps.com/differ/2934245.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342450/","malware_traffic"
 "342449","2020-04-17 16:06:13","https://suhailikasmat.com/differ/57026627/57026627.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342449/","malware_traffic"
@@ -11289,10 +11809,10 @@
 "342446","2020-04-17 16:05:57","https://thepyramids.nl/differ/60636/60636.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342446/","malware_traffic"
 "342445","2020-04-17 16:05:52","https://sayiteducation.com/differ/354318294/354318294.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342445/","malware_traffic"
 "342444","2020-04-17 16:05:48","https://halotelco.vip/differ/70955.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342444/","malware_traffic"
-"342443","2020-04-17 16:05:33","https://compesat.com/differ/106172/106172.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342443/","malware_traffic"
+"342443","2020-04-17 16:05:33","https://compesat.com/differ/106172/106172.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342443/","malware_traffic"
 "342442","2020-04-17 16:05:19","https://fine.black/differ/49363504/49363504.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342442/","malware_traffic"
 "342441","2020-04-17 16:05:12","https://musearttherapy.com/differ/645441.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342441/","malware_traffic"
-"342440","2020-04-17 16:05:06","https://420hempizone.co/differ/82386.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342440/","malware_traffic"
+"342440","2020-04-17 16:05:06","https://420hempizone.co/differ/82386.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342440/","malware_traffic"
 "342439","2020-04-17 16:04:49","http://heartofvegasfans.club/differ/4001095/4001095.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342439/","malware_traffic"
 "342438","2020-04-17 16:04:44","https://digivisor.website/differ/16692/16692.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342438/","malware_traffic"
 "342437","2020-04-17 16:04:39","https://iphonewin.website/differ/665206.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342437/","malware_traffic"
@@ -11303,7 +11823,7 @@
 "342432","2020-04-17 16:04:11","https://kukumbara.com/differ/5570258/5570258.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342432/","malware_traffic"
 "342431","2020-04-17 16:04:06","https://crudenergyllc.com/differ/925333/925333.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342431/","malware_traffic"
 "342430","2020-04-17 16:03:08","http://hamda.alimarket24.website/differ/078178/078178.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342430/","malware_traffic"
-"342429","2020-04-17 16:03:01","https://onyourmarkmindsetgo.com/differ/84214241.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342429/","malware_traffic"
+"342429","2020-04-17 16:03:01","https://onyourmarkmindsetgo.com/differ/84214241.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342429/","malware_traffic"
 "342428","2020-04-17 16:02:55","https://sayiteducation.com/differ/666217.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342428/","malware_traffic"
 "342427","2020-04-17 16:02:49","https://sayiteducation.com/differ/6924025.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342427/","malware_traffic"
 "342426","2020-04-17 16:02:46","https://film4k.ga/differ/20586.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342426/","malware_traffic"
@@ -11312,14 +11832,14 @@
 "342423","2020-04-17 16:02:13","https://theneews.us/differ/888441/888441.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342423/","malware_traffic"
 "342422","2020-04-17 16:02:08","https://sweetrsnd.com/differ/30560.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342422/","malware_traffic"
 "342421","2020-04-17 16:01:50","http://sayiteducation.com/differ/23338/23338.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342421/","malware_traffic"
-"342420","2020-04-17 16:01:47","https://420hempizone.co/differ/60968.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342420/","malware_traffic"
+"342420","2020-04-17 16:01:47","https://420hempizone.co/differ/60968.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342420/","malware_traffic"
 "342419","2020-04-17 16:01:43","https://khattakdigitals.website/differ/234909863.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342419/","malware_traffic"
 "342418","2020-04-17 16:01:35","https://heartofvegasfans.club/differ/54624097.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342418/","malware_traffic"
 "342417","2020-04-17 16:01:30","https://pamelaferolaw.com/differ/250076/250076.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342417/","malware_traffic"
 "342416","2020-04-17 16:01:26","https://digivisor.website/differ/0140012/0140012.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342416/","malware_traffic"
 "342415","2020-04-17 16:01:20","https://film4k.ga/differ/018547.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342415/","malware_traffic"
 "342414","2020-04-17 16:00:48","http://heartofvegasfans.club/differ/4690490/4690490.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342414/","malware_traffic"
-"342413","2020-04-17 16:00:12","https://glitchexotika.com/differ/93094/93094.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342413/","malware_traffic"
+"342413","2020-04-17 16:00:12","https://glitchexotika.com/differ/93094/93094.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342413/","malware_traffic"
 "342412","2020-04-17 15:59:37","http://hamda.alimarket24.website/differ/03377/03377.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342412/","malware_traffic"
 "342411","2020-04-17 15:52:03","http://194.180.224.113/nr/mips","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/342411/","zbetcheckin"
 "342410","2020-04-17 15:15:04","http://andreabo1.myftp.biz/z1r7_7_8_0_2_4dmWmx/z1r7_7_8_0_2_4dmW/z1r7_7_8_0_2_4dmWkk/z1r7_7_8_0_2_4dmW","online","malware_download","powershell","https://urlhaus.abuse.ch/url/342410/","cocaman"
@@ -11348,11 +11868,11 @@
 "342387","2020-04-17 14:54:18","https://sn-technologies.com/feature/2362120/2362120.zip","offline","malware_download","Qakbot,qbot,spx98,zip","https://urlhaus.abuse.ch/url/342387/","malware_traffic"
 "342386","2020-04-17 14:54:09","https://greenlandlion.com/extend/3601775.zip","offline","malware_download","Qakbot,qbot,spx98,zip","https://urlhaus.abuse.ch/url/342386/","malware_traffic"
 "342385","2020-04-17 14:54:03","http://spirtualcenteruk.com/feature/192776271.zip","offline","malware_download","Qakbot,qbot,spx98,zip","https://urlhaus.abuse.ch/url/342385/","malware_traffic"
-"342384","2020-04-17 14:53:41","https://thornadops.com/differ/0528300/0528300.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342384/","malware_traffic"
-"342383","2020-04-17 14:53:35","https://thornadops.com/differ/473793/473793.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342383/","malware_traffic"
+"342384","2020-04-17 14:53:41","https://thornadops.com/differ/0528300/0528300.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342384/","malware_traffic"
+"342383","2020-04-17 14:53:35","https://thornadops.com/differ/473793/473793.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342383/","malware_traffic"
 "342382","2020-04-17 14:53:27","https://theneews.us/differ/021906/021906.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342382/","malware_traffic"
 "342381","2020-04-17 14:53:18","https://sayiteducation.com/differ/293127445.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342381/","malware_traffic"
-"342380","2020-04-17 14:53:13","https://qualitygolfbags.com/differ/45335.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342380/","malware_traffic"
+"342380","2020-04-17 14:53:13","https://qualitygolfbags.com/differ/45335.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342380/","malware_traffic"
 "342379","2020-04-17 14:53:02","https://musearttherapy.com/differ/327336/327336.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342379/","malware_traffic"
 "342378","2020-04-17 14:52:50","https://glitchexotika.com/differ/947908.zip","offline","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342378/","malware_traffic"
 "342377","2020-04-17 14:52:43","https://fairyqueenstore.com/differ/2164939.zip","online","malware_download","Qakbot,qbot,spx99,zip","https://urlhaus.abuse.ch/url/342377/","malware_traffic"
@@ -11377,7 +11897,7 @@
 "342358","2020-04-17 14:24:48","http://bigssearch.com/differ/999999.png","online","malware_download","exe,Qakbot,Quakbot,spx99","https://urlhaus.abuse.ch/url/342358/","lazyactivist192"
 "342357","2020-04-17 14:24:10","http://testing.web-x.io/differ/999999.png","offline","malware_download","exe,Qakbot,Quakbot,spx99","https://urlhaus.abuse.ch/url/342357/","lazyactivist192"
 "342356","2020-04-17 14:23:28","http://newsfee.info/differ/999999.png","offline","malware_download","exe,Qakbot,Quakbot,spx99","https://urlhaus.abuse.ch/url/342356/","lazyactivist192"
-"342355","2020-04-17 14:22:49","http://greindustry.com/differ/999999.png","online","malware_download","exe,Qakbot,Quakbot,spx99","https://urlhaus.abuse.ch/url/342355/","lazyactivist192"
+"342355","2020-04-17 14:22:49","http://greindustry.com/differ/999999.png","offline","malware_download","exe,Qakbot,Quakbot,spx99","https://urlhaus.abuse.ch/url/342355/","lazyactivist192"
 "342354","2020-04-17 14:22:03","http://104.168.44.166/bins.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/342354/","geenensp"
 "342353","2020-04-17 14:09:03","http://wmwifbajxxbcxmucxmlc.com/files/april17.dll","offline","malware_download","zloader","https://urlhaus.abuse.ch/url/342353/","anonymous"
 "342352","2020-04-17 14:05:27","http://192.236.147.189/bins/blxntz.x86","online","malware_download","None","https://urlhaus.abuse.ch/url/342352/","JayTHL"
@@ -11592,7 +12112,7 @@
 "342143","2020-04-17 12:05:43","http://115.50.5.113:57076/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342143/","Gandylyan1"
 "342142","2020-04-17 12:05:02","http://123.4.63.69:57223/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342142/","Gandylyan1"
 "342141","2020-04-17 12:04:55","http://222.139.94.90:34302/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342141/","Gandylyan1"
-"342140","2020-04-17 12:04:48","http://114.235.202.162:33344/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342140/","Gandylyan1"
+"342140","2020-04-17 12:04:48","http://114.235.202.162:33344/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342140/","Gandylyan1"
 "342139","2020-04-17 12:04:40","http://117.93.176.207:59330/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342139/","Gandylyan1"
 "342138","2020-04-17 12:04:28","http://45.161.254.146:55516/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342138/","Gandylyan1"
 "342137","2020-04-17 12:04:24","http://113.133.224.68:53499/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/342137/","Gandylyan1"
@@ -11605,7 +12125,7 @@
 "342130","2020-04-17 11:00:07","http://89.32.41.65/mipsel","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/342130/","zbetcheckin"
 "342129","2020-04-17 11:00:04","http://89.32.41.65/armv6l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/342129/","zbetcheckin"
 "342128","2020-04-17 10:58:23","http://192.154.228.187/8UsA.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/342128/","geenensp"
-"342127","2020-04-17 10:58:20","http://68.134.186.196:52181/.i","offline","malware_download","None","https://urlhaus.abuse.ch/url/342127/","geenensp"
+"342127","2020-04-17 10:58:20","http://68.134.186.196:52181/.i","online","malware_download","None","https://urlhaus.abuse.ch/url/342127/","geenensp"
 "342126","2020-04-17 10:58:16","https://www.seashotbin.com/Lord/Glx_encrypted_3277CA0.bin","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/342126/","lovemalware"
 "342125","2020-04-17 10:58:13","http://www.lojtech.com/work/newbackomo_encrypted_BC25C9F.bin","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/342125/","lovemalware"
 "342124","2020-04-17 10:58:08","https://drive.google.com/uc?export=download&id=1XR3AAUev3NxfKqHcvyCsQBwjOE0_ZdHj","offline","malware_download","exe,GuLoader","https://urlhaus.abuse.ch/url/342124/","lovemalware"
@@ -11805,16 +12325,16 @@
 "341930","2020-04-17 02:23:15","http://45.148.10.142/a-r.m-7.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341930/","zbetcheckin"
 "341929","2020-04-17 02:23:13","http://45.148.10.142/x-8.6-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341929/","zbetcheckin"
 "341928","2020-04-17 02:23:11","http://208.113.133.130/vvglma","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341928/","zbetcheckin"
-"341927","2020-04-17 02:23:09","http://192.210.140.199/cron","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341927/","zbetcheckin"
-"341926","2020-04-17 02:23:06","http://192.210.140.199/tftp","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341926/","zbetcheckin"
+"341927","2020-04-17 02:23:09","http://192.210.140.199/cron","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341927/","zbetcheckin"
+"341926","2020-04-17 02:23:06","http://192.210.140.199/tftp","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341926/","zbetcheckin"
 "341925","2020-04-17 02:23:02","http://45.148.10.142/a-r.m-5.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341925/","zbetcheckin"
-"341924","2020-04-17 02:19:34","http://192.210.140.199/sh","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341924/","zbetcheckin"
+"341924","2020-04-17 02:19:34","http://192.210.140.199/sh","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341924/","zbetcheckin"
 "341923","2020-04-17 02:19:32","http://45.148.10.142/x-3.2-.SNOOPY","offline","malware_download","elf","https://urlhaus.abuse.ch/url/341923/","zbetcheckin"
 "341922","2020-04-17 02:19:30","http://208.113.133.130/cemtop","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341922/","zbetcheckin"
 "341921","2020-04-17 02:19:27","http://45.148.10.142/m-6.8-k.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341921/","zbetcheckin"
 "341920","2020-04-17 02:19:25","http://45.148.10.142/i-5.8-6.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341920/","zbetcheckin"
-"341919","2020-04-17 02:19:23","http://192.210.140.199/ntpd","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341919/","zbetcheckin"
-"341918","2020-04-17 02:19:20","http://192.210.140.199/[cpu]","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341918/","zbetcheckin"
+"341919","2020-04-17 02:19:23","http://192.210.140.199/ntpd","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341919/","zbetcheckin"
+"341918","2020-04-17 02:19:20","http://192.210.140.199/[cpu]","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341918/","zbetcheckin"
 "341917","2020-04-17 02:19:18","http://208.113.133.130/fwdfvf","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341917/","zbetcheckin"
 "341916","2020-04-17 02:19:14","http://208.113.133.130/earyzq","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341916/","zbetcheckin"
 "341915","2020-04-17 02:19:12","http://45.148.10.142/s-h.4-.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341915/","zbetcheckin"
@@ -11822,18 +12342,18 @@
 "341913","2020-04-17 02:19:07","http://45.148.10.142/a-r.m-4.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341913/","zbetcheckin"
 "341912","2020-04-17 02:19:05","http://45.148.10.142/m-p.s-l.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341912/","zbetcheckin"
 "341911","2020-04-17 02:19:03","http://208.113.133.130/lnkfmx","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341911/","zbetcheckin"
-"341910","2020-04-17 02:15:09","http://192.210.140.199/openssh","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341910/","zbetcheckin"
-"341909","2020-04-17 02:15:06","http://192.210.140.199/wget","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341909/","zbetcheckin"
+"341910","2020-04-17 02:15:09","http://192.210.140.199/openssh","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341910/","zbetcheckin"
+"341909","2020-04-17 02:15:06","http://192.210.140.199/wget","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341909/","zbetcheckin"
 "341908","2020-04-17 02:15:04","http://45.148.10.142/a-r.m-6.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341908/","zbetcheckin"
 "341907","2020-04-17 02:14:33","http://208.113.133.130/atxhua","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341907/","zbetcheckin"
 "341906","2020-04-17 02:14:30","http://208.113.133.130/razdzn","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341906/","zbetcheckin"
-"341905","2020-04-17 02:14:27","http://192.210.140.199/sshd","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341905/","zbetcheckin"
-"341904","2020-04-17 02:14:25","http://192.210.140.199/ftp","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341904/","zbetcheckin"
+"341905","2020-04-17 02:14:27","http://192.210.140.199/sshd","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341905/","zbetcheckin"
+"341904","2020-04-17 02:14:25","http://192.210.140.199/ftp","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341904/","zbetcheckin"
 "341903","2020-04-17 02:14:22","http://208.113.133.130/vtyhat","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341903/","zbetcheckin"
-"341902","2020-04-17 02:14:19","http://192.210.140.199/apache2","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341902/","zbetcheckin"
-"341901","2020-04-17 02:14:16","http://192.210.140.199/pftp","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341901/","zbetcheckin"
+"341902","2020-04-17 02:14:19","http://192.210.140.199/apache2","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341902/","zbetcheckin"
+"341901","2020-04-17 02:14:16","http://192.210.140.199/pftp","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341901/","zbetcheckin"
 "341900","2020-04-17 02:14:13","http://208.113.133.130/nvitpj","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341900/","zbetcheckin"
-"341899","2020-04-17 02:14:10","http://192.210.140.199/bash","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341899/","zbetcheckin"
+"341899","2020-04-17 02:14:10","http://192.210.140.199/bash","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341899/","zbetcheckin"
 "341898","2020-04-17 02:14:07","http://45.148.10.142/m-i.p-s.SNOOPY","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341898/","zbetcheckin"
 "341897","2020-04-17 02:14:05","https://pastebin.com/raw/RnFSdTDZ","offline","malware_download","None","https://urlhaus.abuse.ch/url/341897/","JayTHL"
 "341896","2020-04-17 02:13:36","https://pastebin.com/raw/dzf2kjcQ","offline","malware_download","None","https://urlhaus.abuse.ch/url/341896/","JayTHL"
@@ -11882,7 +12402,7 @@
 "341853","2020-04-17 02:03:25","http://37.49.230.103/snype.arm5","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341853/","zbetcheckin"
 "341852","2020-04-17 02:03:23","http://161.35.53.44/SnOoPy.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/341852/","zbetcheckin"
 "341851","2020-04-17 02:03:20","http://37.49.230.103/snype.ppc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341851/","zbetcheckin"
-"341850","2020-04-17 02:03:18","http://192.210.140.199/bins.sh","online","malware_download","shellscript","https://urlhaus.abuse.ch/url/341850/","zbetcheckin"
+"341850","2020-04-17 02:03:18","http://192.210.140.199/bins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/341850/","zbetcheckin"
 "341849","2020-04-17 02:03:14","http://208.113.133.130/bins.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/341849/","zbetcheckin"
 "341848","2020-04-17 02:03:11","http://37.49.230.103/snype.mpsl","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341848/","zbetcheckin"
 "341847","2020-04-17 02:03:09","http://45.95.168.200/snype.x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/341847/","zbetcheckin"
@@ -12128,7 +12648,7 @@
 "341607","2020-04-16 17:28:27","http://archive.wpsu.org/feature/291604/291604.zip","offline","malware_download","Qakbot,qbot,spx98,zip","https://urlhaus.abuse.ch/url/341607/","malware_traffic"
 "341606","2020-04-16 17:28:25","http://landingpage.openlm.com/feature/734303378.zip","offline","malware_download","Qakbot,qbot,spx98,zip","https://urlhaus.abuse.ch/url/341606/","malware_traffic"
 "341605","2020-04-16 17:28:22","http://careon.io/feature/993546.zip","offline","malware_download","Qakbot,qbot,spx98,zip","https://urlhaus.abuse.ch/url/341605/","malware_traffic"
-"341604","2020-04-16 17:28:15","https://sherazsaleem.softvion.com/feature/830263/830263.zip","offline","malware_download","Qakbot,qbot,spx98,zip","https://urlhaus.abuse.ch/url/341604/","malware_traffic"
+"341604","2020-04-16 17:28:15","https://sherazsaleem.softvion.com/feature/830263/830263.zip","online","malware_download","Qakbot,qbot,spx98,zip","https://urlhaus.abuse.ch/url/341604/","malware_traffic"
 "341603","2020-04-16 17:28:09","http://admin.solissol.com/feature/154160.zip","offline","malware_download","Qakbot,qbot,spx98,zip","https://urlhaus.abuse.ch/url/341603/","malware_traffic"
 "341602","2020-04-16 17:28:03","http://nipploncombineblades.com/feature/569196/569196.zip","offline","malware_download","Qakbot,qbot,spx98,zip","https://urlhaus.abuse.ch/url/341602/","malware_traffic"
 "341601","2020-04-16 17:27:58","http://hundespielzeug24.com/feature/003957/003957.zip","offline","malware_download","Qakbot,qbot,spx98,zip","https://urlhaus.abuse.ch/url/341601/","malware_traffic"
@@ -12236,13 +12756,13 @@
 "341499","2020-04-16 15:08:05","http://anamikaindanegas.in/feature/777777.png","offline","malware_download","exe,Qakbot,spx98","https://urlhaus.abuse.ch/url/341499/","lazyactivist192"
 "341498","2020-04-16 15:07:58","http://demo.caglificioclerici.com/feature/777777.png","offline","malware_download","exe,Qakbot,spx98","https://urlhaus.abuse.ch/url/341498/","lazyactivist192"
 "341497","2020-04-16 15:07:53","http://automatischer-staubsauger.com/feature/777777.png","offline","malware_download","exe,Qakbot,spx98","https://urlhaus.abuse.ch/url/341497/","lazyactivist192"
-"341496","2020-04-16 15:07:46","http://surecake.com/wp-content/themes/calliope/beads/803050873/803050873.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341496/","malware_traffic"
+"341496","2020-04-16 15:07:46","http://surecake.com/wp-content/themes/calliope/beads/803050873/803050873.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341496/","malware_traffic"
 "341495","2020-04-16 15:07:42","https://supera.com.br/wp-content/themes/calliope/beads/4339212.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341495/","malware_traffic"
 "341494","2020-04-16 15:07:40","https://supera.com.br/wp-content/themes/calliope/beads/2321302/2321302.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341494/","malware_traffic"
 "341493","2020-04-16 15:07:38","https://supera.com.br/wp-content/themes/calliope/beads/1952334.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341493/","malware_traffic"
-"341492","2020-04-16 15:07:35","https://stationaryhome.com/wp-content/themes/calliope/beads/86397.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341492/","malware_traffic"
+"341492","2020-04-16 15:07:35","https://stationaryhome.com/wp-content/themes/calliope/beads/86397.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341492/","malware_traffic"
 "341491","2020-04-16 15:07:27","https://stationaryhome.com/wp-content/themes/calliope/beads/8308538.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341491/","malware_traffic"
-"341490","2020-04-16 15:07:17","https://stationaryhome.com/wp-content/themes/calliope/beads/20161415/20161415.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341490/","malware_traffic"
+"341490","2020-04-16 15:07:17","https://stationaryhome.com/wp-content/themes/calliope/beads/20161415/20161415.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341490/","malware_traffic"
 "341489","2020-04-16 15:06:47","https://stationaryhome.com/wp-content/themes/calliope/beads/12698.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341489/","malware_traffic"
 "341488","2020-04-16 15:06:32","http://sportwin.com.ua/wp-content/themes/calliope/beads/82612240/82612240.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341488/","malware_traffic"
 "341487","2020-04-16 15:06:28","http://sportwin.com.ua/wp-content/themes/calliope/beads/534397705/534397705.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341487/","malware_traffic"
@@ -12286,7 +12806,7 @@
 "341449","2020-04-16 14:50:16","http://blog.iwebnext.com/wp-content/themes/calliope/beads/543816348.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341449/","malware_traffic"
 "341448","2020-04-16 14:49:41","http://blog.iwebnext.com/wp-content/themes/calliope/beads/27917092/27917092.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341448/","malware_traffic"
 "341447","2020-04-16 14:49:07","http://blog.iwebnext.com/wp-content/themes/calliope/beads/012435.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341447/","malware_traffic"
-"341446","2020-04-16 14:48:32","https://asadairtravel.com/wp-content/themes/calliope/beads/268431328.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341446/","malware_traffic"
+"341446","2020-04-16 14:48:32","https://asadairtravel.com/wp-content/themes/calliope/beads/268431328.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341446/","malware_traffic"
 "341445","2020-04-16 14:48:24","https://asadairtravel.com/wp-content/themes/calliope/beads/063102/063102.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341445/","malware_traffic"
 "341444","2020-04-16 14:48:16","http://aryon.ihu.edu.tr/wp-content/themes/calliope/beads/63425667.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341444/","malware_traffic"
 "341443","2020-04-16 14:48:14","http://aryon.ihu.edu.tr/wp-content/themes/calliope/beads/174806.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341443/","malware_traffic"
@@ -12361,11 +12881,11 @@
 "341374","2020-04-16 11:51:05","https://u.teknik.io/JQixh.txt","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/341374/","ps66uk"
 "341373","2020-04-16 11:40:03","http://45.95.168.207/awiotiwhiogoihahogahoi//gucci.arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/341373/","Gandylyan1"
 "341372","2020-04-16 11:38:03","http://161.35.102.35/bins/Hilix.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/341372/","geenensp"
-"341371","2020-04-16 11:36:15","http://sylvaclouds.eu/frankjoe/frankjoe.exe","online","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/341371/","zbetcheckin"
+"341371","2020-04-16 11:36:15","http://sylvaclouds.eu/frankjoe/frankjoe.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/341371/","zbetcheckin"
 "341370","2020-04-16 11:23:06","http://23.95.89.71/bins//mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/341370/","Gandylyan1"
 "341369","2020-04-16 11:23:03","http://23.95.89.71/bins/x86_64","offline","malware_download","elf","https://urlhaus.abuse.ch/url/341369/","Gandylyan1"
 "341368","2020-04-16 11:01:06","https://drive.google.com/uc?export=download&id=1JHfctnrLQ92Vm8xLN423C5fUzBR5IRsC","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/341368/","abuse_ch"
-"341367","2020-04-16 10:55:37","http://sylvaclouds.eu/nwama/nwamaz.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/341367/","ps66uk"
+"341367","2020-04-16 10:55:37","http://sylvaclouds.eu/nwama/nwamaz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/341367/","ps66uk"
 "341366","2020-04-16 10:46:04","http://161.35.106.34/bins/Hilix.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/341366/","geenensp"
 "341365","2020-04-16 09:57:19","http://195.69.187.6/arm665","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/341365/","zbetcheckin"
 "341364","2020-04-16 09:57:17","http://220.133.19.129:24552/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/341364/","zbetcheckin"
@@ -12474,7 +12994,7 @@
 "341261","2020-04-16 06:22:26","http://45.61.136.130:1691/lbot.arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/341261/","hypoweb"
 "341260","2020-04-16 06:21:54","http://45.61.136.130:1691/lbot.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/341260/","hypoweb"
 "341259","2020-04-16 06:21:52","http://121.153.242.234:29784/.i","offline","malware_download","None","https://urlhaus.abuse.ch/url/341259/","geenensp"
-"341258","2020-04-16 06:21:47","http://111.185.231.198:41097/.i","offline","malware_download","None","https://urlhaus.abuse.ch/url/341258/","geenensp"
+"341258","2020-04-16 06:21:47","http://111.185.231.198:41097/.i","online","malware_download","None","https://urlhaus.abuse.ch/url/341258/","geenensp"
 "341257","2020-04-16 06:21:41","http://87.110.20.101:8199/.i","offline","malware_download","None","https://urlhaus.abuse.ch/url/341257/","geenensp"
 "341256","2020-04-16 06:21:37","http://170.130.55.59/EkSgbins.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/341256/","geenensp"
 "341255","2020-04-16 06:21:05","http://205.185.119.78/xb.sh","offline","malware_download","None","https://urlhaus.abuse.ch/url/341255/","geenensp"
@@ -12733,7 +13253,7 @@
 "341002","2020-04-15 23:26:45","https://www.supera.com.br/wp-content/themes/calliope/beads/33185421.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341002/","malware_traffic"
 "341001","2020-04-15 23:26:10","https://supera.com.br/wp-content/themes/calliope/beads/33185421.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341001/","malware_traffic"
 "341000","2020-04-15 23:25:36","https://businessadministration.win/wp-content/themes/calliope/beads/931464/931464.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/341000/","malware_traffic"
-"340999","2020-04-15 23:03:14","http://shaoxiaofei.cn/beads/95150115/95150115.zip","online","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/340999/","malware_traffic"
+"340999","2020-04-15 23:03:14","http://shaoxiaofei.cn/beads/95150115/95150115.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/340999/","malware_traffic"
 "340998","2020-04-15 22:53:46","http://pancoupe.com/wp-content/themes/calliope/beads/333490178/333490178.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/340998/","malware_traffic"
 "340997","2020-04-15 22:53:11","https://yeknam.com/blog/wp-content/themes/calliope/beads/4384750/4384750.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/340997/","malware_traffic"
 "340996","2020-04-15 22:52:31","https://blog.macwap.com/wp-content/themes/calliope/beads/739879.zip","offline","malware_download","Qakbot,qbot,spx97,zip","https://urlhaus.abuse.ch/url/340996/","malware_traffic"
@@ -13312,7 +13832,7 @@
 "340423","2020-04-14 20:26:39","https://restaurantemexicano.es/string/91554.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340423/","malware_traffic"
 "340422","2020-04-14 20:26:37","https://restaurantemexicano.es/string/0830591/0830591.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340422/","malware_traffic"
 "340421","2020-04-14 20:26:32","http://quehagoencartagena.com/string/804903/804903.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340421/","malware_traffic"
-"340420","2020-04-14 20:26:28","http://quehagoencartagena.com/string/075195460/075195460.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340420/","malware_traffic"
+"340420","2020-04-14 20:26:28","http://quehagoencartagena.com/string/075195460/075195460.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340420/","malware_traffic"
 "340419","2020-04-14 20:26:22","http://peternoresson.se/string/8973124.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340419/","malware_traffic"
 "340418","2020-04-14 20:26:11","http://peternoresson.se/string/86444.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340418/","malware_traffic"
 "340417","2020-04-14 20:26:08","http://peternoresson.se/string/6582750.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340417/","malware_traffic"
@@ -13335,7 +13855,7 @@
 "340400","2020-04-14 20:23:50","https://mochandmade.us/string/443327271/443327271.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340400/","malware_traffic"
 "340399","2020-04-14 20:23:42","https://microvpn.info/string/530345404/530345404.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340399/","malware_traffic"
 "340398","2020-04-14 20:23:38","http://melias.se/string/64928487.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340398/","malware_traffic"
-"340397","2020-04-14 20:23:30","https://marocaji.com/string/92174460/92174460.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340397/","malware_traffic"
+"340397","2020-04-14 20:23:30","https://marocaji.com/string/92174460/92174460.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340397/","malware_traffic"
 "340396","2020-04-14 20:23:22","https://marketevip.com/string/9651583/9651583.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340396/","malware_traffic"
 "340395","2020-04-14 20:23:15","https://langsirterkini.net/string/134437527/134437527.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340395/","malware_traffic"
 "340394","2020-04-14 20:22:35","http://maluna.com.br/string/9323831.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340394/","malware_traffic"
@@ -13346,13 +13866,13 @@
 "340389","2020-04-14 20:22:06","http://ipbg.org.br/string/9016172.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340389/","malware_traffic"
 "340388","2020-04-14 20:21:51","http://ipbg.org.br/string/637148407/637148407.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340388/","malware_traffic"
 "340387","2020-04-14 20:21:40","https://hotel-sangiorgio.com/string/974483/974483.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340387/","malware_traffic"
-"340386","2020-04-14 20:21:35","https://hellomessager.com/string/9336248.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340386/","malware_traffic"
+"340386","2020-04-14 20:21:35","https://hellomessager.com/string/9336248.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340386/","malware_traffic"
 "340385","2020-04-14 20:21:33","https://hellomessager.com/string/67893798.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340385/","malware_traffic"
 "340384","2020-04-14 20:21:30","https://hellomessager.com/string/487434/487434.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340384/","malware_traffic"
 "340383","2020-04-14 20:21:23","https://gsm-laboratory.com/string/2259983.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340383/","malware_traffic"
 "340382","2020-04-14 20:21:18","https://gsm-laboratory.com/string/05907/05907.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340382/","malware_traffic"
 "340381","2020-04-14 20:21:13","https://gsm-laboratory.com/string/009540421.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340381/","malware_traffic"
-"340380","2020-04-14 20:21:08","https://foodbooktv.com/string/937494.zip","online","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340380/","malware_traffic"
+"340380","2020-04-14 20:21:08","https://foodbooktv.com/string/937494.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340380/","malware_traffic"
 "340379","2020-04-14 20:20:47","https://giveawayshub.com/string/749131130.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340379/","malware_traffic"
 "340378","2020-04-14 20:20:42","https://giveawayshub.com/string/64342060/64342060.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340378/","malware_traffic"
 "340377","2020-04-14 20:20:37","https://drivecx.com/string/684862.zip","offline","malware_download","Qakbot,qbot,spx96,zip","https://urlhaus.abuse.ch/url/340377/","malware_traffic"
@@ -13505,7 +14025,7 @@
 "340230","2020-04-14 14:43:05","http://unik-evenements.fr/string/444444.png","offline","malware_download","exe,Qakbot,spx96","https://urlhaus.abuse.ch/url/340230/","lazyactivist192"
 "340229","2020-04-14 14:37:13","http://leukkado.be/string/444444.png","offline","malware_download","exe,Qakbot,Quakbot,spx96","https://urlhaus.abuse.ch/url/340229/","lazyactivist192"
 "340228","2020-04-14 14:37:11","http://millionsawesomeproducts.com/string/444444.png","offline","malware_download","exe,Qakbot,spx96","https://urlhaus.abuse.ch/url/340228/","lazyactivist192"
-"340227","2020-04-14 14:37:08","http://funpartyrent.com/string/444444.png","online","malware_download","exe,Qakbot,Quakbot,spx96","https://urlhaus.abuse.ch/url/340227/","lazyactivist192"
+"340227","2020-04-14 14:37:08","http://funpartyrent.com/string/444444.png","offline","malware_download","exe,Qakbot,Quakbot,spx96","https://urlhaus.abuse.ch/url/340227/","lazyactivist192"
 "340226","2020-04-14 14:37:04","http://common-factor.nl/string/444444.png","online","malware_download","exe,Qakbot,Quakbot,spx96","https://urlhaus.abuse.ch/url/340226/","lazyactivist192"
 "340224","2020-04-14 14:33:35","https://emamdouh1949.me/temp/JBPOWNH.txt","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/340224/","abuse_ch"
 "340223","2020-04-14 14:23:39","http://otanityre.in/dj/dj.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/340223/","abuse_ch"
@@ -15476,8 +15996,8 @@
 "338256","2020-04-11 06:54:35","http://194.180.224.113/telnet/arm7","online","malware_download","elf","https://urlhaus.abuse.ch/url/338256/","hypoweb"
 "338255","2020-04-11 06:54:32","http://194.180.224.113/telnet/arm6","online","malware_download","elf","https://urlhaus.abuse.ch/url/338255/","hypoweb"
 "338254","2020-04-11 06:54:29","http://194.180.224.113/telnet/arm5","online","malware_download","elf","https://urlhaus.abuse.ch/url/338254/","hypoweb"
-"338253","2020-04-11 06:54:27","http://194.180.224.113/telnet/arm","online","malware_download","elf","https://urlhaus.abuse.ch/url/338253/","hypoweb"
-"338252","2020-04-11 06:54:25","http://194.180.224.113/telnet/mpsl","online","malware_download","elf","https://urlhaus.abuse.ch/url/338252/","hypoweb"
+"338253","2020-04-11 06:54:27","http://194.180.224.113/telnet/arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/338253/","hypoweb"
+"338252","2020-04-11 06:54:25","http://194.180.224.113/telnet/mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/338252/","hypoweb"
 "338251","2020-04-11 06:54:22","http://188.212.100.2/d/xd.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/338251/","hypoweb"
 "338250","2020-04-11 06:54:19","http://188.212.100.2/d/xd.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/338250/","hypoweb"
 "338249","2020-04-11 06:54:17","http://188.212.100.2/d/xd.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/338249/","hypoweb"
@@ -15554,7 +16074,7 @@
 "338178","2020-04-11 03:03:37","http://172.36.5.27:51877/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/338178/","Gandylyan1"
 "338177","2020-04-11 03:03:05","http://162.212.113.31:36295/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/338177/","Gandylyan1"
 "338176","2020-04-11 02:56:05","http://111.42.66.48:58492/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/338176/","zbetcheckin"
-"338175","2020-04-11 02:27:08","http://80.210.28.73:3160/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/338175/","zbetcheckin"
+"338175","2020-04-11 02:27:08","http://80.210.28.73:3160/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/338175/","zbetcheckin"
 "338174","2020-04-11 02:27:05","http://93.176.185.223:17860/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/338174/","zbetcheckin"
 "338173","2020-04-11 02:09:05","http://42.239.143.245:48676/Mozi.m+-O+-","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/338173/","zbetcheckin"
 "338172","2020-04-11 00:15:10","http://167.99.189.132/armv4l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/338172/","zbetcheckin"
@@ -15694,14 +16214,14 @@
 "338038","2020-04-10 21:03:41","http://111.43.223.103:53937/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/338038/","Gandylyan1"
 "338037","2020-04-10 21:03:34","http://ifashiontw.com/Tapper_18US_Return.doc","offline","malware_download","None","https://urlhaus.abuse.ch/url/338037/","JayTHL"
 "338036","2020-04-10 20:53:15","http://hbcjsline.com/Tapper_18_Returns.doc","offline","malware_download","None","https://urlhaus.abuse.ch/url/338036/","JayTHL"
-"338035","2020-04-10 20:52:46","http://sylvaclouds.eu/uzmod2/uzmod2.exe","online","malware_download","Formbook","https://urlhaus.abuse.ch/url/338035/","JayTHL"
-"338034","2020-04-10 20:52:38","http://sylvaclouds.eu/uzmod1/uzmod1.exe","online","malware_download","Loki","https://urlhaus.abuse.ch/url/338034/","JayTHL"
-"338033","2020-04-10 20:52:08","http://sylvaclouds.eu/soft/softz.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/338033/","JayTHL"
-"338032","2020-04-10 20:51:57","http://sylvaclouds.eu/smartz/smartz.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/338032/","JayTHL"
-"338031","2020-04-10 20:51:42","http://sylvaclouds.eu/mazx/maxz.exe","online","malware_download","Formbook","https://urlhaus.abuse.ch/url/338031/","JayTHL"
-"338030","2020-04-10 20:51:30","http://sylvaclouds.eu/doniyke/doniyke.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/338030/","JayTHL"
-"338029","2020-04-10 20:51:24","http://sylvaclouds.eu/billisolo/billisolo.exe","online","malware_download","Loki","https://urlhaus.abuse.ch/url/338029/","JayTHL"
-"338028","2020-04-10 20:51:02","http://sylvaclouds.eu/uzmod3/uzmod3.exe","online","malware_download","Formbook","https://urlhaus.abuse.ch/url/338028/","JayTHL"
+"338035","2020-04-10 20:52:46","http://sylvaclouds.eu/uzmod2/uzmod2.exe","offline","malware_download","Formbook","https://urlhaus.abuse.ch/url/338035/","JayTHL"
+"338034","2020-04-10 20:52:38","http://sylvaclouds.eu/uzmod1/uzmod1.exe","offline","malware_download","Loki","https://urlhaus.abuse.ch/url/338034/","JayTHL"
+"338033","2020-04-10 20:52:08","http://sylvaclouds.eu/soft/softz.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/338033/","JayTHL"
+"338032","2020-04-10 20:51:57","http://sylvaclouds.eu/smartz/smartz.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/338032/","JayTHL"
+"338031","2020-04-10 20:51:42","http://sylvaclouds.eu/mazx/maxz.exe","offline","malware_download","Formbook","https://urlhaus.abuse.ch/url/338031/","JayTHL"
+"338030","2020-04-10 20:51:30","http://sylvaclouds.eu/doniyke/doniyke.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/338030/","JayTHL"
+"338029","2020-04-10 20:51:24","http://sylvaclouds.eu/billisolo/billisolo.exe","offline","malware_download","Loki","https://urlhaus.abuse.ch/url/338029/","JayTHL"
+"338028","2020-04-10 20:51:02","http://sylvaclouds.eu/uzmod3/uzmod3.exe","offline","malware_download","Formbook","https://urlhaus.abuse.ch/url/338028/","JayTHL"
 "338027","2020-04-10 19:57:05","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/338027/","zbetcheckin"
 "338026","2020-04-10 19:57:03","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/338026/","zbetcheckin"
 "338025","2020-04-10 19:54:03","http://185.172.110.241/x0ox0ox0oxDefault/z0r0.i686","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/338025/","zbetcheckin"
@@ -15762,7 +16282,7 @@
 "337970","2020-04-10 16:08:15","https://drive.google.com/uc?export=download&id=1d_az1yK26d2wPTVFbuZJ2rmvTCB5sHIl","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/337970/","abuse_ch"
 "337969","2020-04-10 16:08:10","https://drive.google.com/uc?export=download&id=1yVyFtiBmmkU-5j2dEyLK-3Vn8MrPFW4l","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/337969/","abuse_ch"
 "337968","2020-04-10 15:53:07","https://paste.ee/r/Ze59b","offline","malware_download","AgentTesla,pss1","https://urlhaus.abuse.ch/url/337968/","ps66uk"
-"337967","2020-04-10 15:07:10","http://49.81.252.24:50364/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337967/","Gandylyan1"
+"337967","2020-04-10 15:07:10","http://49.81.252.24:50364/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337967/","Gandylyan1"
 "337966","2020-04-10 15:07:01","http://45.161.254.167:52990/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337966/","Gandylyan1"
 "337965","2020-04-10 15:06:57","http://112.17.78.178:48983/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337965/","Gandylyan1"
 "337964","2020-04-10 15:06:22","http://125.44.22.246:57813/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337964/","Gandylyan1"
@@ -15925,7 +16445,7 @@
 "337807","2020-04-10 09:03:29","http://49.89.190.130:48282/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337807/","Gandylyan1"
 "337806","2020-04-10 09:03:24","http://45.161.254.200:50679/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337806/","Gandylyan1"
 "337805","2020-04-10 09:03:21","http://116.114.95.64:58462/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337805/","Gandylyan1"
-"337804","2020-04-10 09:03:18","http://108.95.162.21:48579/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337804/","Gandylyan1"
+"337804","2020-04-10 09:03:18","http://108.95.162.21:48579/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337804/","Gandylyan1"
 "337803","2020-04-10 09:03:15","http://115.61.5.50:40651/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337803/","Gandylyan1"
 "337802","2020-04-10 09:03:11","http://172.245.21.222/bins/FearLess.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/337802/","zbetcheckin"
 "337801","2020-04-10 09:03:09","http://88.218.17.223/bins/qwertyuiop.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/337801/","zbetcheckin"
@@ -16000,7 +16520,7 @@
 "337732","2020-04-10 07:34:59","http://114.237.81.168:56787/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/337732/","Gandylyan1"
 "337731","2020-04-10 07:34:53","http://194.180.224.124/bnetza.sh","offline","malware_download","shellscript","https://urlhaus.abuse.ch/url/337731/","zbetcheckin"
 "337730","2020-04-10 07:34:50","http://www.cassovia.sk/uploads/max/RederictBind/","offline","malware_download","exe","https://urlhaus.abuse.ch/url/337730/","zbetcheckin"
-"337729","2020-04-10 07:34:48","https://onedrive.live.com/download?cid=EFDF2C8D834A1928&resid=EFDF2C8D834A1928!204&authkey=AD0NbZlscbg-0sA","online","malware_download","None","https://urlhaus.abuse.ch/url/337729/","JayTHL"
+"337729","2020-04-10 07:34:48","https://onedrive.live.com/download?cid=EFDF2C8D834A1928&resid=EFDF2C8D834A1928!204&authkey=AD0NbZlscbg-0sA","offline","malware_download","None","https://urlhaus.abuse.ch/url/337729/","JayTHL"
 "337728","2020-04-10 07:34:43","https://onedrive.live.com/download?cid=E61E5F3F655316FA&resid=E61E5F3F655316FA!116&authkey=ANPwH-_g3s-Hua0","offline","malware_download","None","https://urlhaus.abuse.ch/url/337728/","JayTHL"
 "337727","2020-04-10 07:34:40","https://onedrive.live.com/download?cid=D718E3C8E3BC53C0&resid=D718E3C8E3BC53C0!192&authkey=ACD_Hx4BkA3z0Nw","online","malware_download","None","https://urlhaus.abuse.ch/url/337727/","JayTHL"
 "337726","2020-04-10 07:34:31","https://onedrive.live.com/download?cid=CF0C6D1A4C15233D&resid=CF0C6D1A4C15233D!742&authkey=AKbXJu17f8g0R2s","online","malware_download","None","https://urlhaus.abuse.ch/url/337726/","JayTHL"
@@ -16516,7 +17036,7 @@
 "337214","2020-04-09 08:18:24","https://drive.google.com/uc?export=download&id=1shfCNSwZt9O0XdnH-k1HDm9mpxu3_CzM","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/337214/","abuse_ch"
 "337213","2020-04-09 08:18:14","http://imatechwiring.com/orgnmtn_encrypted_17B8820.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/337213/","abuse_ch"
 "337212","2020-04-09 08:18:11","https://drive.google.com/uc?export=download&id=1rV4L8rxVqoFd1BOneNo_4U3XcNYThYm5","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/337212/","abuse_ch"
-"337211","2020-04-09 08:18:00","http://nofound.000webhostapp.com/wp-includes/vic_encrypted_A7007EF.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/337211/","abuse_ch"
+"337211","2020-04-09 08:18:00","http://nofound.000webhostapp.com/wp-includes/vic_encrypted_A7007EF.bin","online","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/337211/","abuse_ch"
 "337210","2020-04-09 08:17:58","https://drive.google.com/uc?export=download&id=1CmWKEpY39Nj1qrgZVVVc9cJhUOvE2YLO","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/337210/","abuse_ch"
 "337209","2020-04-09 08:17:48","https://drive.google.com/uc?export=download&id=1qNt-1wuhLpThE8kpiEp1nFP3ldD0i4QK","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/337209/","abuse_ch"
 "337208","2020-04-09 08:17:35","https://bngsmartshop.com/natureinc_encrypted_178B610.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/337208/","abuse_ch"
@@ -16772,7 +17292,7 @@
 "336958","2020-04-08 18:05:55","http://121.226.230.0:59845/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336958/","Gandylyan1"
 "336957","2020-04-08 18:05:21","http://120.69.137.49:55263/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336957/","Gandylyan1"
 "336956","2020-04-08 18:05:17","http://211.137.225.101:52811/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336956/","Gandylyan1"
-"336955","2020-04-08 18:05:13","http://49.82.255.155:49620/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336955/","Gandylyan1"
+"336955","2020-04-08 18:05:13","http://49.82.255.155:49620/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336955/","Gandylyan1"
 "336954","2020-04-08 18:05:06","http://49.89.141.202:60313/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336954/","Gandylyan1"
 "336953","2020-04-08 18:05:01","http://219.155.160.115:34027/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336953/","Gandylyan1"
 "336952","2020-04-08 18:04:56","http://115.50.224.135:53586/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/336952/","Gandylyan1"
@@ -17354,7 +17874,7 @@
 "336376","2020-04-08 03:03:08","http://66.45.248.245/mipsel","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336376/","zbetcheckin"
 "336375","2020-04-08 03:03:05","http://199.247.18.42/i686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336375/","zbetcheckin"
 "336374","2020-04-08 03:03:03","http://194.15.36.240/x0ox0ox0oxDefault/z0r0.arc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/336374/","zbetcheckin"
-"336373","2020-04-08 02:59:15","http://194.180.224.124/a.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/336373/","zbetcheckin"
+"336373","2020-04-08 02:59:15","http://194.180.224.124/a.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/336373/","zbetcheckin"
 "336372","2020-04-08 02:59:12","http://194.15.36.43/vtyhat","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336372/","zbetcheckin"
 "336371","2020-04-08 02:59:10","http://194.15.36.240/x0ox0ox0oxDefault/z0r0.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/336371/","zbetcheckin"
 "336370","2020-04-08 02:59:08","http://104.206.252.71/m-6.8-k.GHOUL","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/336370/","zbetcheckin"
@@ -17559,7 +18079,7 @@
 "336171","2020-04-07 14:19:10","https://drive.google.com/uc?export=download&id=1MBvIbdBL0wdCJBGhakF0D3JQps2cTVId","offline","malware_download","Downloader.Pony,encrypted,GuLoader","https://urlhaus.abuse.ch/url/336171/","abuse_ch"
 "336170","2020-04-07 14:16:00","http://robotrade.com.vn/wp-content/images/views/YtOA46S5guGQy9L.exe","offline","malware_download","HawkEye","https://urlhaus.abuse.ch/url/336170/","RobbieWhite98"
 "336169","2020-04-07 14:15:53","http://robotrade.com.vn/wp-content/images/views/itsRL2XbtQKrNnQ.exe","offline","malware_download","HawkEye","https://urlhaus.abuse.ch/url/336169/","RobbieWhite98"
-"336168","2020-04-07 14:15:47","http://modcloudserver.eu/arinze/arinze.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/336168/","0xFrost"
+"336168","2020-04-07 14:15:47","http://modcloudserver.eu/arinze/arinze.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/336168/","0xFrost"
 "336167","2020-04-07 14:15:43","http://modcloudserver.eu/donstan/stanz.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/336167/","RobbieWhite98"
 "336166","2020-04-07 14:15:19","http://renovanorte.com/Preview.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/336166/","anonymous"
 "336165","2020-04-07 14:15:15","http://eroblog.best/1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/336165/","RobbieWhite98"
@@ -17945,7 +18465,7 @@
 "335784","2020-04-06 15:05:33","http://118.121.170.181:41664/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335784/","Gandylyan1"
 "335783","2020-04-06 15:04:38","http://216.180.117.59:36401/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/335783/","Gandylyan1"
 "335782","2020-04-06 14:57:04","https://tehranfish.ir/bin_encrypted_6E8BBC0.bin","offline","malware_download","None","https://urlhaus.abuse.ch/url/335782/","JayTHL"
-"335781","2020-04-06 14:54:05","http://modcloudserver.eu/uzmod3/uzmod3.exe","offline","malware_download","GuLoader","https://urlhaus.abuse.ch/url/335781/","JayTHL"
+"335781","2020-04-06 14:54:05","http://modcloudserver.eu/uzmod3/uzmod3.exe","online","malware_download","GuLoader","https://urlhaus.abuse.ch/url/335781/","JayTHL"
 "335780","2020-04-06 14:36:04","https://doc-08-8k-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/37a7b7qire1dge1s9fskcahnvovmukck/1586183625000/00928859234918370098/*/1oLDfi-ddoSd-I0T530zVY5xyqA58vk8g?e=download","offline","malware_download","AgentTesla,encrypted","https://urlhaus.abuse.ch/url/335780/","ps66uk"
 "335779","2020-04-06 14:12:05","http://92.222.121.156/mac2139r209ru120934r123jhr908213jh4r09213/lmfao293reuj239jrf234rft34jt.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/335779/","Gandylyan1"
 "335778","2020-04-06 14:12:02","http://92.222.121.156/mac2139r209ru120934r123jhr908213jh4r09213/lmfao293reuj239jrf234rft34jt.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/335778/","Gandylyan1"
@@ -18099,7 +18619,7 @@
 "335630","2020-04-06 08:13:14","https://drive.google.com/uc?export=download&id=15Tz8oECj4dshFYngyOeJOXF2xI6J9g7N","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/335630/","abuse_ch"
 "335629","2020-04-06 08:12:57","https://onedrive.live.com/download?cid=505BE76830F4DC4C&resid=505BE76830F4DC4C%21395&authkey=ALWvuB_YHtOgJXw","online","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/335629/","abuse_ch"
 "335628","2020-04-06 08:12:53","https://www.sendspace.com/pro/dl/c1dk4l","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/335628/","abuse_ch"
-"335627","2020-04-06 08:12:47","https://onedrive.live.com/download?cid=C359B1A8BABC6019&resid=C359B1A8BABC6019%211251&authkey=ACt34EIZpzJUGfA","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/335627/","abuse_ch"
+"335627","2020-04-06 08:12:47","https://onedrive.live.com/download?cid=C359B1A8BABC6019&resid=C359B1A8BABC6019%211251&authkey=ACt34EIZpzJUGfA","online","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/335627/","abuse_ch"
 "335626","2020-04-06 08:12:44","https://drive.google.com/uc?export=download&id=1qdkWTrFpiqcETsIoUA77eeRyca-Uj3Tf","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/335626/","abuse_ch"
 "335625","2020-04-06 08:12:32","https://drive.google.com/uc?export=download&id=1T906TqH7Tzdy0N3JyUhkiDpefaQMvnBW","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/335625/","abuse_ch"
 "335624","2020-04-06 08:12:21","https://onedrive.live.com/download?cid=CF0C6D1A4C15233D&resid=CF0C6D1A4C15233D%21742&authkey=AKbXJu17f8g0R2s","online","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/335624/","abuse_ch"
@@ -18742,12 +19262,12 @@
 "334987","2020-04-04 21:04:04","http://45.161.254.63:54076/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/334987/","Gandylyan1"
 "334986","2020-04-04 19:08:04","http://185.208.211.67/case/4119.exe","offline","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/334986/","zbetcheckin"
 "334985","2020-04-04 18:30:05","http://185.208.211.67/case/fff.exe","offline","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/334985/","zbetcheckin"
-"334984","2020-04-04 18:15:10","http://192.154.227.193/armv6l","online","malware_download","elf","https://urlhaus.abuse.ch/url/334984/","Gandylyan1"
-"334983","2020-04-04 18:15:07","http://192.154.227.193/armv5l","online","malware_download","elf","https://urlhaus.abuse.ch/url/334983/","Gandylyan1"
-"334982","2020-04-04 18:15:04","http://192.154.227.193/armv4l","online","malware_download","elf","https://urlhaus.abuse.ch/url/334982/","Gandylyan1"
-"334981","2020-04-04 18:13:04","http://192.154.227.193/mipsel","online","malware_download","elf","https://urlhaus.abuse.ch/url/334981/","Gandylyan1"
-"334980","2020-04-04 18:12:04","http://192.154.227.193/x86","online","malware_download","elf","https://urlhaus.abuse.ch/url/334980/","Gandylyan1"
-"334979","2020-04-04 18:10:05","http://192.154.227.193/mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/334979/","Gandylyan1"
+"334984","2020-04-04 18:15:10","http://192.154.227.193/armv6l","offline","malware_download","elf","https://urlhaus.abuse.ch/url/334984/","Gandylyan1"
+"334983","2020-04-04 18:15:07","http://192.154.227.193/armv5l","offline","malware_download","elf","https://urlhaus.abuse.ch/url/334983/","Gandylyan1"
+"334982","2020-04-04 18:15:04","http://192.154.227.193/armv4l","offline","malware_download","elf","https://urlhaus.abuse.ch/url/334982/","Gandylyan1"
+"334981","2020-04-04 18:13:04","http://192.154.227.193/mipsel","offline","malware_download","elf","https://urlhaus.abuse.ch/url/334981/","Gandylyan1"
+"334980","2020-04-04 18:12:04","http://192.154.227.193/x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/334980/","Gandylyan1"
+"334979","2020-04-04 18:10:05","http://192.154.227.193/mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/334979/","Gandylyan1"
 "334978","2020-04-04 18:07:13","http://112.17.106.99:47240/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/334978/","Gandylyan1"
 "334977","2020-04-04 18:07:10","http://111.42.66.7:44088/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/334977/","Gandylyan1"
 "334976","2020-04-04 18:07:06","http://199.83.203.66:41090/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/334976/","Gandylyan1"
@@ -19668,7 +20188,7 @@
 "334061","2020-04-02 18:03:13","http://180.124.13.12:42279/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/334061/","Gandylyan1"
 "334060","2020-04-02 18:03:05","http://183.215.188.50:56562/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/334060/","Gandylyan1"
 "334059","2020-04-02 17:40:11","https://eetownvulgar.xyz/3/ssf.dll","offline","malware_download","dll,zloader","https://urlhaus.abuse.ch/url/334059/","abuse_ch"
-"334058","2020-04-02 17:35:21","http://93.102.193.254:51142/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/334058/","zbetcheckin"
+"334058","2020-04-02 17:35:21","http://93.102.193.254:51142/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/334058/","zbetcheckin"
 "334057","2020-04-02 17:31:08","http://frogistik99.com/9548.exe","offline","malware_download","Dridex,exe","https://urlhaus.abuse.ch/url/334057/","abuse_ch"
 "334056","2020-04-02 17:26:09","https://drive.google.com/uc?export=download&id=1tAsOF062xStYM8PM-UBwDYZqC-zU1jXJ","offline","malware_download","encrypted,GuLoader,RemcosRAT","https://urlhaus.abuse.ch/url/334056/","abuse_ch"
 "334055","2020-04-02 16:59:11","http://office-updates-indexes.com/max.bin","offline","malware_download","None","https://urlhaus.abuse.ch/url/334055/","JayTHL"
@@ -20539,15 +21059,15 @@
 "333189","2020-04-01 11:41:28","https://drive.google.com/uc?export=download&id=1dnn-IzKlVe4oqJHF8vCa1aBaViqX6oXo","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/333189/","abuse_ch"
 "333188","2020-04-01 11:41:17","https://drive.google.com/uc?export=download&id=1wpu1-RnfXU4-_r69dBnfIMIiUtTbetPY","offline","malware_download","encrypted,Formbook,GuLoader","https://urlhaus.abuse.ch/url/333188/","abuse_ch"
 "333187","2020-04-01 11:41:08","https://drive.google.com/uc?export=download&id=1kTiFlMWR3Zn-im4lKLeYDtz_y0p54AXr","offline","malware_download","encrypted,GuLoader,Loki","https://urlhaus.abuse.ch/url/333187/","abuse_ch"
-"333186","2020-04-01 11:09:11","http://sylvaclouds.eu/egesi/egesi.exe","online","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/333186/","zbetcheckin"
+"333186","2020-04-01 11:09:11","http://sylvaclouds.eu/egesi/egesi.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/333186/","zbetcheckin"
 "333185","2020-04-01 11:09:06","http://sylvaclouds.eu/buildz/buildz.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/333185/","zbetcheckin"
 "333184","2020-04-01 10:45:04","https://pastebin.com/raw/FAybGxVg","offline","malware_download","None","https://urlhaus.abuse.ch/url/333184/","JayTHL"
 "333183","2020-04-01 10:34:06","https://pastebin.com/raw/ZBPa4gk6","offline","malware_download","PowerShellEmpire","https://urlhaus.abuse.ch/url/333183/","viql"
 "333182","2020-04-01 10:34:03","https://pastebin.com/raw/cnRitEVr","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/333182/","viql"
 "333181","2020-04-01 10:32:07","https://pastebin.com/raw/7mxQhQbM","offline","malware_download","Encoded,exe,mimikatz","https://urlhaus.abuse.ch/url/333181/","viql"
 "333180","2020-04-01 10:17:04","http://178.151.198.151:30328/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/333180/","zbetcheckin"
-"333179","2020-04-01 10:15:06","http://sylvaclouds.eu/anandz/anandz.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/333179/","oppimaniac"
-"333178","2020-04-01 10:12:38","http://sylvaclouds.eu/dialo/dialo.exe","online","malware_download","AgentTesla,exe,HawkEye","https://urlhaus.abuse.ch/url/333178/","oppimaniac"
+"333179","2020-04-01 10:15:06","http://sylvaclouds.eu/anandz/anandz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/333179/","oppimaniac"
+"333178","2020-04-01 10:12:38","http://sylvaclouds.eu/dialo/dialo.exe","offline","malware_download","AgentTesla,exe,HawkEye","https://urlhaus.abuse.ch/url/333178/","oppimaniac"
 "333177","2020-04-01 10:12:32","http://115.197.89.150:35883/Mozi.m+-O+-","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/333177/","zbetcheckin"
 "333176","2020-04-01 10:12:26","https://renovatorleads.com/wp-content/uploads/2020/03/tools/71176/71176.zip","offline","malware_download","qbot,zip","https://urlhaus.abuse.ch/url/333176/","ps66uk"
 "333175","2020-04-01 10:12:22","https://pfau1010.com/wp-content/uploads/2020/03/tools/68085/68085.zip","offline","malware_download","qbot,zip","https://urlhaus.abuse.ch/url/333175/","ps66uk"
@@ -21047,7 +21567,7 @@
 "332670","2020-03-31 11:12:11","https://drive.google.com/uc?export=download&id=1McAUhfG4DhWbjCF5IaUAXs-0CPBN2KvC","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/332670/","abuse_ch"
 "332669","2020-03-31 11:12:03","https://pastebin.com/raw/9tSHH3iU","offline","malware_download","PowerShellEmpire","https://urlhaus.abuse.ch/url/332669/","viql"
 "332668","2020-03-31 11:11:06","http://66.96.241.234:52925/4","online","malware_download","elf","https://urlhaus.abuse.ch/url/332668/","zbetcheckin"
-"332667","2020-03-31 11:06:07","http://109.185.26.178:29394/4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/332667/","zbetcheckin"
+"332667","2020-03-31 11:06:07","http://109.185.26.178:29394/4","online","malware_download","elf","https://urlhaus.abuse.ch/url/332667/","zbetcheckin"
 "332666","2020-03-31 10:58:06","http://bondbuild.com.sg/wp-includes/fonts/SEAALS_encrypted_8A20A2F.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/332666/","abuse_ch"
 "332665","2020-03-31 10:21:05","http://worldplaces.in/direct/444444.png","offline","malware_download","Quakbot","https://urlhaus.abuse.ch/url/332665/","JAMESWT_MHT"
 "332664","2020-03-31 10:17:07","http://stickit.ae/direct/444444.png","offline","malware_download","Quakbot","https://urlhaus.abuse.ch/url/332664/","JAMESWT_MHT"
@@ -22630,7 +23150,7 @@
 "331086","2020-03-27 18:05:10","http://221.210.211.23:47738/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/331086/","Gandylyan1"
 "331085","2020-03-27 18:05:05","http://175.8.61.254:56853/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/331085/","Gandylyan1"
 "331084","2020-03-27 18:04:50","http://182.113.244.51:46885/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/331084/","Gandylyan1"
-"331083","2020-03-27 18:04:46","http://182.222.195.192:2233/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/331083/","Gandylyan1"
+"331083","2020-03-27 18:04:46","http://182.222.195.192:2233/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/331083/","Gandylyan1"
 "331082","2020-03-27 18:04:36","http://121.234.238.186:41994/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/331082/","Gandylyan1"
 "331081","2020-03-27 18:04:22","http://113.219.81.204:39347/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/331081/","Gandylyan1"
 "331080","2020-03-27 18:04:16","http://219.156.196.10:39694/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/331080/","Gandylyan1"
@@ -22925,7 +23445,7 @@
 "330791","2020-03-27 07:14:05","http://161.35.0.71/SBIDIOT/x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/330791/","0xrb"
 "330790","2020-03-27 07:14:03","http://167.99.234.199/bins/sora.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/330790/","0xrb"
 "330789","2020-03-27 07:13:07","http://192.129.188.98/bins/blxntz.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/330789/","0xrb"
-"330788","2020-03-27 07:13:05","http://185.172.110.208/bins/UnHAnaAW.x86","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/330788/","0xrb"
+"330788","2020-03-27 07:13:05","http://185.172.110.208/bins/UnHAnaAW.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/330788/","0xrb"
 "330787","2020-03-27 07:13:03","http://134.122.87.117/mac2139r209ru120934r123jhr908213jh4r09213/lmfao293reuj239jrf234rft34jt.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/330787/","0xrb"
 "330786","2020-03-27 07:12:03","http://176.123.6.155/Y91/x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/330786/","0xrb"
 "330785","2020-03-27 07:07:03","http://212.237.0.244/bins/spc.kbot","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/330785/","0xrb"
@@ -23428,8 +23948,8 @@
 "330287","2020-03-26 12:35:08","http://newactdoconline.3utilities.com/1/redi.php","offline","malware_download","RevengeRAT,wshrat","https://urlhaus.abuse.ch/url/330287/","0xCARNAGE"
 "330286","2020-03-26 12:35:06","http://newactdoconline.3utilities.com/1/microsoft.vbs","offline","malware_download","RevengeRAT,wshrat","https://urlhaus.abuse.ch/url/330286/","0xCARNAGE"
 "330285","2020-03-26 12:35:04","http://newactdoconline.3utilities.com/1/microsoft.hta","offline","malware_download","RevengeRAT,wshrat","https://urlhaus.abuse.ch/url/330285/","0xCARNAGE"
-"330284","2020-03-26 12:29:07","http://sylvaclouds.eu/cafilez/cafilez.exe","online","malware_download","AgentTesla,exe,Loki","https://urlhaus.abuse.ch/url/330284/","zbetcheckin"
-"330283","2020-03-26 12:25:07","http://sylvaclouds.eu/anyisouthz/anyisouthz.exe","online","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/330283/","zbetcheckin"
+"330284","2020-03-26 12:29:07","http://sylvaclouds.eu/cafilez/cafilez.exe","offline","malware_download","AgentTesla,exe,Loki","https://urlhaus.abuse.ch/url/330284/","zbetcheckin"
+"330283","2020-03-26 12:25:07","http://sylvaclouds.eu/anyisouthz/anyisouthz.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/330283/","zbetcheckin"
 "330282","2020-03-26 12:19:05","http://sylvaclouds.eu/billiz/billiz.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/330282/","zbetcheckin"
 "330281","2020-03-26 12:13:05","https://pastebin.com/raw/2q38ge9f","offline","malware_download","None","https://urlhaus.abuse.ch/url/330281/","JayTHL"
 "330280","2020-03-26 12:06:14","http://42.228.126.238:45295/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/330280/","Gandylyan1"
@@ -23452,7 +23972,7 @@
 "330263","2020-03-26 11:43:08","http://45.84.196.234/bins/arm7","offline","malware_download","None","https://urlhaus.abuse.ch/url/330263/","anonymous"
 "330262","2020-03-26 11:43:05","http://45.84.196.234/bins/arm6","offline","malware_download","None","https://urlhaus.abuse.ch/url/330262/","anonymous"
 "330261","2020-03-26 11:43:03","http://45.84.196.234/bins/arm5","offline","malware_download","None","https://urlhaus.abuse.ch/url/330261/","anonymous"
-"330260","2020-03-26 11:39:11","http://sylvaclouds.eu/chung/chung.exe","online","malware_download","exe,NetWire","https://urlhaus.abuse.ch/url/330260/","zbetcheckin"
+"330260","2020-03-26 11:39:11","http://sylvaclouds.eu/chung/chung.exe","offline","malware_download","exe,NetWire","https://urlhaus.abuse.ch/url/330260/","zbetcheckin"
 "330259","2020-03-26 11:36:04","https://pastebin.com/raw/ya6DzAx1","offline","malware_download","None","https://urlhaus.abuse.ch/url/330259/","JayTHL"
 "330258","2020-03-26 11:27:06","http://23.95.18.84/DHLTRACKING.iso","offline","malware_download","AsyncRAT","https://urlhaus.abuse.ch/url/330258/","Racco42"
 "330257","2020-03-26 10:59:03","https://pastebin.com/raw/z86NEqqA","offline","malware_download","Encoded,exe,njRAT","https://urlhaus.abuse.ch/url/330257/","viql"
@@ -24179,21 +24699,21 @@
 "329533","2020-03-25 07:14:12","https://drive.google.com/uc?export=download&id=1dB8Fv-rAYHPFolgIC9lMRXL66BvxoqTi","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/329533/","abuse_ch"
 "329532","2020-03-25 07:14:09","https://drive.google.com/uc?export=download&id=12LdUfWAdcmoklQj3rvRR0Hzsqkb0pomK","offline","malware_download","encrypted,GuLoader,Loki","https://urlhaus.abuse.ch/url/329532/","abuse_ch"
 "329531","2020-03-25 07:11:13","http://sylvaclouds.eu/kelly/mez.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/329531/","zbetcheckin"
-"329530","2020-03-25 07:11:07","http://sylvaclouds.eu/sunshinez/sunshinez.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/329530/","zbetcheckin"
+"329530","2020-03-25 07:11:07","http://sylvaclouds.eu/sunshinez/sunshinez.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/329530/","zbetcheckin"
 "329529","2020-03-25 07:10:24","http://45.148.10.94/luoqxbocmkxnexy/tbox.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/329529/","zbetcheckin"
-"329528","2020-03-25 07:10:21","http://sylvaclouds.eu/arinze/arinze.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/329528/","zbetcheckin"
+"329528","2020-03-25 07:10:21","http://sylvaclouds.eu/arinze/arinze.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/329528/","zbetcheckin"
 "329527","2020-03-25 07:10:15","http://45.148.10.94/luoqxbocmkxnexy/tbox.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/329527/","zbetcheckin"
-"329526","2020-03-25 07:10:12","http://sylvaclouds.eu/mbara/mbara.exe","online","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/329526/","zbetcheckin"
+"329526","2020-03-25 07:10:12","http://sylvaclouds.eu/mbara/mbara.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/329526/","zbetcheckin"
 "329525","2020-03-25 07:05:27","http://45.148.10.94/luoqxbocmkxnexy/tbox.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/329525/","zbetcheckin"
 "329524","2020-03-25 07:05:25","http://45.148.10.94/luoqxbocmkxnexy/tbox.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/329524/","zbetcheckin"
 "329523","2020-03-25 07:05:22","http://45.148.10.94/luoqxbocmkxnexy/tbox.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/329523/","zbetcheckin"
-"329522","2020-03-25 07:05:20","http://sylvaclouds.eu/djfilez/djfilez.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/329522/","zbetcheckin"
+"329522","2020-03-25 07:05:20","http://sylvaclouds.eu/djfilez/djfilez.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/329522/","zbetcheckin"
 "329521","2020-03-25 07:05:09","http://sylvaclouds.eu/jayz/jayz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/329521/","zbetcheckin"
 "329520","2020-03-25 07:05:04","http://45.148.10.94/luoqxbocmkxnexy/tbox.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/329520/","zbetcheckin"
 "329519","2020-03-25 07:04:47","http://sylvaclouds.eu/stanz/stanz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/329519/","zbetcheckin"
 "329518","2020-03-25 07:04:42","http://sylvaclouds.eu/dutchz/dutchz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/329518/","zbetcheckin"
 "329517","2020-03-25 07:04:31","http://sylvaclouds.eu/jawa/jawa.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/329517/","zbetcheckin"
-"329516","2020-03-25 07:04:26","http://sylvaclouds.eu/petercodyz/petercodyz.exe","online","malware_download","AgentTesla,exe,Loki","https://urlhaus.abuse.ch/url/329516/","zbetcheckin"
+"329516","2020-03-25 07:04:26","http://sylvaclouds.eu/petercodyz/petercodyz.exe","offline","malware_download","AgentTesla,exe,Loki","https://urlhaus.abuse.ch/url/329516/","zbetcheckin"
 "329515","2020-03-25 07:04:20","http://sylvaclouds.eu/larryz/larryz.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/329515/","zbetcheckin"
 "329514","2020-03-25 07:04:16","http://45.148.10.94/luoqxbocmkxnexy/tbox.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/329514/","zbetcheckin"
 "329513","2020-03-25 07:04:13","http://45.148.10.94/luoqxbocmkxnexy/tbox.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/329513/","zbetcheckin"
@@ -25393,7 +25913,7 @@
 "328319","2020-03-22 15:04:24","http://110.179.31.44:58071/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328319/","Gandylyan1"
 "328318","2020-03-22 15:04:19","http://115.49.79.131:51481/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328318/","Gandylyan1"
 "328317","2020-03-22 15:04:15","http://222.185.161.165:47113/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328317/","Gandylyan1"
-"328316","2020-03-22 14:58:13","http://121.162.174.59:40481/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/328316/","zbetcheckin"
+"328316","2020-03-22 14:58:13","http://121.162.174.59:40481/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/328316/","zbetcheckin"
 "328315","2020-03-22 13:43:05","https://pastebin.com/raw/585eHqKL","offline","malware_download","Encoded,exe,RevengeRAT","https://urlhaus.abuse.ch/url/328315/","viql"
 "328314","2020-03-22 13:42:04","https://pastebin.com/raw/eNcKbQUF","offline","malware_download","None","https://urlhaus.abuse.ch/url/328314/","JayTHL"
 "328313","2020-03-22 12:42:24","https://drive.google.com/uc?export=download&id=1VQysRwTmVnyJa3EZjywvu5Z_YrH2KNOS","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/328313/","abuse_ch"
@@ -25618,7 +26138,7 @@
 "328094","2020-03-21 16:25:09","https://pastebin.com/raw/zH6JUpPU","offline","malware_download","Encoded,exe,Sodinokibi","https://urlhaus.abuse.ch/url/328094/","viql"
 "328093","2020-03-21 16:01:04","https://buildingcontrolregister.ie/aboutus/carter@new-irnaging-technologies_encrypted_77D94C0.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/328093/","abuse_ch"
 "328092","2020-03-21 15:44:06","http://42.225.197.138:38692/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/328092/","zbetcheckin"
-"328091","2020-03-21 15:06:04","http://78.189.173.59:29424/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/328091/","zbetcheckin"
+"328091","2020-03-21 15:06:04","http://78.189.173.59:29424/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/328091/","zbetcheckin"
 "328090","2020-03-21 15:05:48","http://221.220.227.52:49621/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328090/","Gandylyan1"
 "328089","2020-03-21 15:05:43","http://119.129.203.251:49143/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328089/","Gandylyan1"
 "328088","2020-03-21 15:05:38","http://125.44.202.27:42216/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/328088/","Gandylyan1"
@@ -25848,7 +26368,7 @@
 "327864","2020-03-20 21:59:32","http://161.35.13.45/AB4g5/Josho.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/327864/","zbetcheckin"
 "327863","2020-03-20 21:53:03","https://pastebin.com/raw/zT7HpjeT","offline","malware_download","Encoded,exe,njRAT","https://urlhaus.abuse.ch/url/327863/","viql"
 "327862","2020-03-20 21:47:02","http://37.49.226.138/luoqxbocmkxnexy/tbox.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/327862/","zbetcheckin"
-"327861","2020-03-20 21:36:14","http://121.159.208.28:21363/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/327861/","zbetcheckin"
+"327861","2020-03-20 21:36:14","http://121.159.208.28:21363/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/327861/","zbetcheckin"
 "327860","2020-03-20 21:36:09","http://175.201.20.132:17327/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/327860/","zbetcheckin"
 "327859","2020-03-20 21:06:21","http://111.42.102.78:58801/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/327859/","Gandylyan1"
 "327858","2020-03-20 21:06:18","http://110.18.194.20:44800/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/327858/","Gandylyan1"
@@ -26134,7 +26654,7 @@
 "327578","2020-03-20 12:51:25","https://drive.google.com/uc?export=download&id=1fU0U84PNe4eZs0WWEZml66A9cBHpeh-n","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/327578/","abuse_ch"
 "327577","2020-03-20 12:51:18","https://drive.google.com/uc?export=download&id=1yco77z7uLsaCFo3dthzfua3r71irfqxO","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/327577/","abuse_ch"
 "327576","2020-03-20 12:51:09","https://drive.google.com/uc?export=download&id=1cPEyGGL-mvU8CvODU186vy4OvFM4Shnv","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/327576/","abuse_ch"
-"327575","2020-03-20 12:50:06","http://59.1.81.1:44385/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/327575/","zbetcheckin"
+"327575","2020-03-20 12:50:06","http://59.1.81.1:44385/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/327575/","zbetcheckin"
 "327574","2020-03-20 12:45:07","https://buildingcontrolregister.ie/aboutus/okoh2@irnra_encrypted_F3F70FF.bin","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/327574/","abuse_ch"
 "327573","2020-03-20 12:45:04","https://onedrive.live.com/download?cid=265DAF943BE0D06F&resid=265DAF943BE0D06F%21175&authkey=AGhdDUlD51-IFJY","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/327573/","abuse_ch"
 "327572","2020-03-20 12:45:00","https://www.sendspace.com/pro/dl/b8v2gk","offline","malware_download","encrypted,GuLoader","https://urlhaus.abuse.ch/url/327572/","abuse_ch"
@@ -27887,7 +28407,7 @@
 "325817","2020-03-16 22:09:05","http://mastervisacloudesystemprtomicrosftwareus.duckdns.org/ryn/vbc.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/325817/","zbetcheckin"
 "325816","2020-03-16 22:06:03","https://pastebin.com/raw/SEWZGHca","offline","malware_download","None","https://urlhaus.abuse.ch/url/325816/","JayTHL"
 "325815","2020-03-16 22:03:08","http://audiosv.com/index/Piruet.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/325815/","zbetcheckin"
-"325814","2020-03-16 21:58:15","http://59.23.208.62:47019/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325814/","zbetcheckin"
+"325814","2020-03-16 21:58:15","http://59.23.208.62:47019/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325814/","zbetcheckin"
 "325813","2020-03-16 21:58:10","http://100.38.225.68:17226/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325813/","zbetcheckin"
 "325812","2020-03-16 21:58:06","http://112.167.218.221:45468/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325812/","zbetcheckin"
 "325811","2020-03-16 21:20:18","https://pastebin.com/raw/B0dcMR45","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/325811/","viql"
@@ -28109,7 +28629,7 @@
 "325594","2020-03-16 11:38:08","https://drive.google.com/uc?export=download&id=10nAXipyS351C7mC-hS7sn9JheZ6RzGhG","offline","malware_download","encrypted,Formbook,GuLoader","https://urlhaus.abuse.ch/url/325594/","abuse_ch"
 "325593","2020-03-16 10:52:05","https://pastebin.com/raw/i39ByD6y","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/325593/","viql"
 "325592","2020-03-16 10:43:12","http://5.45.164.142:13507/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325592/","zbetcheckin"
-"325591","2020-03-16 10:43:07","http://211.216.116.40:6702/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325591/","zbetcheckin"
+"325591","2020-03-16 10:43:07","http://211.216.116.40:6702/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/325591/","zbetcheckin"
 "325590","2020-03-16 10:00:15","http://bakery365sawamura.website/soul.exe","offline","malware_download","exe,Gozi,ursnif","https://urlhaus.abuse.ch/url/325590/","abuse_ch"
 "325589","2020-03-16 09:55:16","https://drive.google.com/uc?id=1eRTPmoUTpVVU19aONDr-yo0-RNkG5l07&export=download","online","malware_download","Gozi,js,password:7777,ursnif,zip","https://urlhaus.abuse.ch/url/325589/","abuse_ch"
 "325588","2020-03-16 09:41:03","http://185.163.45.101/bins/blxntz.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/325588/","zbetcheckin"
@@ -30122,7 +30642,7 @@
 "323572","2020-03-10 20:43:07","http://uzoclouds.eu/kelly/Kellly.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/323572/","zbetcheckin"
 "323571","2020-03-10 20:38:13","http://soft.114lk.com/down/dwgseepr@2345_7493.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/323571/","zbetcheckin"
 "323570","2020-03-10 20:27:16","http://24.165.41.55:55749/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/323570/","zbetcheckin"
-"323569","2020-03-10 20:27:11","http://222.113.138.43:27366/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/323569/","zbetcheckin"
+"323569","2020-03-10 20:27:11","http://222.113.138.43:27366/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/323569/","zbetcheckin"
 "323568","2020-03-10 20:27:06","http://213.14.150.36:59976/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/323568/","zbetcheckin"
 "323567","2020-03-10 20:14:03","https://pastebin.com/raw/tRKYLaw3","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/323567/","viql"
 "323566","2020-03-10 19:55:41","https://drive.google.com/uc?id=1Fh2KjhZXoWpNdpebRj6wE_gTMIJSMQrs&export=download","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/323566/","p5yb34m"
@@ -31084,7 +31604,7 @@
 "322606","2020-03-08 04:57:04","http://dx6.91tzy.com/vbre.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322606/","zbetcheckin"
 "322605","2020-03-08 04:52:08","http://wt9.91tzy.com/HA_GhostCastServer_WGL.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322605/","zbetcheckin"
 "322604","2020-03-08 04:48:05","http://laatkhenchk.com/thisfuckin.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/322604/","JayTHL"
-"322603","2020-03-08 04:47:15","http://wt9.siweidaoxiang.com/xspeghp.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322603/","zbetcheckin"
+"322603","2020-03-08 04:47:15","http://wt9.siweidaoxiang.com/xspeghp.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/322603/","zbetcheckin"
 "322602","2020-03-08 04:47:06","http://wangtong7.91tzy.com/niuniushubiaozddj.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322602/","zbetcheckin"
 "322601","2020-03-08 04:22:06","http://wt9.91tzy.com/xspeghp.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322601/","zbetcheckin"
 "322600","2020-03-08 04:17:12","http://wt9.91tzy.com/sqlzhlygj.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/322600/","zbetcheckin"
@@ -31291,7 +31811,7 @@
 "322399","2020-03-07 11:48:05","http://139.99.238.101/m68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/322399/","zbetcheckin"
 "322398","2020-03-07 11:22:03","https://pastebin.com/raw/nzX0NTLQ","offline","malware_download","None","https://urlhaus.abuse.ch/url/322398/","JayTHL"
 "322397","2020-03-07 11:16:33","https://pastebin.com/raw/vGajWPP4","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/322397/","viql"
-"322396","2020-03-07 11:02:06","http://119.203.9.192:42812/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/322396/","zbetcheckin"
+"322396","2020-03-07 11:02:06","http://119.203.9.192:42812/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/322396/","zbetcheckin"
 "322395","2020-03-07 09:50:19","https://pastebin.com/raw/wBrisgSh","offline","malware_download","Encoded,exe,njRAT","https://urlhaus.abuse.ch/url/322395/","viql"
 "322394","2020-03-07 09:50:17","https://pastebin.com/raw/bQguBA5b","offline","malware_download","Encoded,exe,njRAT","https://urlhaus.abuse.ch/url/322394/","viql"
 "322393","2020-03-07 09:39:03","https://pastebin.com/raw/sjA5CXAH","offline","malware_download","Encoded,exe,njRAT","https://urlhaus.abuse.ch/url/322393/","viql"
@@ -31413,7 +31933,7 @@
 "322277","2020-03-07 00:04:05","http://182.112.57.2:60164/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/322277/","Gandylyan1"
 "322276","2020-03-06 23:57:03","https://pastebin.com/raw/WUjXL3Y2","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/322276/","viql"
 "322275","2020-03-06 23:55:06","https://pastebin.com/raw/0gfQbN2p","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/322275/","viql"
-"322274","2020-03-06 23:51:04","http://93.70.125.94:40883/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/322274/","zbetcheckin"
+"322274","2020-03-06 23:51:04","http://93.70.125.94:40883/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/322274/","zbetcheckin"
 "322273","2020-03-06 22:43:32","https://pastebin.com/raw/rPikkeG2","offline","malware_download","None","https://urlhaus.abuse.ch/url/322273/","JayTHL"
 "322272","2020-03-06 22:39:04","http://42.230.206.172:60073/Mozi.m","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/322272/","zbetcheckin"
 "322271","2020-03-06 22:25:04","https://pastebin.com/raw/GJfKSHFZ","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/322271/","viql"
@@ -31537,7 +32057,7 @@
 "322153","2020-03-06 14:12:05","http://51.79.2.143/razor/r4z0r.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/322153/","zbetcheckin"
 "322152","2020-03-06 14:12:03","http://51.79.2.143/razor/r4z0r.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/322152/","zbetcheckin"
 "322151","2020-03-06 14:11:29","http://51.79.2.143/razor/r4z0r.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/322151/","zbetcheckin"
-"322150","2020-03-06 14:11:27","http://175.208.203.123:35536/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/322150/","zbetcheckin"
+"322150","2020-03-06 14:11:27","http://175.208.203.123:35536/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/322150/","zbetcheckin"
 "322149","2020-03-06 14:11:17","http://51.79.2.143/razor/r4z0r.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/322149/","zbetcheckin"
 "322148","2020-03-06 14:11:14","http://51.79.2.143/razor/r4z0r.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/322148/","zbetcheckin"
 "322147","2020-03-06 14:11:12","http://51.79.2.143/razor/r4z0r.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/322147/","zbetcheckin"
@@ -31628,7 +32148,7 @@
 "322062","2020-03-06 08:54:36","http://bores.xyz/159.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/322062/","JAMESWT_MHT"
 "322061","2020-03-06 08:54:04","http://bores.xyz/111.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/322061/","JAMESWT_MHT"
 "322060","2020-03-06 08:53:10","http://bores.xyz/rot.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/322060/","JAMESWT_MHT"
-"322059","2020-03-06 08:52:37","http://lodergord.com/rot.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/322059/","JAMESWT_MHT"
+"322059","2020-03-06 08:52:37","http://lodergord.com/rot.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/322059/","JAMESWT_MHT"
 "322058","2020-03-06 08:52:03","http://icietdemain.fr/contents/2020/02/idle/222222.png","offline","malware_download","None","https://urlhaus.abuse.ch/url/322058/","JAMESWT_MHT"
 "322057","2020-03-06 08:51:27","http://kryptcfiles.xyz/ver/combos.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/322057/","JAMESWT_MHT"
 "322056","2020-03-06 08:25:09","http://perelouis.fr/covid.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/322056/","JAMESWT_MHT"
@@ -32431,7 +32951,7 @@
 "321257","2020-03-04 03:03:13","http://116.114.95.208:35698/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/321257/","Gandylyan1"
 "321256","2020-03-04 03:03:10","http://221.210.211.13:54681/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/321256/","Gandylyan1"
 "321255","2020-03-04 03:03:05","http://182.117.40.148:33523/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/321255/","Gandylyan1"
-"321254","2020-03-04 03:02:06","http://221.144.53.126:5683/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/321254/","zbetcheckin"
+"321254","2020-03-04 03:02:06","http://221.144.53.126:5683/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/321254/","zbetcheckin"
 "321253","2020-03-04 01:19:48","https://pastebin.com/raw/EfaVrT2L","offline","malware_download","meterpreter","https://urlhaus.abuse.ch/url/321253/","viql"
 "321252","2020-03-04 01:08:13","http://219.85.55.202:18003/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/321252/","zbetcheckin"
 "321251","2020-03-04 01:08:06","http://210.186.170.119:37327/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/321251/","zbetcheckin"
@@ -32845,7 +33365,7 @@
 "320843","2020-03-03 05:34:16","http://interload.info/downfiles/intervpnmix.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/320843/","zbetcheckin"
 "320842","2020-03-03 05:34:12","http://interload.info/downfiles/intervpnmix2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/320842/","zbetcheckin"
 "320841","2020-03-03 05:02:07","http://80.19.101.218:54587/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/320841/","zbetcheckin"
-"320840","2020-03-03 05:02:03","http://41.32.132.218:61418/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/320840/","zbetcheckin"
+"320840","2020-03-03 05:02:03","http://41.32.132.218:61418/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/320840/","zbetcheckin"
 "320839","2020-03-03 03:54:04","https://cdn.discordapp.com/attachments/681439899152416887/684108343874420737/Bank_Swift.zip","offline","malware_download","None","https://urlhaus.abuse.ch/url/320839/","JayTHL"
 "320838","2020-03-03 03:43:13","http://update.iwang8.com/pkg/llclear/flow1023/1540286408569/pub8016.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/320838/","zbetcheckin"
 "320837","2020-03-03 03:26:03","https://pastebin.com/raw/DH008vEX","offline","malware_download","PowerShellEmpire","https://urlhaus.abuse.ch/url/320837/","viql"
@@ -33647,7 +34167,7 @@
 "320034","2020-02-29 05:38:03","http://support.pubg.com/attachments/token/T6cNO6YwZ3wF4SVnnwt5WEowd/","offline","malware_download","exe","https://urlhaus.abuse.ch/url/320034/","zbetcheckin"
 "320033","2020-02-29 05:32:08","http://xiazai.xiuchufang.com/%E6%B7%B1%E5%BA%A6%E4%B8%80%E9%94%AE%E9%87%8D%E8%A3%85%E7%B3%BB%E7%BB%9F.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/320033/","zbetcheckin"
 "320032","2020-02-29 05:32:04","http://xiazai.xiuchufang.com/%E9%9B%A8%E6%9E%97%E6%9C%A8%E9%A3%8E%E8%A3%85%E6%9C%BA%E5%A4%A7%E5%B8%88.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/320032/","zbetcheckin"
-"320031","2020-02-29 05:22:32","http://79.7.170.58:19856/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/320031/","zbetcheckin"
+"320031","2020-02-29 05:22:32","http://79.7.170.58:19856/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/320031/","zbetcheckin"
 "320030","2020-02-29 03:58:04","http://167.114.97.220/m68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/320030/","zbetcheckin"
 "320029","2020-02-29 03:53:20","http://167.114.97.220/i686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/320029/","zbetcheckin"
 "320028","2020-02-29 03:53:17","http://167.114.97.220/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/320028/","zbetcheckin"
@@ -36895,7 +37415,7 @@
 "316759","2020-02-21 00:04:12","http://116.114.95.120:34585/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/316759/","Gandylyan1"
 "316758","2020-02-21 00:04:09","http://180.104.65.217:51720/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/316758/","Gandylyan1"
 "316757","2020-02-21 00:04:05","http://218.21.171.45:49890/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/316757/","Gandylyan1"
-"316756","2020-02-20 23:10:13","http://211.197.212.57:30461/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/316756/","zbetcheckin"
+"316756","2020-02-20 23:10:13","http://211.197.212.57:30461/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/316756/","zbetcheckin"
 "316755","2020-02-20 23:10:06","http://210.57.237.239:54222/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/316755/","zbetcheckin"
 "316754","2020-02-20 22:34:03","http://godbuntu.net/netis","offline","malware_download","elf","https://urlhaus.abuse.ch/url/316754/","Gandylyan1"
 "316753","2020-02-20 22:32:05","http://godbuntu.net/tr064","offline","malware_download","elf","https://urlhaus.abuse.ch/url/316753/","Gandylyan1"
@@ -36915,7 +37435,7 @@
 "316739","2020-02-20 22:03:12","http://222.74.186.132:51465/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/316739/","Gandylyan1"
 "316738","2020-02-20 22:03:08","http://1.246.223.116:4382/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/316738/","Gandylyan1"
 "316737","2020-02-20 22:03:04","http://113.26.94.117:33156/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/316737/","Gandylyan1"
-"316736","2020-02-20 22:02:04","http://94.41.0.174:32011/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/316736/","zbetcheckin"
+"316736","2020-02-20 22:02:04","http://94.41.0.174:32011/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/316736/","zbetcheckin"
 "316735","2020-02-20 21:49:03","https://pastebin.com/raw/4iYDsLKy","offline","malware_download","Encoded,exe,njRAT","https://urlhaus.abuse.ch/url/316735/","viql"
 "316734","2020-02-20 21:12:03","https://pastebin.com/raw/9Jw6zzYy","offline","malware_download","Encoded,exe,njRAT","https://urlhaus.abuse.ch/url/316734/","viql"
 "316733","2020-02-20 21:01:05","https://pastebin.com/raw/BJU79pEm","offline","malware_download","None","https://urlhaus.abuse.ch/url/316733/","JayTHL"
@@ -42034,7 +42554,7 @@
 "311595","2020-02-08 13:03:18","http://60.184.229.66:35879/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/311595/","Gandylyan1"
 "311594","2020-02-08 13:03:10","http://221.15.54.218:57450/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/311594/","Gandylyan1"
 "311593","2020-02-08 13:03:06","http://42.232.100.175:60010/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/311593/","Gandylyan1"
-"311592","2020-02-08 12:21:05","http://186.179.243.112:61360/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/311592/","zbetcheckin"
+"311592","2020-02-08 12:21:05","http://186.179.243.112:61360/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/311592/","zbetcheckin"
 "311591","2020-02-08 12:06:48","http://125.44.183.31:59352/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/311591/","Gandylyan1"
 "311590","2020-02-08 12:06:43","http://42.235.37.13:33772/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/311590/","Gandylyan1"
 "311589","2020-02-08 12:06:39","http://113.25.234.197:39607/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/311589/","Gandylyan1"
@@ -43001,7 +43521,7 @@
 "310625","2020-02-07 02:31:35","http://dayananda.sigma.websitestore.in/wp-includes/paclm/tvg36611/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310625/","Cryptolaemus1"
 "310624","2020-02-07 02:27:36","http://demo.horizonbrain.com/bestbets/Scan/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310624/","spamhaus"
 "310623","2020-02-07 02:21:09","http://demo.nirobjashim.com/honpawk24jdsa/FILE/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310623/","Cryptolaemus1"
-"310622","2020-02-07 02:16:04","http://dev1.xicom.us/cryptominerbros/wordpress/wp-content/WC93VM4GZQE/vp8zoa0m7/5hc2rh7597869041325nurguxv/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310622/","Cryptolaemus1"
+"310622","2020-02-07 02:16:04","http://dev1.xicom.us/cryptominerbros/wordpress/wp-content/WC93VM4GZQE/vp8zoa0m7/5hc2rh7597869041325nurguxv/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310622/","Cryptolaemus1"
 "310621","2020-02-07 02:12:06","http://dmdap.ait.co.at/samba/sites/jkynuzi9614764583d1z3ovw7k87wma5e6xg/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310621/","spamhaus"
 "310620","2020-02-07 02:08:38","http://dev.maxmobility.in/uposhom/invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/310620/","spamhaus"
 "310619","2020-02-07 02:06:13","http://49.82.250.202:53668/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/310619/","Gandylyan1"
@@ -43735,7 +44255,7 @@
 "309887","2020-02-06 09:04:51","http://182.127.184.218:37989/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309887/","Gandylyan1"
 "309886","2020-02-06 09:04:48","http://113.25.43.71:47216/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309886/","Gandylyan1"
 "309885","2020-02-06 09:04:44","http://123.10.25.39:52851/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309885/","Gandylyan1"
-"309884","2020-02-06 09:04:39","http://186.73.188.132:59038/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309884/","Gandylyan1"
+"309884","2020-02-06 09:04:39","http://186.73.188.132:59038/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309884/","Gandylyan1"
 "309883","2020-02-06 09:04:16","http://49.70.10.213:53701/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309883/","Gandylyan1"
 "309882","2020-02-06 09:04:12","http://111.42.66.151:51987/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309882/","Gandylyan1"
 "309881","2020-02-06 09:04:08","http://111.43.223.97:58420/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/309881/","Gandylyan1"
@@ -44541,7 +45061,7 @@
 "309081","2020-02-05 13:48:53","https://icapture.app/wp-content/plugins/4990376224-NWbCrLLaQQ-zona/mg1fh-e5chqdawr20y60n-mg1fh-e5chqdawr20y60n/oTG7ZSRKi-mw631nv","offline","malware_download","None","https://urlhaus.abuse.ch/url/309081/","Cryptolaemus1"
 "309080","2020-02-05 13:48:12","http://navltas.me/jppp_2ED4.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/309080/","vxvault"
 "309079","2020-02-05 13:48:07","http://navltas.me/PI%20020520.exe","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/309079/","vxvault"
-"309078","2020-02-05 13:44:13","https://thevision.ro/dist/paclm/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/309078/","spamhaus"
+"309078","2020-02-05 13:44:13","https://thevision.ro/dist/paclm/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/309078/","spamhaus"
 "309077","2020-02-05 13:44:08","https://onubikkhon.com/wp-admin/404044821106-kY7xjPzw9A2a-section/9kQmSnn-kNlJNiRjwOa-profile/23942123298117-b0ffrHACxaD/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/309077/","Cryptolaemus1"
 "309076","2020-02-05 13:40:11","https://ukamoxil-amoxicillin.com/wp-admin/lm/2rrp524748272532011095ogmngj2jtgtkmygd78j/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/309076/","Cryptolaemus1"
 "309075","2020-02-05 13:39:36","https://goncosart.co.id/wp-admin/private_section/oSSg9Ww_FPkjMGSuxGOH3_600764_pWghSN7BoYZRr6b/rw6954xb3gn_vx4v67w/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/309075/","Cryptolaemus1"
@@ -45726,37 +46246,37 @@
 "307890","2020-02-04 11:17:03","https://drive.google.com/uc?id=1yIb-UIP5DezrVH_K14iBYLpqLfqb-nvu&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307890/","anonymous"
 "307889","2020-02-04 11:16:23","https://drive.google.com/uc?id=1yCPeeNuw7IBPmFXYGmw2ALJi52vGCZrF&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307889/","anonymous"
 "307888","2020-02-04 11:15:42","https://drive.google.com/uc?id=1xDgbg2F91CysiXcY-xT82ua-9nG_5GTj&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307888/","anonymous"
-"307887","2020-02-04 11:15:05","https://drive.google.com/uc?id=1wc4G7ZYZTplMHtG2IkWU57fskmLHy1tf&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307887/","anonymous"
+"307887","2020-02-04 11:15:05","https://drive.google.com/uc?id=1wc4G7ZYZTplMHtG2IkWU57fskmLHy1tf&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307887/","anonymous"
 "307886","2020-02-04 11:14:24","https://drive.google.com/uc?id=1wJW51yL16w0cNgwycZsQDz3fT3073hor&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307886/","anonymous"
 "307885","2020-02-04 11:13:46","https://drive.google.com/uc?id=1wEGCbnP8C-BA48mwsW4CbincuNurDsbV&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307885/","anonymous"
-"307884","2020-02-04 11:13:05","https://drive.google.com/uc?id=1w3oR4guf6JzS2Dx2n3JxVsq6OHOaQyn8&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307884/","anonymous"
+"307884","2020-02-04 11:13:05","https://drive.google.com/uc?id=1w3oR4guf6JzS2Dx2n3JxVsq6OHOaQyn8&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307884/","anonymous"
 "307883","2020-02-04 11:12:26","https://drive.google.com/uc?id=1w2rTpAQclyxIyKD-olixEfjI5dP4NChp&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307883/","anonymous"
 "307882","2020-02-04 11:11:45","https://drive.google.com/uc?id=1vvqBEbvSQxsG46cNBP0fcIJHh3NrRK_J&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307882/","anonymous"
 "307881","2020-02-04 11:11:05","https://drive.google.com/uc?id=1vvRJDE4m-Uqvc3F57mv11VMyzXTrDzG4&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307881/","anonymous"
-"307880","2020-02-04 11:10:26","https://drive.google.com/uc?id=1vhqTMqaZLqYLyuLVIuwBVI5hrpWhweM4&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307880/","anonymous"
+"307880","2020-02-04 11:10:26","https://drive.google.com/uc?id=1vhqTMqaZLqYLyuLVIuwBVI5hrpWhweM4&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307880/","anonymous"
 "307879","2020-02-04 11:09:49","https://drive.google.com/uc?id=1vEImEj6VJDJoxEMr2JuAHMyBtzOWTqr1&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307879/","anonymous"
 "307878","2020-02-04 11:09:11","https://drive.google.com/uc?id=1v9jyO7LBwJ7Iblzce6IA_sy2pOkDBT60&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307878/","anonymous"
 "307877","2020-02-04 11:08:33","https://drive.google.com/uc?id=1uYMWnCsy-BACd1Oo5wB4f0R2GtQPmWyK&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307877/","anonymous"
-"307876","2020-02-04 11:07:53","https://drive.google.com/uc?id=1uLm8t4iW_mvS3Ak9csJZdIflRw-XEd30&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307876/","anonymous"
+"307876","2020-02-04 11:07:53","https://drive.google.com/uc?id=1uLm8t4iW_mvS3Ak9csJZdIflRw-XEd30&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307876/","anonymous"
 "307875","2020-02-04 11:07:15","https://drive.google.com/uc?id=1ty8zrjrx-qAhLdgEeHABPkUnscSBZtRi&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307875/","anonymous"
 "307874","2020-02-04 11:06:35","https://drive.google.com/uc?id=1tUSojcvJXngze9cnRE5biBLCUbEQosQp&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307874/","anonymous"
 "307873","2020-02-04 11:05:54","https://drive.google.com/uc?id=1tTF4lz9irAfRDJUJxPT8DdbXLWesiHyE&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307873/","anonymous"
 "307872","2020-02-04 11:05:17","https://drive.google.com/uc?id=1t8YRAHKM74KcWjsWzzdw-UiwMNoqimmq&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307872/","anonymous"
 "307871","2020-02-04 11:04:40","https://drive.google.com/uc?id=1suhSItKPF53sTtXPUv_O6F_7_Q9ahJ57&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307871/","anonymous"
-"307870","2020-02-04 11:04:01","https://drive.google.com/uc?id=1slNk15jy2OOsxF2I_CatbBIryT8DcJgL&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307870/","anonymous"
+"307870","2020-02-04 11:04:01","https://drive.google.com/uc?id=1slNk15jy2OOsxF2I_CatbBIryT8DcJgL&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307870/","anonymous"
 "307869","2020-02-04 11:03:24","https://drive.google.com/uc?id=1sTe2zt7WGwrDPYjaf2jbd7tRd9LY27qG&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307869/","anonymous"
 "307868","2020-02-04 11:03:13","https://drive.google.com/uc?id=1sCC3SjqtOZnEA1jsafqnxXoNLNT9zgWU&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307868/","anonymous"
 "307867","2020-02-04 11:03:01","https://drive.google.com/uc?id=1ri7pvJwMlx53joETQgQ7W7_w6bHFhLds&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307867/","anonymous"
 "307866","2020-02-04 11:02:52","https://drive.google.com/uc?id=1r_BKt9fxUQ8M2KqFyd334SRkSzTtWGAH&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307866/","anonymous"
-"307865","2020-02-04 11:02:45","https://drive.google.com/uc?id=1rRnkMBmRZq569nRYv0xiJt7Ne2sdpaYN&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307865/","anonymous"
+"307865","2020-02-04 11:02:45","https://drive.google.com/uc?id=1rRnkMBmRZq569nRYv0xiJt7Ne2sdpaYN&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307865/","anonymous"
 "307864","2020-02-04 11:02:37","https://drive.google.com/uc?id=1qvQMr2atLHT11124Ivb6mHdXPY1KK0JQ&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307864/","anonymous"
-"307863","2020-02-04 11:02:29","https://drive.google.com/uc?id=1qJT-8-sjc1r9MophWSpa3fKeYy-Cmjbq&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307863/","anonymous"
+"307863","2020-02-04 11:02:29","https://drive.google.com/uc?id=1qJT-8-sjc1r9MophWSpa3fKeYy-Cmjbq&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307863/","anonymous"
 "307862","2020-02-04 11:02:00","https://drive.google.com/uc?id=1p1FaURb8vIyleCeOLx-p29HIV-tMPoqr&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307862/","anonymous"
 "307861","2020-02-04 11:01:43","https://drive.google.com/uc?id=1ofmvjdugqdC-nI1wQ25OmFiIED9C19lS&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307861/","anonymous"
 "307860","2020-02-04 11:01:36","https://drive.google.com/uc?id=1oI4J99vn5UJFazd7UTwJG4t3_f6XviFf&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307860/","anonymous"
 "307859","2020-02-04 11:01:23","https://drive.google.com/uc?id=1ntBn9CqEtT3AvOM2ByElirfnKJKI1Uwu&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307859/","anonymous"
-"307858","2020-02-04 11:01:13","https://drive.google.com/uc?id=1nUx01QN68doArMSY5zofVlVQUJwHSEb3&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307858/","anonymous"
-"307857","2020-02-04 11:01:05","https://drive.google.com/uc?id=1nNZne0SRFV72I_YtZQR_tlIolJNFJOYL&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307857/","anonymous"
+"307858","2020-02-04 11:01:13","https://drive.google.com/uc?id=1nUx01QN68doArMSY5zofVlVQUJwHSEb3&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307858/","anonymous"
+"307857","2020-02-04 11:01:05","https://drive.google.com/uc?id=1nNZne0SRFV72I_YtZQR_tlIolJNFJOYL&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307857/","anonymous"
 "307856","2020-02-04 11:00:55","https://drive.google.com/uc?id=1nMAOa5vbNOLS-dZxyxl1IwvuclszEWx1&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307856/","anonymous"
 "307855","2020-02-04 11:00:38","https://drive.google.com/uc?id=1nAmpLZotYqyFBUcLOlyv5GGKQYzHXZ04&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307855/","anonymous"
 "307854","2020-02-04 11:00:27","https://drive.google.com/uc?id=1mpnu5Zu-pTE9-FgO-rTAX-dKBG7FSUUI&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307854/","anonymous"
@@ -45779,19 +46299,19 @@
 "307837","2020-02-04 10:57:22","https://drive.google.com/uc?id=1i7MzDNm-gpvsTgyADVvA7s9o1HZ72vPR&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307837/","anonymous"
 "307836","2020-02-04 10:57:14","https://drive.google.com/uc?id=1gcEHIT4oOPjgC9t2PTnsQEIVFJ5v5LR1&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307836/","anonymous"
 "307835","2020-02-04 10:57:02","https://drive.google.com/uc?id=1gB8Dunl_zBBDhZ8glZ2TlcKuCWv9017g&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307835/","anonymous"
-"307834","2020-02-04 10:56:55","https://drive.google.com/uc?id=1f74a7W00t2B8bNTNUyavEwZeV-VRE5o4&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307834/","anonymous"
-"307833","2020-02-04 10:56:48","https://drive.google.com/uc?id=1f5wJV8kPvxOtLgLmu5Uut92pY4v2n6hE&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307833/","anonymous"
-"307832","2020-02-04 10:56:41","https://drive.google.com/uc?id=1f1d3rde5hbGpubc2ovPffFUpgVfegqj9&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307832/","anonymous"
+"307834","2020-02-04 10:56:55","https://drive.google.com/uc?id=1f74a7W00t2B8bNTNUyavEwZeV-VRE5o4&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307834/","anonymous"
+"307833","2020-02-04 10:56:48","https://drive.google.com/uc?id=1f5wJV8kPvxOtLgLmu5Uut92pY4v2n6hE&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307833/","anonymous"
+"307832","2020-02-04 10:56:41","https://drive.google.com/uc?id=1f1d3rde5hbGpubc2ovPffFUpgVfegqj9&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307832/","anonymous"
 "307831","2020-02-04 10:56:24","https://drive.google.com/uc?id=1eyNck6XwoLip0-T0le6EzjpojzTUPUXt&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307831/","anonymous"
 "307830","2020-02-04 10:56:13","https://drive.google.com/uc?id=1ex5iX5N7LQTfOrFz78eDdbopJMX7GUNU&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307830/","anonymous"
 "307829","2020-02-04 10:55:55","https://drive.google.com/uc?id=1er-HsVxQERfsHnK-TYAQWzE6_TO55yj-&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307829/","anonymous"
-"307828","2020-02-04 10:55:45","https://drive.google.com/uc?id=1emlap-VVjPLvplwk1BlUfZPCZmwDnIcR&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307828/","anonymous"
+"307828","2020-02-04 10:55:45","https://drive.google.com/uc?id=1emlap-VVjPLvplwk1BlUfZPCZmwDnIcR&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307828/","anonymous"
 "307827","2020-02-04 10:55:35","https://drive.google.com/uc?id=1eOzacxbxvlB9F9nInX3fdP8sjjlthi3W&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307827/","anonymous"
 "307826","2020-02-04 10:55:23","https://drive.google.com/uc?id=1e6XvEdBo9a1915xv4b5DQ8wWZZrLsCNc&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307826/","anonymous"
 "307825","2020-02-04 10:55:10","https://drive.google.com/uc?id=1e18RJ3xLqJPL5A_FTe1PtFDORun5h_Jl&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307825/","anonymous"
 "307824","2020-02-04 10:55:00","https://drive.google.com/uc?id=1drcLz87sgi-26f216V30TeWdfeAo6YGM&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307824/","anonymous"
 "307823","2020-02-04 10:54:50","https://drive.google.com/uc?id=1diCG1vENWuHFQogJFMD4kA-HUVMsToyh&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307823/","anonymous"
-"307822","2020-02-04 10:54:42","https://drive.google.com/uc?id=1cHcVxXjycwGrlloXfwfwyuBYb8AbYhDK&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307822/","anonymous"
+"307822","2020-02-04 10:54:42","https://drive.google.com/uc?id=1cHcVxXjycwGrlloXfwfwyuBYb8AbYhDK&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307822/","anonymous"
 "307821","2020-02-04 10:54:27","https://drive.google.com/uc?id=1cEwBeD59LrFMFNbssOP8iu88DqidkZrn&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307821/","anonymous"
 "307820","2020-02-04 10:54:19","https://drive.google.com/uc?id=1c2xuUNcsB4AYAwODfTNOAImrtcDYneGM&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307820/","anonymous"
 "307819","2020-02-04 10:54:00","https://drive.google.com/uc?id=1c2vs5XjsUQzKWjjYKXjXLe2drhjsWsHC&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307819/","anonymous"
@@ -45802,32 +46322,32 @@
 "307814","2020-02-04 10:53:05","https://drive.google.com/uc?id=1b-9llLol3vmCcpCI53tbCtW9ez5U6GKL&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307814/","anonymous"
 "307813","2020-02-04 10:52:52","https://drive.google.com/uc?id=1ax3YWYgaWIzrvOXec2dk4tigFVGZp5-A&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307813/","anonymous"
 "307812","2020-02-04 10:52:44","https://drive.google.com/uc?id=1afa5hMsjwb04LLqgGcABJrbAkmzhY14n&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307812/","anonymous"
-"307811","2020-02-04 10:52:37","https://drive.google.com/uc?id=1aUVdetSgECiOL-VvMzdQlw3JEQU9ejht&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307811/","anonymous"
+"307811","2020-02-04 10:52:37","https://drive.google.com/uc?id=1aUVdetSgECiOL-VvMzdQlw3JEQU9ejht&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307811/","anonymous"
 "307810","2020-02-04 10:52:28","https://drive.google.com/uc?id=1_Ooz1RY3hIG8thSHZjqt-SBh9tZvLuiG&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307810/","anonymous"
 "307809","2020-02-04 10:52:20","https://drive.google.com/uc?id=1_NJaUwl89anjer5NcClT2VXJ4WBkM7HN&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307809/","anonymous"
 "307808","2020-02-04 10:52:13","https://drive.google.com/uc?id=1_J9KF7cYxbo08SxySiDW_A5SpNjH8Y3E&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307808/","anonymous"
-"307807","2020-02-04 10:52:02","https://drive.google.com/uc?id=1_3nQMmF63589FwDZg4aiGfsKF47kdXb9&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307807/","anonymous"
-"307806","2020-02-04 10:51:40","https://drive.google.com/uc?id=1Zq2cIRaaNM7TRVbn9UmdCzzv8XJDx0uH&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307806/","anonymous"
+"307807","2020-02-04 10:52:02","https://drive.google.com/uc?id=1_3nQMmF63589FwDZg4aiGfsKF47kdXb9&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307807/","anonymous"
+"307806","2020-02-04 10:51:40","https://drive.google.com/uc?id=1Zq2cIRaaNM7TRVbn9UmdCzzv8XJDx0uH&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307806/","anonymous"
 "307805","2020-02-04 10:51:32","https://drive.google.com/uc?id=1ZVHvlOaCTaDjgdRxgGi4dEnS2DAUfSjy&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307805/","anonymous"
 "307804","2020-02-04 10:51:24","https://drive.google.com/uc?id=1ZLSUfV4_JuwmjeYprs6ddeCIT_-m_-k9&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307804/","anonymous"
 "307803","2020-02-04 10:51:13","https://drive.google.com/uc?id=1Z3qfO__4yjcoRTCxVESyHVc-qYJaBCTh&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307803/","anonymous"
 "307802","2020-02-04 10:51:03","https://drive.google.com/uc?id=1Y0dcICAr-DK7p1kuP8r1QKd5jfCkbVvc&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307802/","anonymous"
 "307801","2020-02-04 10:50:53","https://drive.google.com/uc?id=1XrbE4-ZaNC0EfswZlx-f1eF2k2NGb0jl&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307801/","anonymous"
-"307800","2020-02-04 10:50:43","https://drive.google.com/uc?id=1XqaFobWVywSXdXFrLJLqg5noCKYosbxw&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307800/","anonymous"
-"307799","2020-02-04 10:50:30","https://drive.google.com/uc?id=1XlTPt0V8Bjg7dEnzwwpkb2hoEE2H8tM_&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307799/","anonymous"
+"307800","2020-02-04 10:50:43","https://drive.google.com/uc?id=1XqaFobWVywSXdXFrLJLqg5noCKYosbxw&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307800/","anonymous"
+"307799","2020-02-04 10:50:30","https://drive.google.com/uc?id=1XlTPt0V8Bjg7dEnzwwpkb2hoEE2H8tM_&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307799/","anonymous"
 "307798","2020-02-04 10:50:20","https://drive.google.com/uc?id=1Xki_GqlgNLlPis3Q4Ms2HUmqayHNyaKG&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307798/","anonymous"
 "307797","2020-02-04 10:50:13","https://drive.google.com/uc?id=1XZirlr8OwAsHoTRPpl9QU_-fAtV5tZai&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307797/","anonymous"
 "307796","2020-02-04 10:50:05","https://drive.google.com/uc?id=1XRHiUuHOWpLxRafwsxq6JGZqnuA_QZko&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307796/","anonymous"
 "307795","2020-02-04 10:49:55","https://drive.google.com/uc?id=1XLHKQlbSmx1zzc5pgUHqHSeOIJT4fTS7&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307795/","anonymous"
-"307794","2020-02-04 10:49:23","https://drive.google.com/uc?id=1X09LDaOz_IjMg7N-pP8BF_Tnnm8QnExR&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307794/","anonymous"
+"307794","2020-02-04 10:49:23","https://drive.google.com/uc?id=1X09LDaOz_IjMg7N-pP8BF_Tnnm8QnExR&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307794/","anonymous"
 "307793","2020-02-04 10:48:42","https://drive.google.com/uc?id=1WrCjviMqwu9VxhiYZ4faDp16H_UvjbvA&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307793/","anonymous"
 "307792","2020-02-04 10:48:05","https://drive.google.com/uc?id=1Wfn51WwJjih0AVzq_5aGraRrFBRi9IVZ&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307792/","anonymous"
 "307791","2020-02-04 10:47:27","https://drive.google.com/uc?id=1Wc7guj9eHqpGNlncefZREXWZNH0aWUsx&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307791/","anonymous"
-"307790","2020-02-04 10:46:50","https://drive.google.com/uc?id=1WTH7IEtiZxJDXTT08KXqmwWPg06JHKny&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307790/","anonymous"
-"307789","2020-02-04 10:46:10","https://drive.google.com/uc?id=1WGF1tFV-45XAnPsCiM_-Qa1jVcvmu2L0&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307789/","anonymous"
-"307788","2020-02-04 10:45:30","https://drive.google.com/uc?id=1V33RvQYtik_05G8L7j1ZOh2bFRSED1jO&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307788/","anonymous"
+"307790","2020-02-04 10:46:50","https://drive.google.com/uc?id=1WTH7IEtiZxJDXTT08KXqmwWPg06JHKny&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307790/","anonymous"
+"307789","2020-02-04 10:46:10","https://drive.google.com/uc?id=1WGF1tFV-45XAnPsCiM_-Qa1jVcvmu2L0&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307789/","anonymous"
+"307788","2020-02-04 10:45:30","https://drive.google.com/uc?id=1V33RvQYtik_05G8L7j1ZOh2bFRSED1jO&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307788/","anonymous"
 "307787","2020-02-04 10:44:49","https://drive.google.com/uc?id=1UtjzrrvzERsE30661n2cEhndnX2gFD8E&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307787/","anonymous"
-"307786","2020-02-04 10:44:12","https://drive.google.com/uc?id=1UM7LLwZG_6JrCMimZKCPchKpaHX-OqEw&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307786/","anonymous"
+"307786","2020-02-04 10:44:12","https://drive.google.com/uc?id=1UM7LLwZG_6JrCMimZKCPchKpaHX-OqEw&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307786/","anonymous"
 "307785","2020-02-04 10:43:31","https://drive.google.com/uc?id=1TkrKt8-RKK2iCCq5I9X9k2RnvVYUEtB5&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307785/","anonymous"
 "307784","2020-02-04 10:42:51","https://drive.google.com/uc?id=1TDG9L1eh2_ftRCmgAg49I21B5Rkk5VVP&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307784/","anonymous"
 "307783","2020-02-04 10:42:12","https://drive.google.com/uc?id=1T0PifXVBXlQnbeIIfyzZgUovHXrBWLcE&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307783/","anonymous"
@@ -45836,14 +46356,14 @@
 "307780","2020-02-04 10:40:13","https://drive.google.com/uc?id=1UtaEcIgQj1b1XEJDmmx0hKRhJfpUsKoq&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307780/","anonymous"
 "307779","2020-02-04 10:39:32","https://drive.google.com/uc?id=1UhthVx42-XLvzAn4f9pBu5NPfWJlxfDH&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307779/","anonymous"
 "307778","2020-02-04 10:38:53","https://drive.google.com/uc?id=1UZ8Tk-vD8rm4_0w-arzmAhvdCRIVtziA&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307778/","anonymous"
-"307777","2020-02-04 10:38:17","https://drive.google.com/uc?id=1Sfzt17of6fhHwrLcjvvBbz7_oFNQkBz_&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307777/","anonymous"
+"307777","2020-02-04 10:38:17","https://drive.google.com/uc?id=1Sfzt17of6fhHwrLcjvvBbz7_oFNQkBz_&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307777/","anonymous"
 "307776","2020-02-04 10:37:36","https://drive.google.com/uc?id=1SIZYCC0bfWDR_lRWXCbjkLeahSX5zwtk&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307776/","anonymous"
 "307775","2020-02-04 10:36:56","https://drive.google.com/uc?id=1SBtDW65TmI9xw9P8RPjqBXW6TihYWo1e&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307775/","anonymous"
 "307774","2020-02-04 10:36:19","https://drive.google.com/uc?id=1RgxsziNNb5QxX1r3D4lo7lbHmu9ZUmxQ&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307774/","anonymous"
 "307773","2020-02-04 10:35:40","https://drive.google.com/uc?id=1RBWxvlXqiYIHkJ2hd1JGx_p5wrmjKrhv&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307773/","anonymous"
 "307772","2020-02-04 10:34:59","https://drive.google.com/uc?id=1PikJhoh2c3V08ia-TAWnqVECDZIg0p5w&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307772/","anonymous"
 "307771","2020-02-04 10:34:21","https://drive.google.com/uc?id=1P3a-Bgww5-uNCf7jivYrJiUbe0Nh5brQ&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307771/","anonymous"
-"307770","2020-02-04 10:33:43","https://drive.google.com/uc?id=1Ojo9zZHAdSQo5itSQipXmKZsXMv2wI_F&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307770/","anonymous"
+"307770","2020-02-04 10:33:43","https://drive.google.com/uc?id=1Ojo9zZHAdSQo5itSQipXmKZsXMv2wI_F&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307770/","anonymous"
 "307769","2020-02-04 10:33:04","https://drive.google.com/uc?id=1OicjBcLJgStn4DU3vdVocZgs0UQWx0Db&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307769/","anonymous"
 "307768","2020-02-04 10:32:26","https://drive.google.com/uc?id=1OiCQmiwFWSInsOUkfUqV199oqq1fric2&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307768/","anonymous"
 "307767","2020-02-04 10:31:46","https://drive.google.com/uc?id=1OM-t2rOPN1Vvv7c3pKn3jAeY7KKFhuJV&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307767/","anonymous"
@@ -45853,7 +46373,7 @@
 "307763","2020-02-04 10:30:52","https://drive.google.com/uc?id=1MVwZNCXe_ovMebsUTfBuKS5L4uLgNUDB&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307763/","anonymous"
 "307762","2020-02-04 10:30:41","https://drive.google.com/uc?id=1MV5sWw5SnUpR0B3qEodOdVPKyJN_yb3F&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307762/","anonymous"
 "307761","2020-02-04 10:30:23","https://drive.google.com/uc?id=1M3WD9JN3pArqy16qCYDE3CYHX8HOaYAE&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307761/","anonymous"
-"307760","2020-02-04 10:30:17","https://drive.google.com/uc?id=1LhafSS6su5DEIN9yyNuQG59h1CvunBvB&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307760/","anonymous"
+"307760","2020-02-04 10:30:17","https://drive.google.com/uc?id=1LhafSS6su5DEIN9yyNuQG59h1CvunBvB&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307760/","anonymous"
 "307759","2020-02-04 10:30:07","https://drive.google.com/uc?id=1LNS_GO-zKDZEtNAjgCzQEF2qRopXAVb_&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307759/","anonymous"
 "307758","2020-02-04 10:29:55","https://drive.google.com/uc?id=1LKgO9nwhERXcyRjrHI7FfWoz994ZON3X&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307758/","anonymous"
 "307757","2020-02-04 10:29:45","https://drive.google.com/uc?id=1LCmU55qku949nelQc3aSJTPRFH-ZYqdk&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307757/","anonymous"
@@ -45861,10 +46381,10 @@
 "307755","2020-02-04 10:29:17","https://drive.google.com/uc?id=1KuDGRy6Jc6KgEK5RoGAe0gxNagx28kBc&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307755/","anonymous"
 "307754","2020-02-04 10:29:04","https://drive.google.com/uc?id=1KrS8y_CyFXY9BpqaUeWhQ_hYhWyjhK4N&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307754/","anonymous"
 "307753","2020-02-04 10:28:50","https://drive.google.com/uc?id=1KT0Zsu7Jx7IOca5AEM6UFHxTrWIi8Ahh&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307753/","anonymous"
-"307752","2020-02-04 10:28:37","https://drive.google.com/uc?id=1KNQ3yXeap3r--mdyimno8MAA6dCCVVJ9&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307752/","anonymous"
+"307752","2020-02-04 10:28:37","https://drive.google.com/uc?id=1KNQ3yXeap3r--mdyimno8MAA6dCCVVJ9&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307752/","anonymous"
 "307751","2020-02-04 10:28:27","https://drive.google.com/uc?id=1KETGDx1w0kDxMz5IczKJyZgWld9e5c1z&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307751/","anonymous"
 "307750","2020-02-04 10:28:19","https://drive.google.com/uc?id=1J0gOjWpBzhlA91mTCzt66XqhsYUW3YlO&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307750/","anonymous"
-"307749","2020-02-04 10:28:08","https://drive.google.com/uc?id=1J0OilLtgVEjK-pZs3nr6JqXhwV4XpL_Z&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307749/","anonymous"
+"307749","2020-02-04 10:28:08","https://drive.google.com/uc?id=1J0OilLtgVEjK-pZs3nr6JqXhwV4XpL_Z&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307749/","anonymous"
 "307748","2020-02-04 10:27:56","https://drive.google.com/uc?id=1InJiLyKaSr0v4pJW2qDGZQAHEahFhORq&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307748/","anonymous"
 "307747","2020-02-04 10:27:48","https://drive.google.com/uc?id=1I9qQVnGRnor0pjF8phkvVfIc5oPBLAtW&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307747/","anonymous"
 "307746","2020-02-04 10:27:32","https://drive.google.com/uc?id=1HUX-kOprX8jxUQ72wyhtIOaDoOFMUj0H&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307746/","anonymous"
@@ -45874,33 +46394,33 @@
 "307742","2020-02-04 10:26:41","https://drive.google.com/uc?id=1Fq1h4wGuxTesFwhKZUXkMJ42f2ugsnSB&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307742/","anonymous"
 "307741","2020-02-04 10:26:30","https://drive.google.com/uc?id=1FgZauaskUQaI7rNZsllaK1A5ME9vhLwk&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307741/","anonymous"
 "307740","2020-02-04 10:26:19","https://drive.google.com/uc?id=1Fbhlj-ruP2QtiE-0JpUwNPSyWvfr79mX&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307740/","anonymous"
-"307739","2020-02-04 10:26:08","https://drive.google.com/uc?id=1FMh4uRMRHBQeb620WgaFHXtJRb3SQCde&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307739/","anonymous"
-"307738","2020-02-04 10:25:51","https://drive.google.com/uc?id=1F7lZWTsnxJpLeNPWHxjHYrxtq0bb3sKn&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307738/","anonymous"
+"307739","2020-02-04 10:26:08","https://drive.google.com/uc?id=1FMh4uRMRHBQeb620WgaFHXtJRb3SQCde&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307739/","anonymous"
+"307738","2020-02-04 10:25:51","https://drive.google.com/uc?id=1F7lZWTsnxJpLeNPWHxjHYrxtq0bb3sKn&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307738/","anonymous"
 "307737","2020-02-04 10:25:39","https://drive.google.com/uc?id=1Ejs7oz5lCEqG7XELf2NOBTCVEUrFO5-9&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307737/","anonymous"
 "307736","2020-02-04 10:25:17","https://drive.google.com/uc?id=1EF1B2fpcD5NpVcVxK9yDI0ILvL32bw6-&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307736/","anonymous"
-"307735","2020-02-04 10:25:05","https://drive.google.com/uc?id=1E3fBq0KE5bRJQWhXpOcRJfH4koP2u2Yt&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307735/","anonymous"
+"307735","2020-02-04 10:25:05","https://drive.google.com/uc?id=1E3fBq0KE5bRJQWhXpOcRJfH4koP2u2Yt&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307735/","anonymous"
 "307734","2020-02-04 10:24:55","https://drive.google.com/uc?id=1DrUzGO75_C83AmpMtRe8sGDlTCOtUBQR&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307734/","anonymous"
 "307733","2020-02-04 10:24:49","https://drive.google.com/uc?id=1DaDBxisVsFHvys6rQBianVn8-jMZ_xHW&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307733/","anonymous"
 "307732","2020-02-04 10:24:40","https://drive.google.com/uc?id=1CzjKGC6w-X7BXMVOzyxrj6GpsDgBg7Lz&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307732/","anonymous"
 "307731","2020-02-04 10:24:33","https://drive.google.com/uc?id=1CS6TeW8QokAA-Oa1pX7eZzdTcz4OMzt2&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307731/","anonymous"
 "307730","2020-02-04 10:24:21","https://drive.google.com/uc?id=1CR5NMckwHWcZF7k8czkYrjnaAvRl81r-&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307730/","anonymous"
 "307729","2020-02-04 10:24:05","https://drive.google.com/uc?id=1CMBC2XI7tZPEyxvetYT6wUsdHzZMlO-z&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307729/","anonymous"
-"307728","2020-02-04 10:23:55","https://drive.google.com/uc?id=1CMACUq33RYMigRwzqUOw3PMy0Jqj5rfC&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307728/","anonymous"
+"307728","2020-02-04 10:23:55","https://drive.google.com/uc?id=1CMACUq33RYMigRwzqUOw3PMy0Jqj5rfC&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307728/","anonymous"
 "307727","2020-02-04 10:23:46","https://drive.google.com/uc?id=1Bln6sJrsP0rHiltWH13lVC9Ib1iOdnDy&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307727/","anonymous"
-"307726","2020-02-04 10:23:36","https://drive.google.com/uc?id=1BdR4L1TYa3K2GnSa75ADdBppHZBa7-ed&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307726/","anonymous"
-"307725","2020-02-04 10:23:16","https://drive.google.com/uc?id=1AuxC_ZGdjxVqDVqZyFJM0fBv6WqnxJtm&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307725/","anonymous"
+"307726","2020-02-04 10:23:36","https://drive.google.com/uc?id=1BdR4L1TYa3K2GnSa75ADdBppHZBa7-ed&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307726/","anonymous"
+"307725","2020-02-04 10:23:16","https://drive.google.com/uc?id=1AuxC_ZGdjxVqDVqZyFJM0fBv6WqnxJtm&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307725/","anonymous"
 "307724","2020-02-04 10:22:55","https://drive.google.com/uc?id=18zj7g3KQJ7bDXszqBS8rLt_2Wip66bVR&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307724/","anonymous"
 "307723","2020-02-04 10:22:45","https://drive.google.com/uc?id=18kyUvYqrijiWaPRFcD6HHcREGQsBCOAA&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307723/","anonymous"
 "307722","2020-02-04 10:22:33","https://drive.google.com/uc?id=18SExGnMLthfmhIfyRH2CG6BZcuQlcIov&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307722/","anonymous"
 "307721","2020-02-04 10:22:25","https://drive.google.com/uc?id=18QTg5wg8yoDv9vHvwTjLZmjZj_LAeCeb&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307721/","anonymous"
 "307720","2020-02-04 10:22:04","https://drive.google.com/uc?id=17gWftX7USgVZ--OsONHnF2olG37Y0sG9&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307720/","anonymous"
-"307719","2020-02-04 10:21:50","https://drive.google.com/uc?id=17HM5rH8-k-9i5xdKZro7QprMFDmH50S8&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307719/","anonymous"
+"307719","2020-02-04 10:21:50","https://drive.google.com/uc?id=17HM5rH8-k-9i5xdKZro7QprMFDmH50S8&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307719/","anonymous"
 "307718","2020-02-04 10:21:42","https://drive.google.com/uc?id=17EKkalCO1UrHTx_JfEqsd7zdLfglJZxO&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307718/","anonymous"
 "307717","2020-02-04 10:21:33","https://drive.google.com/uc?id=174YWAepHs5rvQwfcuMjX6lV5NlmCEJH3&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307717/","anonymous"
-"307716","2020-02-04 10:21:15","https://drive.google.com/uc?id=171sjKm4dE3BDRjMPH_KiL9VW6Q_Hrw9K&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307716/","anonymous"
-"307715","2020-02-04 10:21:05","https://drive.google.com/uc?id=16j2VaMco6eeK2r7WysV9DpxKGmOHLKRl&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307715/","anonymous"
+"307716","2020-02-04 10:21:15","https://drive.google.com/uc?id=171sjKm4dE3BDRjMPH_KiL9VW6Q_Hrw9K&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307716/","anonymous"
+"307715","2020-02-04 10:21:05","https://drive.google.com/uc?id=16j2VaMco6eeK2r7WysV9DpxKGmOHLKRl&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307715/","anonymous"
 "307714","2020-02-04 10:20:54","https://drive.google.com/uc?id=16Dom_hq4d7zjACI6CpcbRSXnzxCl_BjM&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307714/","anonymous"
-"307713","2020-02-04 10:20:38","https://drive.google.com/uc?id=15mI9KSEuwl_wsS8S3LJwb2FcIHbSbm08&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307713/","anonymous"
+"307713","2020-02-04 10:20:38","https://drive.google.com/uc?id=15mI9KSEuwl_wsS8S3LJwb2FcIHbSbm08&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307713/","anonymous"
 "307712","2020-02-04 10:20:30","https://drive.google.com/uc?id=15kDLBhZGAYgq0bmx6DvIN0OR9DwcXb0R&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307712/","anonymous"
 "307711","2020-02-04 10:20:21","https://drive.google.com/uc?id=15jCDHPsXD57mK5Uyz4uHO_2yxXqUcUxs&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307711/","anonymous"
 "307710","2020-02-04 10:20:11","https://drive.google.com/uc?id=15ezPMFLtcegv27J9yn2jOORuCzzbrUQQ&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307710/","anonymous"
@@ -45910,7 +46430,7 @@
 "307706","2020-02-04 10:18:05","https://drive.google.com/uc?id=156vgcdppzrh0ZebX1v2NtmqeryNM2sN-&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307706/","anonymous"
 "307705","2020-02-04 10:17:25","https://drive.google.com/uc?id=14y_4HYfQwhCvzMaVfNnEDj7IR9Nuxm1K&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307705/","anonymous"
 "307704","2020-02-04 10:16:44","https://drive.google.com/uc?id=13ykLuAL1rAe629hyF9DqmcnXgmZ2GaRF&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307704/","anonymous"
-"307703","2020-02-04 10:16:04","https://drive.google.com/uc?id=13rTqmEw0lHEDa_wXQSw0KI24xn1nDFQB&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307703/","anonymous"
+"307703","2020-02-04 10:16:04","https://drive.google.com/uc?id=13rTqmEw0lHEDa_wXQSw0KI24xn1nDFQB&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307703/","anonymous"
 "307702","2020-02-04 10:15:24","https://drive.google.com/uc?id=13c3vGeb97ThGFyk4OmxeBXM2P1pO7DKq&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307702/","anonymous"
 "307701","2020-02-04 10:14:44","https://drive.google.com/uc?id=13bSK68ISDHsbtWmrEQuSoZ7qEMZq9Czo&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307701/","anonymous"
 "307700","2020-02-04 10:14:07","https://drive.google.com/uc?id=13MIp1QwlIWu6sqNJbMzGB--FKZ9DWkyf&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307700/","anonymous"
@@ -45922,7 +46442,7 @@
 "307694","2020-02-04 10:10:13","https://drive.google.com/uc?id=1-tUvy-tTe-S9lgsLF60lGD2pBZmH8TZd&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307694/","anonymous"
 "307693","2020-02-04 10:09:36","https://drive.google.com/uc?id=1-BsvArvf3LARNhVXGVaNFPDU9bex9LyN&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307693/","anonymous"
 "307692","2020-02-04 10:08:55","https://drive.google.com/uc?id=1-74VX2pAwC25aTPvWTN0PNWMlxVMPobE&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307692/","anonymous"
-"307691","2020-02-04 10:08:15","https://drive.google.com/uc?id=1-3kFaMujRY9yLfLp1Lt1nhK9_KO30wAu&export=download","offline","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307691/","anonymous"
+"307691","2020-02-04 10:08:15","https://drive.google.com/uc?id=1-3kFaMujRY9yLfLp1Lt1nhK9_KO30wAu&export=download","online","malware_download","exe,Gozi,password,vbs,zip","https://urlhaus.abuse.ch/url/307691/","anonymous"
 "307690","2020-02-04 10:07:37","http://sikorskyleze.com/abc/client32.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/307690/","vxvault"
 "307689","2020-02-04 10:06:02","http://173.242.133.210:57605/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/307689/","Gandylyan1"
 "307688","2020-02-04 10:05:57","http://121.232.166.197:55513/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/307688/","Gandylyan1"
@@ -53400,10 +53920,10 @@
 "300182","2020-01-28 17:20:07","http://chatbot.fontineles.com/wp-admin/sites/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/300182/","spamhaus"
 "300181","2020-01-28 17:15:08","http://cvis.net.ph/wp2/report/6l1wg47056-432020040-5k6u8dcmcx3brufduckscf/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/300181/","spamhaus"
 "300180","2020-01-28 17:13:07","http://bolehprediksi.com/wp-includes/tWsI/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/300180/","spamhaus"
-"300179","2020-01-28 17:11:07","http://demo10.onbm.ir/wp-admin/DOC/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/300179/","spamhaus"
+"300179","2020-01-28 17:11:07","http://demo10.onbm.ir/wp-admin/DOC/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/300179/","spamhaus"
 "300178","2020-01-28 17:10:17","http://creativenerd.rw/wp-admin/available_disk/880985858010_vaYXpXwLYyWvhr_zu8ijal25izf_na7c4dj558/51100876_RZYWEBfzc/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/300178/","Cryptolaemus1"
 "300177","2020-01-28 17:07:13","http://dadrasin.ir/wp-admin/closed-array/verified-YxxRydzY-5UaJn6ePsAHDR/ywde6u-7w9zx37u/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/300177/","Cryptolaemus1"
-"300176","2020-01-28 17:07:04","http://demo10.onbm.ir/wp-admin/js/widgets/INC/INC/ptnv4244sss/n0545914536-085492-ppxzs05znzhoh6hzc2s3j/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/300176/","spamhaus"
+"300176","2020-01-28 17:07:04","http://demo10.onbm.ir/wp-admin/js/widgets/INC/INC/ptnv4244sss/n0545914536-085492-ppxzs05znzhoh6hzc2s3j/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/300176/","spamhaus"
 "300175","2020-01-28 17:06:18","http://66.38.89.218:37249/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/300175/","Gandylyan1"
 "300174","2020-01-28 17:06:13","http://42.227.184.3:58311/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/300174/","Gandylyan1"
 "300173","2020-01-28 17:06:09","http://72.2.243.14:60660/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/300173/","Gandylyan1"
@@ -53435,7 +53955,7 @@
 "300147","2020-01-28 17:02:18","http://www.loansupports.com/library/mailer/1","offline","malware_download","None","https://urlhaus.abuse.ch/url/300147/","JayTHL"
 "300146","2020-01-28 17:02:13","https://dailyhealth.life/wp-admin/uBXSy/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/300146/","Cryptolaemus1"
 "300145","2020-01-28 17:01:17","http://dev.lumedio.com/onptlekdj24sf/available-008788-ye003FsPd/4bqmcu6fmqpu54-r2z7-eV0Y6Ke-IWTGwsCW841wR/P1nH52iue-NzrKvnH0nbdJ/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/300145/","Cryptolaemus1"
-"300144","2020-01-28 17:01:13","http://demo10.onbm.ir/wp-admin/report/8a9j4bp/5awgnu2922719-24747-yyrd9au8wt8ww6w2/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/300144/","spamhaus"
+"300144","2020-01-28 17:01:13","http://demo10.onbm.ir/wp-admin/report/8a9j4bp/5awgnu2922719-24747-yyrd9au8wt8ww6w2/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/300144/","spamhaus"
 "300143","2020-01-28 17:00:07","http://executivejeepram.com/478_74324.php","offline","malware_download","None","https://urlhaus.abuse.ch/url/300143/","JayTHL"
 "300142","2020-01-28 16:58:17","http://dessertrecipeseasy.com/wp-content/LLC/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/300142/","spamhaus"
 "300141","2020-01-28 16:55:16","http://desentupidoraguarulhos.com.br/cgi-bin/protected_9632521734_YjJE1RyaeTtw/close_area/xU7osk9N0K5M_vorM53Hyzvrjd/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/300141/","Cryptolaemus1"
@@ -55589,7 +56109,7 @@
 "297987","2020-01-25 18:03:16","http://103.110.16.19:42958/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/297987/","Gandylyan1"
 "297986","2020-01-25 18:03:13","http://111.42.102.136:57911/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/297986/","Gandylyan1"
 "297985","2020-01-25 18:03:10","http://180.218.122.48:49782/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/297985/","zbetcheckin"
-"297984","2020-01-25 18:03:05","http://211.57.175.216:49177/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/297984/","zbetcheckin"
+"297984","2020-01-25 18:03:05","http://211.57.175.216:49177/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/297984/","zbetcheckin"
 "297983","2020-01-25 17:23:04","https://themetalofficemeals.com.pl/buin/build_encrypted_25D06B0.bin","offline","malware_download","encrypted,Loki","https://urlhaus.abuse.ch/url/297983/","abuse_ch"
 "297982","2020-01-25 17:19:06","https://pastebin.com/raw/zSCxDknF","offline","malware_download","None","https://urlhaus.abuse.ch/url/297982/","JayTHL"
 "297981","2020-01-25 17:06:25","http://111.43.223.45:49211/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/297981/","Gandylyan1"
@@ -56516,7 +57036,7 @@
 "297057","2020-01-24 12:04:15","http://61.2.156.229:59133/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/297057/","Gandylyan1"
 "297056","2020-01-24 12:04:05","http://42.232.221.128:37789/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/297056/","Gandylyan1"
 "297055","2020-01-24 12:03:59","http://119.41.62.225:40404/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/297055/","Gandylyan1"
-"297054","2020-01-24 12:03:51","http://176.113.161.76:44031/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/297054/","Gandylyan1"
+"297054","2020-01-24 12:03:51","http://176.113.161.76:44031/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/297054/","Gandylyan1"
 "297053","2020-01-24 12:03:42","http://42.224.123.47:33624/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/297053/","Gandylyan1"
 "297052","2020-01-24 12:03:34","http://111.43.223.91:43217/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/297052/","Gandylyan1"
 "297051","2020-01-24 12:03:28","http://211.137.225.95:44726/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/297051/","Gandylyan1"
@@ -58561,7 +59081,7 @@
 "295008","2020-01-22 16:54:36","http://texasveteransroofing.com/nofij3ksa/1p79ylo-wn7s6-53005/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/295008/","spamhaus"
 "295007","2020-01-22 16:51:11","http://vikstory.ca/h/parts_service/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/295007/","spamhaus"
 "295006","2020-01-22 16:50:36","http://updatedmail.com/Ordre%20de%20virement%20212020.zip","offline","malware_download","js,zip","https://urlhaus.abuse.ch/url/295006/","anonymous"
-"295005","2020-01-22 16:46:04","http://riskxai.com/web_images/Fc/","online","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/295005/","spamhaus"
+"295005","2020-01-22 16:46:04","http://riskxai.com/web_images/Fc/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/295005/","spamhaus"
 "295004","2020-01-22 16:45:04","https://empleos.tuprimerlaburo.com.ar/wp-content/invoice/vcf9ccnb/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/295004/","spamhaus"
 "295003","2020-01-22 16:42:07","https://nsd4kt.co.za/swift/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/295003/","spamhaus"
 "295002","2020-01-22 16:41:04","http://med-shop24.ru/wp-content/pwodd6db-c4j-657/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/295002/","spamhaus"
@@ -60507,7 +61027,7 @@
 "293056","2020-01-21 00:04:09","http://111.43.223.151:58411/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/293056/","Gandylyan1"
 "293055","2020-01-21 00:04:05","http://111.42.66.93:45140/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/293055/","Gandylyan1"
 "293054","2020-01-21 00:01:08","http://gotechandafricanfountanain.nmco.co.za/wp-admin/esp/4olj94hs0u/6z8ho93-8004114033-8890-lgi26mpn-ek74/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/293054/","spamhaus"
-"293053","2020-01-20 23:59:04","http://14.141.175.107/cryptominerbros/wordpress/wp-content/Vh/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/293053/","Cryptolaemus1"
+"293053","2020-01-20 23:59:04","http://14.141.175.107/cryptominerbros/wordpress/wp-content/Vh/","online","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/293053/","Cryptolaemus1"
 "293052","2020-01-20 23:55:09","https://mesi.edu.vn/wp-includes/DOC/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/293052/","spamhaus"
 "293051","2020-01-20 23:49:05","http://vedarshnitourism.com/calendar/Document/rp1t1p/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/293051/","Cryptolaemus1"
 "293050","2020-01-20 23:46:06","https://dreamysky.cf/wp-admin/lm/qsley3/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/293050/","spamhaus"
@@ -60829,7 +61349,7 @@
 "292734","2020-01-20 14:16:06","https://vetih.com/wp-includes/protected-8o4zsi80-q9hfx79tr3q/test-area/t77qn3izn9637llm-6tux359x21s7sw/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/292734/","Cryptolaemus1"
 "292733","2020-01-20 14:13:11","http://868sc.com/ubiks365kfjwe/available-244447-zj2fD0pw2DWckmVU/corporate-cloud/4205157706-5AUkZynAW/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/292733/","Cryptolaemus1"
 "292732","2020-01-20 14:13:06","https://v5wp.com/wp-content/browse/r7hzgu3-10362052-487-m5w8dgiu-fkxph9f74n4/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/292732/","spamhaus"
-"292731","2020-01-20 14:08:19","http://riskxai.com/web_images/personal-module/verified-342641311936-NnXAHZgtmV2/618423295-rvAf4m/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/292731/","Cryptolaemus1"
+"292731","2020-01-20 14:08:19","http://riskxai.com/web_images/personal-module/verified-342641311936-NnXAHZgtmV2/618423295-rvAf4m/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/292731/","Cryptolaemus1"
 "292730","2020-01-20 14:08:15","http://3tcgroup.com/fooddemo/statement/7syu3t3vvu/ipmf-768459-33836-p0kepsc-h3j11dyty9/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/292730/","spamhaus"
 "292729","2020-01-20 14:07:16","https://www.secmc.com.pk/wp-includes/mb1lr-qsbx-821219/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/292729/","Cryptolaemus1"
 "292728","2020-01-20 14:07:09","https://pastebin.com/raw/0DPaWPLg","offline","malware_download","NanoCore,rat","https://urlhaus.abuse.ch/url/292728/","abuse_ch"
@@ -61130,7 +61650,7 @@
 "292432","2020-01-20 07:05:48","http://222.137.26.148:39374/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/292432/","Gandylyan1"
 "292431","2020-01-20 07:05:43","http://113.248.97.94:34871/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/292431/","Gandylyan1"
 "292430","2020-01-20 07:05:39","http://180.117.195.123:45028/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/292430/","Gandylyan1"
-"292429","2020-01-20 07:05:34","http://176.113.161.72:55702/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/292429/","Gandylyan1"
+"292429","2020-01-20 07:05:34","http://176.113.161.72:55702/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/292429/","Gandylyan1"
 "292428","2020-01-20 07:05:32","http://42.233.159.223:57155/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/292428/","Gandylyan1"
 "292427","2020-01-20 07:05:29","http://218.21.171.207:59984/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/292427/","Gandylyan1"
 "292426","2020-01-20 07:05:26","http://211.137.225.83:37666/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/292426/","Gandylyan1"
@@ -62383,7 +62903,7 @@
 "291169","2020-01-17 19:04:08","http://117.207.36.76:45858/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/291169/","Gandylyan1"
 "291168","2020-01-17 19:04:05","https://sharevission.com/wp-content/statement/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/291168/","spamhaus"
 "291167","2020-01-17 19:02:03","http://masputra.site/wp-admin/PDLZLrcy/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/291167/","Cryptolaemus1"
-"291166","2020-01-17 18:58:10","http://141.226.94.115:29501/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/291166/","zbetcheckin"
+"291166","2020-01-17 18:58:10","http://141.226.94.115:29501/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/291166/","zbetcheckin"
 "291165","2020-01-17 18:58:08","http://109.66.108.57:36684/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/291165/","zbetcheckin"
 "291164","2020-01-17 18:58:05","https://edufoxconsultancy.000webhostapp.com/wp-admin/Document/r49led0454/cuey5jm-7404-9065188-webo1huom7v-1cle3l/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/291164/","spamhaus"
 "291163","2020-01-17 18:54:06","https://jack8.tk/test/Documentation/r-237407240-33542594-2yn1kereb-5264jl7jzu/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/291163/","spamhaus"
@@ -62458,7 +62978,7 @@
 "291094","2020-01-17 17:04:49","http://211.137.225.60:45593/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/291094/","Gandylyan1"
 "291093","2020-01-17 17:04:45","http://222.137.74.230:43893/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/291093/","Gandylyan1"
 "291092","2020-01-17 17:04:41","http://211.137.225.61:47602/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/291092/","Gandylyan1"
-"291091","2020-01-17 17:04:38","http://1.246.223.60:1757/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/291091/","Gandylyan1"
+"291091","2020-01-17 17:04:38","http://1.246.223.60:1757/Mozi.m","online","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/291091/","Gandylyan1"
 "291090","2020-01-17 17:04:34","http://36.105.30.53:46472/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/291090/","Gandylyan1"
 "291089","2020-01-17 17:04:23","http://111.43.223.57:51687/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/291089/","Gandylyan1"
 "291088","2020-01-17 17:04:20","http://111.43.223.96:43897/Mozi.m","offline","malware_download","elf,Mozi","https://urlhaus.abuse.ch/url/291088/","Gandylyan1"
@@ -63759,7 +64279,7 @@
 "289789","2020-01-16 06:47:28","http://papaya.ne.jp/wp-admin/available-section/46514007-RJysAaSQMgmf-rpjijzgmz0hj7xk-giy4d/ulz3AUMQmOHY-Mf5JvoIKMx/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/289789/","Cryptolaemus1"
 "289788","2020-01-16 06:47:25","http://sncshyamavan.org/old/personal_zone/guarded_920790106322_AH7Y625D/mn5_x938v3suy/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/289788/","Cryptolaemus1"
 "289787","2020-01-16 06:47:13","http://202.88.239.11/Ashrae/personal_array/close_profile/Ou3p4qlQ88_7a14MGJgjukp/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/289787/","Cryptolaemus1"
-"289786","2020-01-16 06:47:08","http://14.141.175.107/cryptominerbros/wordpress/wp-content/personal-resource/open-area/taEBVjv5p25-Kqics3u9Mv/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/289786/","Cryptolaemus1"
+"289786","2020-01-16 06:47:08","http://14.141.175.107/cryptominerbros/wordpress/wp-content/personal-resource/open-area/taEBVjv5p25-Kqics3u9Mv/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/289786/","Cryptolaemus1"
 "289785","2020-01-16 06:46:56","https://www.iamselorm.com/faliqx/available_sector/verifiable_space/BcG9V3VH_xinrckL2q/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/289785/","Cryptolaemus1"
 "289784","2020-01-16 06:46:51","http://justinscolary.com/activate/common-Os8LoDd5OL-PDb3tGYws5/guarded-profile/40215237567-cijTWgvY4XC1l/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/289784/","Cryptolaemus1"
 "289783","2020-01-16 06:46:29","http://mif.zu.edu.jo/4337/protected_disk/open_444909919_8zU6moe/2471995119771_hIftfJj/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/289783/","Cryptolaemus1"
@@ -65014,7 +65534,7 @@
 "288502","2020-01-14 20:49:03","http://zapisi.ru/wp-includes/sites/u7w3dywu/rj2rzl-0080278-21223629-iybr8x-fyx2r/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/288502/","spamhaus"
 "288501","2020-01-14 20:46:06","http://xoweb.cn/wmjqlv/DOC/4xi8miry/7r-700999-2327855-s0yre73qxq8-3dxr/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/288501/","spamhaus"
 "288500","2020-01-14 20:44:33","http://gentlechirocenter.com/chiropractic/uxlTjh-jv0sFddeoUDoQ-section/open-area/973119-YVtysCWuaxnx/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/288500/","Cryptolaemus1"
-"288499","2020-01-14 20:40:12","http://219.68.242.33:41865/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/288499/","zbetcheckin"
+"288499","2020-01-14 20:40:12","http://219.68.242.33:41865/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/288499/","zbetcheckin"
 "288498","2020-01-14 20:40:06","http://23.228.113.117/53","offline","malware_download","elf","https://urlhaus.abuse.ch/url/288498/","zbetcheckin"
 "288497","2020-01-14 20:39:04","http://amnda.in/database/closed-zone/verified-982gc9-ln9lsd8afi4/9035935897912-iwfJOT5dn7N/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/288497/","Cryptolaemus1"
 "288496","2020-01-14 20:38:04","http://tuyensinhv2.elo.edu.vn/calendar/Reporting/8ahi-62223402-2047850-ttzu4b-zsbmo2gdwgpi/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/288496/","spamhaus"
@@ -69669,7 +70189,7 @@
 "283789","2020-01-07 14:04:06","http://180.118.255.125:37372/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283789/","Gandylyan1"
 "283788","2020-01-07 13:42:35","https://pastebin.com/raw/FUmPxLse","offline","malware_download","None","https://urlhaus.abuse.ch/url/283788/","JayTHL"
 "283787","2020-01-07 13:29:09","https://bitbucket.org/discovercircle/2020/downloads/setup_c.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/283787/","abuse_ch"
-"283786","2020-01-07 13:23:42","http://www.87du.vip/svchast.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/283786/","Marco_Ramilli"
+"283786","2020-01-07 13:23:42","http://www.87du.vip/svchast.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/283786/","Marco_Ramilli"
 "283785","2020-01-07 13:03:21","http://59.95.39.36:44856/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283785/","Gandylyan1"
 "283784","2020-01-07 13:03:19","http://111.42.66.42:40159/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283784/","Gandylyan1"
 "283783","2020-01-07 13:03:15","http://175.214.73.136:58263/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283783/","Gandylyan1"
@@ -69927,7 +70447,7 @@
 "283526","2020-01-06 19:23:04","https://storage.googleapis.com/portalnfeletronica/NFeletronica03012020.zip","offline","malware_download","Banload,zip","https://urlhaus.abuse.ch/url/283526/","abuse_ch"
 "283525","2020-01-06 19:05:43","http://116.114.95.52:34143/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283525/","Gandylyan1"
 "283524","2020-01-06 19:05:40","http://121.233.0.200:48493/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283524/","Gandylyan1"
-"283523","2020-01-06 19:05:37","http://176.113.161.87:45399/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283523/","Gandylyan1"
+"283523","2020-01-06 19:05:37","http://176.113.161.87:45399/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/283523/","Gandylyan1"
 "283522","2020-01-06 19:05:35","http://222.74.186.176:44479/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283522/","Gandylyan1"
 "283521","2020-01-06 19:05:31","http://171.95.23.229:38602/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283521/","Gandylyan1"
 "283520","2020-01-06 19:05:28","http://177.67.163.176:41394/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/283520/","Gandylyan1"
@@ -72294,7 +72814,7 @@
 "281148","2019-12-30 11:38:51","http://176.113.161.129:35325/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281148/","Gandylyan1"
 "281147","2019-12-30 11:38:49","http://114.226.80.177:58060/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281147/","Gandylyan1"
 "281146","2019-12-30 11:38:45","http://111.43.223.38:33705/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281146/","Gandylyan1"
-"281145","2019-12-30 11:38:42","http://1.246.223.223:1992/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/281145/","Gandylyan1"
+"281145","2019-12-30 11:38:42","http://1.246.223.223:1992/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281145/","Gandylyan1"
 "281144","2019-12-30 11:38:38","http://172.39.23.172:59902/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281144/","Gandylyan1"
 "281143","2019-12-30 11:38:07","http://221.210.211.8:50198/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281143/","Gandylyan1"
 "281142","2019-12-30 11:38:03","http://171.95.17.236:38602/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281142/","Gandylyan1"
@@ -72369,8 +72889,8 @@
 "281073","2019-12-30 11:25:12","http://116.114.95.232:34700/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281073/","Gandylyan1"
 "281072","2019-12-30 11:25:09","http://111.40.111.192:44826/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281072/","Gandylyan1"
 "281071","2019-12-30 10:38:03","https://pastebin.com/raw/MuKE1H7z","offline","malware_download","None","https://urlhaus.abuse.ch/url/281071/","JayTHL"
-"281070","2019-12-30 09:51:16","http://download.xp666.com/xzqswf/AppConSer.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/281070/","zbetcheckin"
-"281069","2019-12-30 09:45:09","http://download.xp666.com/xzqswf/iniser.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/281069/","zbetcheckin"
+"281070","2019-12-30 09:51:16","http://download.xp666.com/xzqswf/AppConSer.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/281070/","zbetcheckin"
+"281069","2019-12-30 09:45:09","http://download.xp666.com/xzqswf/iniser.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/281069/","zbetcheckin"
 "281068","2019-12-30 05:36:08","http://66.85.173.6/image/TIN_X86.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/281068/","zbetcheckin"
 "281067","2019-12-30 05:28:05","http://66.85.173.6/image/updatefile.exe","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/281067/","zbetcheckin"
 "281066","2019-12-30 01:11:22","http://114.239.135.42:48551/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281066/","Gandylyan1"
@@ -72407,7 +72927,7 @@
 "281035","2019-12-29 22:45:05","http://111.43.223.182:37931/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281035/","Gandylyan1"
 "281034","2019-12-29 22:45:01","http://31.146.124.20:36427/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281034/","Gandylyan1"
 "281033","2019-12-29 22:44:59","http://183.158.73.102:54630/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281033/","Gandylyan1"
-"281032","2019-12-29 22:44:53","http://176.113.161.57:45399/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281032/","Gandylyan1"
+"281032","2019-12-29 22:44:53","http://176.113.161.57:45399/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/281032/","Gandylyan1"
 "281031","2019-12-29 22:44:51","http://36.105.242.189:39017/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281031/","Gandylyan1"
 "281030","2019-12-29 22:44:48","http://59.174.98.217:59325/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281030/","Gandylyan1"
 "281029","2019-12-29 22:44:43","http://172.36.34.195:35762/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/281029/","Gandylyan1"
@@ -73149,7 +73669,7 @@
 "280292","2019-12-27 20:08:50","http://111.42.66.146:57352/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280292/","Gandylyan1"
 "280291","2019-12-27 20:08:46","http://120.71.99.168:60637/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280291/","Gandylyan1"
 "280290","2019-12-27 20:08:43","http://36.49.250.97:59572/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280290/","Gandylyan1"
-"280289","2019-12-27 20:08:11","http://1.246.222.165:3619/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280289/","Gandylyan1"
+"280289","2019-12-27 20:08:11","http://1.246.222.165:3619/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/280289/","Gandylyan1"
 "280288","2019-12-27 20:08:06","http://114.107.175.98:53221/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280288/","Gandylyan1"
 "280287","2019-12-27 20:08:02","http://103.59.134.14:54027/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280287/","Gandylyan1"
 "280286","2019-12-27 19:12:10","http://111.42.102.171:50426/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/280286/","Gandylyan1"
@@ -73883,8 +74403,8 @@
 "279557","2019-12-27 03:40:04","http://www.meconservationschool.org/wp-content/themes/genesis/readme.exe","offline","malware_download","exe,PredatorStealer","https://urlhaus.abuse.ch/url/279557/","zbetcheckin"
 "279556","2019-12-27 03:36:06","http://lincolnaward.org/wp-content/themes/genesis/license.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/279556/","zbetcheckin"
 "279555","2019-12-27 03:32:13","http://www.lincolnaward.org/wp-content/themes/genesis/license.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/279555/","zbetcheckin"
-"279554","2019-12-27 03:32:08","http://lebedyn.info/wp-content/themes/genesis/license.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/279554/","zbetcheckin"
-"279553","2019-12-27 03:23:04","http://www.lebedyn.info/wp-content/themes/genesis/license.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/279553/","zbetcheckin"
+"279554","2019-12-27 03:32:08","http://lebedyn.info/wp-content/themes/genesis/license.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/279554/","zbetcheckin"
+"279553","2019-12-27 03:23:04","http://www.lebedyn.info/wp-content/themes/genesis/license.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/279553/","zbetcheckin"
 "279552","2019-12-27 03:19:06","http://meconservationschool.org/wp-content/themes/genesis/readme.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/279552/","zbetcheckin"
 "279551","2019-12-27 03:19:03","http://louisbenton.com/wp-content/themes/genesis/license.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/279551/","zbetcheckin"
 "279550","2019-12-27 02:56:03","http://31.146.124.107:41967","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/279550/","zbetcheckin"
@@ -74177,23 +74697,23 @@
 "279263","2019-12-26 23:33:53","https://dev.sebpo.net/aiim/Scan79064.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279263/","anonymous"
 "279262","2019-12-26 23:33:50","https://dev.sebpo.net/aiim/Scan794626.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279262/","anonymous"
 "279261","2019-12-26 23:33:47","https://dev.sebpo.net/aiim/Scan787778.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279261/","anonymous"
-"279260","2019-12-26 23:33:44","http://visagepk.com/Scan620141.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279260/","anonymous"
+"279260","2019-12-26 23:33:44","http://visagepk.com/Scan620141.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279260/","anonymous"
 "279259","2019-12-26 23:33:41","http://ultimatelamborghiniexperience.com/Scan519714.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279259/","anonymous"
 "279258","2019-12-26 23:33:39","http://ultimatelamborghiniexperience.com/Scan516977.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279258/","anonymous"
 "279257","2019-12-26 23:33:38","http://ultimatelamborghiniexperience.com/Scan514529.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279257/","anonymous"
-"279256","2019-12-26 23:33:35","http://www.zoeydeutchweb.com/Scan719307.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279256/","anonymous"
+"279256","2019-12-26 23:33:35","http://www.zoeydeutchweb.com/Scan719307.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279256/","anonymous"
 "279255","2019-12-26 23:33:33","http://www.zoeydeutchweb.com/Scan693492.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279255/","anonymous"
 "279254","2019-12-26 23:33:32","http://www.zoeydeutchweb.com/Scan681933.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279254/","anonymous"
 "279253","2019-12-26 23:33:30","http://www.wbkmt.com/Scan568515.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279253/","anonymous"
 "279252","2019-12-26 23:33:28","http://www.wbkmt.com/Scan567495.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279252/","anonymous"
-"279251","2019-12-26 23:33:26","http://www.wbkmt.com/Scan544303.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279251/","anonymous"
+"279251","2019-12-26 23:33:26","http://www.wbkmt.com/Scan544303.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279251/","anonymous"
 "279250","2019-12-26 23:33:24","http://www.voyantvision.net/Scan674251.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279250/","anonymous"
 "279249","2019-12-26 23:33:21","http://www.voyantvision.net/Scan647166.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279249/","anonymous"
-"279248","2019-12-26 23:33:18","http://www.vasoccernews.com/Scan53937.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279248/","anonymous"
-"279247","2019-12-26 23:33:17","http://www.vasoccernews.com/Scan538882.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279247/","anonymous"
+"279248","2019-12-26 23:33:18","http://www.vasoccernews.com/Scan53937.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279248/","anonymous"
+"279247","2019-12-26 23:33:17","http://www.vasoccernews.com/Scan538882.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279247/","anonymous"
 "279246","2019-12-26 23:33:15","http://www.vasoccernews.com/Scan537263.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279246/","anonymous"
-"279245","2019-12-26 23:33:13","http://www.urgentmessage.org/Scan618358.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279245/","anonymous"
-"279244","2019-12-26 23:33:11","http://www.urgentmessage.org/Scan592993.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279244/","anonymous"
+"279245","2019-12-26 23:33:13","http://www.urgentmessage.org/Scan618358.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279245/","anonymous"
+"279244","2019-12-26 23:33:11","http://www.urgentmessage.org/Scan592993.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279244/","anonymous"
 "279243","2019-12-26 23:33:08","http://www.ultimatepointsstore.com/Scan582389.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279243/","anonymous"
 "279242","2019-12-26 23:33:06","http://www.ultimatepointsstore.com/Scan580348.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279242/","anonymous"
 "279241","2019-12-26 23:33:05","http://www.ultimatepointsstore.com/Scan570071.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279241/","anonymous"
@@ -74206,11 +74726,11 @@
 "279234","2019-12-26 23:32:41","http://www.lebedyn.info/Scan425768.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279234/","anonymous"
 "279233","2019-12-26 23:32:39","http://www.lebedyn.info/Scan425026.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279233/","anonymous"
 "279232","2019-12-26 23:32:37","http://www.intoxicated-twilight.com/Scan272806.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279232/","anonymous"
-"279231","2019-12-26 23:32:35","http://www.intoxicated-twilight.com/Scan253297.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279231/","anonymous"
+"279231","2019-12-26 23:32:35","http://www.intoxicated-twilight.com/Scan253297.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279231/","anonymous"
 "279230","2019-12-26 23:32:33","http://www.ibr-mag.com/Scan343596.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279230/","anonymous"
 "279229","2019-12-26 23:32:31","http://www.ibr-mag.com/Scan341615.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279229/","anonymous"
 "279228","2019-12-26 23:32:28","http://www.ibr-mag.com/Scan340880.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279228/","anonymous"
-"279227","2019-12-26 23:32:25","http://www.hdxa.net/Scan151567.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279227/","anonymous"
+"279227","2019-12-26 23:32:25","http://www.hdxa.net/Scan151567.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279227/","anonymous"
 "279226","2019-12-26 23:32:14","http://www.hatcityblues.com/Scan304154.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279226/","anonymous"
 "279225","2019-12-26 23:32:11","http://www.hatcityblues.com/Scan296093.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279225/","anonymous"
 "279224","2019-12-26 23:32:07","http://www.halcat.com/Scan186323.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279224/","anonymous"
@@ -74239,16 +74759,16 @@
 "279201","2019-12-26 23:30:51","http://soflocoolers.com/Scan845198.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279201/","anonymous"
 "279200","2019-12-26 23:30:48","http://soflocoolers.com/Scan834741.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279200/","anonymous"
 "279199","2019-12-26 23:30:46","http://soflocoolers.com/Scan826440.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279199/","anonymous"
-"279198","2019-12-26 23:30:43","http://myhood.cl/Scan505329.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279198/","anonymous"
+"279198","2019-12-26 23:30:43","http://myhood.cl/Scan505329.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279198/","anonymous"
 "279197","2019-12-26 23:30:40","http://myhood.cl/Scan495082.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279197/","anonymous"
 "279196","2019-12-26 23:30:37","http://mediamatkat.fi/Scan470798.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279196/","anonymous"
 "279195","2019-12-26 23:30:32","http://mediamatkat.fi/Scan468654.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279195/","anonymous"
-"279194","2019-12-26 23:30:29","http://mediamatkat.fi/Scan457405.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279194/","anonymous"
+"279194","2019-12-26 23:30:29","http://mediamatkat.fi/Scan457405.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279194/","anonymous"
 "279193","2019-12-26 23:30:26","http://lobstermentours.com/Scan37712.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279193/","anonymous"
 "279192","2019-12-26 23:30:23","http://lobstermentours.com/Scan363358.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279192/","anonymous"
 "279191","2019-12-26 23:30:19","http://jyv.fi/Scan320062.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279191/","anonymous"
-"279190","2019-12-26 23:30:16","http://jyv.fi/Scan315318.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279190/","anonymous"
-"279189","2019-12-26 23:30:13","http://jyv.fi/Scan312111.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279189/","anonymous"
+"279190","2019-12-26 23:30:16","http://jyv.fi/Scan315318.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279190/","anonymous"
+"279189","2019-12-26 23:30:13","http://jyv.fi/Scan312111.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279189/","anonymous"
 "279188","2019-12-26 23:30:10","http://jarilindholm.com/Scan340839.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279188/","anonymous"
 "279187","2019-12-26 23:30:01","http://jarilindholm.com/Scan326716.doc","offline","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279187/","anonymous"
 "279186","2019-12-26 23:29:57","http://in-sect.com/Scan287519.doc","online","malware_download","doc,PredatorStealer","https://urlhaus.abuse.ch/url/279186/","anonymous"
@@ -77516,7 +78036,7 @@
 "275612","2019-12-23 07:06:16","http://111.42.66.55:39829/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275612/","Gandylyan1"
 "275611","2019-12-23 07:06:09","http://172.36.10.220:57321/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275611/","Gandylyan1"
 "275610","2019-12-23 07:05:38","http://172.36.52.170:43995/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275610/","Gandylyan1"
-"275609","2019-12-23 07:05:06","http://176.113.161.40:44031/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275609/","Gandylyan1"
+"275609","2019-12-23 07:05:06","http://176.113.161.40:44031/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/275609/","Gandylyan1"
 "275608","2019-12-23 07:05:04","http://172.36.23.245:42465/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275608/","Gandylyan1"
 "275607","2019-12-23 07:04:32","http://172.39.53.116:46278/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275607/","Gandylyan1"
 "275606","2019-12-23 07:04:01","http://116.114.95.218:46600/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/275606/","Gandylyan1"
@@ -80324,7 +80844,7 @@
 "272795","2019-12-19 12:38:13","http://172.36.52.129:34459/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272795/","Gandylyan1"
 "272794","2019-12-19 12:37:42","http://113.25.52.121:36214/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272794/","Gandylyan1"
 "272793","2019-12-19 12:37:39","http://172.36.10.61:48787/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272793/","Gandylyan1"
-"272792","2019-12-19 12:37:07","http://176.113.161.89:33825/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/272792/","Gandylyan1"
+"272792","2019-12-19 12:37:07","http://176.113.161.89:33825/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272792/","Gandylyan1"
 "272791","2019-12-19 12:37:05","http://49.116.60.244:55669/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272791/","Gandylyan1"
 "272790","2019-12-19 12:37:00","http://59.98.116.212:33222/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272790/","Gandylyan1"
 "272789","2019-12-19 12:36:27","http://120.70.155.100:42247/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272789/","Gandylyan1"
@@ -80623,7 +81143,7 @@
 "272495","2019-12-19 06:07:20","http://1.246.223.116:4067/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272495/","Gandylyan1"
 "272494","2019-12-19 06:07:14","http://111.43.223.27:45765/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272494/","Gandylyan1"
 "272493","2019-12-19 06:07:07","http://177.128.39.84:40939/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272493/","Gandylyan1"
-"272492","2019-12-19 06:07:02","http://1.246.222.237:4056/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272492/","Gandylyan1"
+"272492","2019-12-19 06:07:02","http://1.246.222.237:4056/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/272492/","Gandylyan1"
 "272491","2019-12-19 06:06:57","http://49.119.58.146:41852/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272491/","Gandylyan1"
 "272490","2019-12-19 06:06:54","http://176.113.161.128:42166/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/272490/","Gandylyan1"
 "272489","2019-12-19 06:06:44","http://118.166.20.195:57991/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272489/","Gandylyan1"
@@ -80725,7 +81245,7 @@
 "272392","2019-12-19 05:49:15","http://111.43.223.198:44556/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272392/","Gandylyan1"
 "272391","2019-12-19 05:49:05","http://42.235.32.213:37678/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272391/","Gandylyan1"
 "272390","2019-12-19 05:48:53","http://www.espace-developpement.org/wp-admin/user/deal.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/272390/","gorimpthon"
-"272389","2019-12-19 05:48:51","http://1.246.222.44:3345/Mozi.m","online","malware_download","elf","https://urlhaus.abuse.ch/url/272389/","Gandylyan1"
+"272389","2019-12-19 05:48:51","http://1.246.222.44:3345/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272389/","Gandylyan1"
 "272388","2019-12-19 05:48:46","http://175.4.165.207:37789/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272388/","Gandylyan1"
 "272387","2019-12-19 05:48:23","http://111.40.111.205:45334/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272387/","Gandylyan1"
 "272386","2019-12-19 05:48:15","http://111.42.66.42:42804/Mozi.m","offline","malware_download","elf","https://urlhaus.abuse.ch/url/272386/","Gandylyan1"
@@ -81774,7 +82294,7 @@
 "271326","2019-12-18 06:08:18","https://www.bimcc.com/jkdk1/oNQMWu92749/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/271326/","spamhaus"
 "271325","2019-12-18 06:07:06","http://griefed.com/doc/uploads/getdoc/4fv3b5.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/271325/","zbetcheckin"
 "271324","2019-12-18 06:07:03","http://griefed.com/doc/uploads/view/Christine-Nadal.doc.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/271324/","zbetcheckin"
-"271323","2019-12-18 06:04:04","https://ross-ocenka.ru/wp-includes/js/tinymce/themes/balloon.conf/OCT/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/271323/","spamhaus"
+"271323","2019-12-18 06:04:04","https://ross-ocenka.ru/wp-includes/js/tinymce/themes/balloon.conf/OCT/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/271323/","spamhaus"
 "271322","2019-12-18 06:00:04","http://griefed.com/doc/uploads/view/Cordes-pour-guitares-et-instruments.doc.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/271322/","zbetcheckin"
 "271321","2019-12-18 05:59:04","http://batimexhr.com.vn/pj3/FILE/FILE/sj5c8st-8241951839-4663-5rxa8fl-na8bg212/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/271321/","spamhaus"
 "271320","2019-12-18 05:58:04","https://gestalabs.com/wp-content/uploads/kTP-8dWa-582/","offline","malware_download","doc,emotet,epoch3,heodo","https://urlhaus.abuse.ch/url/271320/","spamhaus"
@@ -98050,7 +98570,7 @@
 "254282","2019-11-15 09:30:05","http://zxczxf.ru/ndfhjds.exe","offline","malware_download","exe,NetWire","https://urlhaus.abuse.ch/url/254282/","abuse_ch"
 "254281","2019-11-15 09:28:06","http://59.127.136.53:11037/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/254281/","zbetcheckin"
 "254280","2019-11-15 09:12:06","http://upload-stat4.info/test/ourus/1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/254280/","zbetcheckin"
-"254279","2019-11-15 08:26:03","http://109.107.249.137:22569/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/254279/","zbetcheckin"
+"254279","2019-11-15 08:26:03","http://109.107.249.137:22569/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/254279/","zbetcheckin"
 "254278","2019-11-15 08:01:04","http://185.212.130.42/updater.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/254278/","abuse_ch"
 "254277","2019-11-15 07:30:05","http://www.cocotraffic.com/crypt_exe_lite_prj_Eagle_2.exe","offline","malware_download","exe,IcedID","https://urlhaus.abuse.ch/url/254277/","abuse_ch"
 "254276","2019-11-15 07:16:06","https://1rjxxa.ch.files.1drv.com/y4m4gfpE3WWakcul-aB0ltS8clb96K9VlTuKuf9uGi7qdyDw2u5kHg5D0ef5HnY9bC9Vp2uo5MDO4NLgzjGrxvZCHbD_8NbmSaAztOyS7KiXugewDA9mt3t4Is-95luWUjDu6gh53pVngk5CGVStuPosO17Y1M3kdL5vEFDvgd80YJGcuxcmsJlrrZllSeiHepfNIuMAytr-kS1MaijdLVDPQ/IMG_WA-D0014.lzh?download&psid=1","offline","malware_download","zip","https://urlhaus.abuse.ch/url/254276/","zbetcheckin"
@@ -108141,7 +108661,7 @@
 "243449","2019-10-10 22:41:20","http://201.69.73.109:14437/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243449/","Petras_Simeon"
 "243448","2019-10-10 22:41:13","http://200.207.176.234:35426/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243448/","Petras_Simeon"
 "243447","2019-10-10 22:41:06","http://200.161.17.173:26852/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243447/","Petras_Simeon"
-"243446","2019-10-10 22:41:00","http://197.159.2.106:1057/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243446/","Petras_Simeon"
+"243446","2019-10-10 22:41:00","http://197.159.2.106:1057/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/243446/","Petras_Simeon"
 "243445","2019-10-10 22:40:54","http://195.182.148.93:18596/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243445/","Petras_Simeon"
 "243444","2019-10-10 22:40:43","http://191.205.112.123:23785/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243444/","Petras_Simeon"
 "243443","2019-10-10 22:40:26","http://191.19.30.101:30634/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243443/","Petras_Simeon"
@@ -108327,7 +108847,7 @@
 "243259","2019-10-10 17:58:06","http://193.93.18.58:29367/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243259/","Petras_Simeon"
 "243258","2019-10-10 17:57:55","http://189.79.7.118:16176/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243258/","Petras_Simeon"
 "243257","2019-10-10 17:57:47","http://189.172.151.237:56796/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243257/","Petras_Simeon"
-"243256","2019-10-10 17:57:42","http://188.243.5.75:21424/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/243256/","Petras_Simeon"
+"243256","2019-10-10 17:57:42","http://188.243.5.75:21424/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243256/","Petras_Simeon"
 "243255","2019-10-10 17:57:39","http://187.143.233.59:61821/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243255/","Petras_Simeon"
 "243254","2019-10-10 17:57:33","http://187.108.17.187:37099/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243254/","Petras_Simeon"
 "243253","2019-10-10 17:57:26","http://186.219.248.212:22345/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/243253/","Petras_Simeon"
@@ -108883,7 +109403,7 @@
 "242671","2019-10-10 10:02:18","http://110.78.146.170:26239/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242671/","Petras_Simeon"
 "242670","2019-10-10 10:02:13","http://109.94.114.155:44712/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242670/","Petras_Simeon"
 "242669","2019-10-10 10:02:09","http://103.59.208.18:20276/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242669/","Petras_Simeon"
-"242668","2019-10-10 10:02:04","http://103.255.235.219:46809/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/242668/","Petras_Simeon"
+"242668","2019-10-10 10:02:04","http://103.255.235.219:46809/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242668/","Petras_Simeon"
 "242667","2019-10-10 09:49:18","http://top.apm-inc.org/7843kjds.bin","offline","malware_download","Dreambot,exe,geofenced,Gozi,POL","https://urlhaus.abuse.ch/url/242667/","anonymous"
 "242666","2019-10-10 09:49:16","http://lex.lewistowntruevalue.com/10-10-19.zip","offline","malware_download","Dreambot,geofenced,js,POL,zip","https://urlhaus.abuse.ch/url/242666/","anonymous"
 "242665","2019-10-10 09:49:14","http://pot.lewistowntruevalue.com/10-10-19.zip","offline","malware_download","Dreambot,geofenced,js,POL,zip","https://urlhaus.abuse.ch/url/242665/","anonymous"
@@ -109427,7 +109947,7 @@
 "242126","2019-10-09 17:27:13","http://177.94.161.115:53168/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242126/","Petras_Simeon"
 "242125","2019-10-09 17:27:06","http://168.195.228.246:11783/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242125/","Petras_Simeon"
 "242124","2019-10-09 17:26:16","http://103.253.181.74:29308/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242124/","Petras_Simeon"
-"242123","2019-10-09 17:26:10","http://103.247.217.147:43057/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242123/","Petras_Simeon"
+"242123","2019-10-09 17:26:10","http://103.247.217.147:43057/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/242123/","Petras_Simeon"
 "242122","2019-10-09 17:26:05","http://103.135.38.175:18897/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/242122/","Petras_Simeon"
 "242121","2019-10-09 17:09:09","http://167.71.64.141/yfbg/out-1369462999.hta","offline","malware_download","None","https://urlhaus.abuse.ch/url/242121/","JayTHL"
 "242120","2019-10-09 17:09:07","http://167.71.64.141/yfbg/out-834610808.hta","offline","malware_download","None","https://urlhaus.abuse.ch/url/242120/","JayTHL"
@@ -109701,7 +110221,7 @@
 "241852","2019-10-09 14:35:57","http://62.162.115.194:21188/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/241852/","Petras_Simeon"
 "241851","2019-10-09 14:35:49","http://45.242.79.120:49024/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/241851/","Petras_Simeon"
 "241850","2019-10-09 14:35:43","http://36.76.24.61:15441/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/241850/","Petras_Simeon"
-"241849","2019-10-09 14:35:33","http://36.66.105.159:32398/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/241849/","Petras_Simeon"
+"241849","2019-10-09 14:35:33","http://36.66.105.159:32398/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/241849/","Petras_Simeon"
 "241848","2019-10-09 14:35:26","http://2.183.89.72:18192/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/241848/","Petras_Simeon"
 "241847","2019-10-09 14:35:14","http://203.83.174.227:30402/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/241847/","Petras_Simeon"
 "241846","2019-10-09 14:34:25","http://201.93.70.136:29556/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/241846/","Petras_Simeon"
@@ -110765,7 +111285,7 @@
 "240785","2019-10-07 09:55:07","http://70.25.31.169:1350/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240785/","Petras_Simeon"
 "240784","2019-10-07 09:55:03","http://68.205.122.33:30617/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240784/","Petras_Simeon"
 "240783","2019-10-07 09:54:56","http://62.217.133.76:4011/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240783/","Petras_Simeon"
-"240782","2019-10-07 09:54:52","http://62.117.124.114:32266/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240782/","Petras_Simeon"
+"240782","2019-10-07 09:54:52","http://62.117.124.114:32266/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240782/","Petras_Simeon"
 "240781","2019-10-07 09:54:47","http://157.245.147.239/lmaoWTF/loligang.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/240781/","0xrb"
 "240780","2019-10-07 09:54:45","http://62.1.114.108:58456/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240780/","Petras_Simeon"
 "240779","2019-10-07 09:54:39","http://5.75.38.160:1977/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240779/","Petras_Simeon"
@@ -111019,7 +111539,7 @@
 "240525","2019-10-07 06:35:54","http://202.40.177.74:45917/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240525/","Petras_Simeon"
 "240524","2019-10-07 06:35:48","http://201.13.139.217:3933/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240524/","Petras_Simeon"
 "240523","2019-10-07 06:35:40","http://201.110.4.205:24847/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240523/","Petras_Simeon"
-"240522","2019-10-07 06:35:33","http://200.85.168.202:15486/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240522/","Petras_Simeon"
+"240522","2019-10-07 06:35:33","http://200.85.168.202:15486/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240522/","Petras_Simeon"
 "240521","2019-10-07 06:35:27","http://200.71.61.222:7302/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240521/","Petras_Simeon"
 "240520","2019-10-07 06:34:55","http://200.53.28.4:19942/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240520/","Petras_Simeon"
 "240519","2019-10-07 06:34:49","http://200.53.20.216:3602/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240519/","Petras_Simeon"
@@ -111266,7 +111786,7 @@
 "240278","2019-10-07 05:05:40","http://41.45.17.186:33244/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240278/","Petras_Simeon"
 "240277","2019-10-07 05:05:24","http://41.230.125.165:26813/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240277/","Petras_Simeon"
 "240276","2019-10-07 05:05:14","http://41.222.15.154:52648/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240276/","Petras_Simeon"
-"240275","2019-10-07 05:05:05","http://41.219.185.171:46701/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240275/","Petras_Simeon"
+"240275","2019-10-07 05:05:05","http://41.219.185.171:46701/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240275/","Petras_Simeon"
 "240274","2019-10-07 05:04:57","http://41.215.247.183:1126/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240274/","Petras_Simeon"
 "240273","2019-10-07 05:04:48","http://41.204.79.18:5220/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240273/","Petras_Simeon"
 "240272","2019-10-07 05:04:39","http://41.190.70.238:57656/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240272/","Petras_Simeon"
@@ -111305,7 +111825,7 @@
 "240239","2019-10-07 04:58:13","http://217.145.193.216:21280/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240239/","Petras_Simeon"
 "240238","2019-10-07 04:58:10","http://216.36.12.98:36165/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240238/","Petras_Simeon"
 "240237","2019-10-07 04:58:05","http://216.183.54.169:47530/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240237/","Petras_Simeon"
-"240236","2019-10-07 04:58:00","http://213.27.8.6:13634/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240236/","Petras_Simeon"
+"240236","2019-10-07 04:58:00","http://213.27.8.6:13634/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240236/","Petras_Simeon"
 "240235","2019-10-07 04:57:56","http://213.231.170.158:18026/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240235/","Petras_Simeon"
 "240234","2019-10-07 04:57:52","http://213.170.247.226:16585/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240234/","Petras_Simeon"
 "240233","2019-10-07 04:57:48","http://213.157.39.242:54234/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240233/","Petras_Simeon"
@@ -111505,7 +112025,7 @@
 "240039","2019-10-07 04:24:41","http://178.210.129.150:10910/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240039/","Petras_Simeon"
 "240038","2019-10-07 04:24:36","http://178.165.122.141:17685/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240038/","Petras_Simeon"
 "240037","2019-10-07 04:24:33","http://178.156.64.52:63080/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240037/","Petras_Simeon"
-"240036","2019-10-07 04:24:29","http://178.151.143.2:21623/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240036/","Petras_Simeon"
+"240036","2019-10-07 04:24:29","http://178.151.143.2:21623/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240036/","Petras_Simeon"
 "240035","2019-10-07 04:24:23","http://178.150.54.4:36982/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240035/","Petras_Simeon"
 "240034","2019-10-07 04:24:19","http://178.136.195.90:37020/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/240034/","Petras_Simeon"
 "240033","2019-10-07 04:24:13","http://177.95.76.97:38821/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/240033/","Petras_Simeon"
@@ -111779,7 +112299,7 @@
 "239765","2019-10-06 13:34:15","http://200.100.49.59:33573/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239765/","Petras_Simeon"
 "239764","2019-10-06 13:34:09","http://190.109.189.120:49416/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239764/","Petras_Simeon"
 "239763","2019-10-06 13:34:04","http://188.2.18.200:56870/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239763/","Petras_Simeon"
-"239762","2019-10-06 13:33:16","http://188.133.189.193:27770/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239762/","Petras_Simeon"
+"239762","2019-10-06 13:33:16","http://188.133.189.193:27770/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239762/","Petras_Simeon"
 "239761","2019-10-06 13:33:11","http://187.94.112.181:43343/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239761/","Petras_Simeon"
 "239760","2019-10-06 13:33:06","http://187.56.211.11:2413/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239760/","Petras_Simeon"
 "239759","2019-10-06 13:33:00","http://187.35.35.135:4489/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239759/","Petras_Simeon"
@@ -111914,7 +112434,7 @@
 "239630","2019-10-06 11:19:26","http://191.255.185.98:38156/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239630/","Petras_Simeon"
 "239629","2019-10-06 11:19:20","http://191.255.118.201:23044/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239629/","Petras_Simeon"
 "239628","2019-10-06 11:19:14","http://191.205.170.170:63490/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239628/","Petras_Simeon"
-"239627","2019-10-06 11:19:07","http://191.102.123.132:14949/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239627/","Petras_Simeon"
+"239627","2019-10-06 11:19:07","http://191.102.123.132:14949/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239627/","Petras_Simeon"
 "239626","2019-10-06 11:19:03","http://190.92.82.126:51739/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239626/","Petras_Simeon"
 "239625","2019-10-06 11:18:58","http://190.163.192.232:3160/.i","online","malware_download","hajime","https://urlhaus.abuse.ch/url/239625/","Petras_Simeon"
 "239624","2019-10-06 11:18:53","http://189.78.191.252:44188/.i","offline","malware_download","hajime","https://urlhaus.abuse.ch/url/239624/","Petras_Simeon"
@@ -112599,7 +113119,7 @@
 "238939","2019-10-06 06:38:11","http://191.17.93.42:15887/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238939/","Petras_Simeon"
 "238938","2019-10-06 06:38:05","http://191.17.148.167:25509/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238938/","Petras_Simeon"
 "238937","2019-10-06 06:37:57","http://190.234.179.27:24143/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238937/","Petras_Simeon"
-"238936","2019-10-06 06:37:51","http://190.211.128.197:30536/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238936/","Petras_Simeon"
+"238936","2019-10-06 06:37:51","http://190.211.128.197:30536/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238936/","Petras_Simeon"
 "238935","2019-10-06 06:37:44","http://190.183.210.114:24368/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238935/","Petras_Simeon"
 "238934","2019-10-06 06:37:38","http://190.171.217.250:46368/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238934/","Petras_Simeon"
 "238933","2019-10-06 06:37:32","http://190.128.153.54:64700/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238933/","Petras_Simeon"
@@ -112801,7 +113321,7 @@
 "238726","2019-10-06 06:02:41","http://197.255.218.83:2179/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238726/","Petras_Simeon"
 "238725","2019-10-06 06:02:35","http://193.86.186.162:56645/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238725/","Petras_Simeon"
 "238720","2019-10-06 06:00:24","http://190.57.193.238:4275/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238720/","Petras_Simeon"
-"238719","2019-10-06 06:00:12","http://190.110.161.252:22693/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238719/","Petras_Simeon"
+"238719","2019-10-06 06:00:12","http://190.110.161.252:22693/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238719/","Petras_Simeon"
 "238716","2019-10-06 05:58:57","http://187.74.139.94:32879/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238716/","Petras_Simeon"
 "238714","2019-10-06 05:58:19","http://187.35.245.118:64328/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238714/","Petras_Simeon"
 "238713","2019-10-06 05:58:13","http://187.109.50.195:51675/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238713/","Petras_Simeon"
@@ -113134,7 +113654,7 @@
 "238371","2019-10-05 13:27:22","http://152.172.89.159:65080/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238371/","Petras_Simeon"
 "238370","2019-10-05 13:27:16","http://151.235.197.255:8263/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238370/","Petras_Simeon"
 "238369","2019-10-05 13:27:11","http://137.59.161.22:37359/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238369/","Petras_Simeon"
-"238368","2019-10-05 13:27:05","http://95.170.113.52:12587/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238368/","Petras_Simeon"
+"238368","2019-10-05 13:27:05","http://95.170.113.52:12587/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238368/","Petras_Simeon"
 "238367","2019-10-05 13:26:13","http://50.241.148.97:51131/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238367/","Petras_Simeon"
 "238366","2019-10-05 13:26:08","http://37.202.133.63:13787/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238366/","Petras_Simeon"
 "238365","2019-10-05 13:26:04","http://36.66.149.2:1544/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238365/","Petras_Simeon"
@@ -113375,7 +113895,7 @@
 "238130","2019-10-05 10:40:38","http://115.134.0.22:63433/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238130/","Petras_Simeon"
 "238129","2019-10-05 10:40:33","http://114.47.112.134:61005/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238129/","Petras_Simeon"
 "238128","2019-10-05 10:40:26","http://1.1.226.93:61093/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238128/","Petras_Simeon"
-"238127","2019-10-05 10:40:21","http://109.248.58.238:50004/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238127/","Petras_Simeon"
+"238127","2019-10-05 10:40:21","http://109.248.58.238:50004/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238127/","Petras_Simeon"
 "238126","2019-10-05 10:40:17","http://103.73.183.53:44671/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238126/","Petras_Simeon"
 "238125","2019-10-05 10:40:12","http://103.209.176.85:54764/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238125/","Petras_Simeon"
 "238124","2019-10-05 10:40:07","http://103.124.173.72:13616/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/238124/","Petras_Simeon"
@@ -113528,7 +114048,7 @@
 "237977","2019-10-05 08:16:24","http://5.235.202.17:5259/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/237977/","Petras_Simeon"
 "237976","2019-10-05 08:16:18","http://46.45.30.45:51881/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/237976/","Petras_Simeon"
 "237975","2019-10-05 08:16:15","http://37.153.147.98:57627/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/237975/","Petras_Simeon"
-"237974","2019-10-05 08:16:09","http://36.89.133.67:44218/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/237974/","Petras_Simeon"
+"237974","2019-10-05 08:16:09","http://36.89.133.67:44218/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/237974/","Petras_Simeon"
 "237973","2019-10-05 08:15:59","http://36.80.228.78:55920/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/237973/","Petras_Simeon"
 "237972","2019-10-05 08:15:50","http://27.78.188.179:11703/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/237972/","Petras_Simeon"
 "237971","2019-10-05 08:15:44","http://2.179.106.200:42929/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/237971/","Petras_Simeon"
@@ -113557,7 +114077,7 @@
 "237948","2019-10-05 08:13:24","http://157.119.214.172:44517/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/237948/","Petras_Simeon"
 "237947","2019-10-05 08:13:17","http://152.169.188.216:16090/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/237947/","Petras_Simeon"
 "237946","2019-10-05 08:13:08","http://111.248.97.61:52889/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/237946/","Petras_Simeon"
-"237945","2019-10-05 08:13:02","http://110.34.28.113:50608/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/237945/","Petras_Simeon"
+"237945","2019-10-05 08:13:02","http://110.34.28.113:50608/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/237945/","Petras_Simeon"
 "237944","2019-10-05 08:12:56","http://109.248.88.240:8948/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/237944/","Petras_Simeon"
 "237943","2019-10-05 08:12:51","http://105.184.243.248:48311/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/237943/","Petras_Simeon"
 "237942","2019-10-05 08:12:45","http://103.80.210.9:55650/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/237942/","Petras_Simeon"
@@ -116112,7 +116632,7 @@
 "235362","2019-09-25 10:31:09","http://cbportal.org/3dsnp/documentation/wp-content/languages/hmqd4_l3oee-031952353/","offline","malware_download","emotet,epoch2,exe,heodo,Trickbot","https://urlhaus.abuse.ch/url/235362/","Cryptolaemus1"
 "235361","2019-09-25 10:31:04","http://cheshman.com/wp-admin/oyhauxdpi_9udg55pl-7726/","offline","malware_download","emotet,epoch2,exe,heodo,Trickbot","https://urlhaus.abuse.ch/url/235361/","Cryptolaemus1"
 "235360","2019-09-25 10:29:02","http://test28722.futurehost.pl/2c.jpg","offline","malware_download","Troldesh","https://urlhaus.abuse.ch/url/235360/","JAMESWT_MHT"
-"235359","2019-09-25 10:28:48","http://www.mobiadnews.com/wp-content/themes/mobiadDC/images/2c.jpg","offline","malware_download","Troldesh","https://urlhaus.abuse.ch/url/235359/","JAMESWT_MHT"
+"235359","2019-09-25 10:28:48","http://www.mobiadnews.com/wp-content/themes/mobiadDC/images/2c.jpg","online","malware_download","Troldesh","https://urlhaus.abuse.ch/url/235359/","JAMESWT_MHT"
 "235358","2019-09-25 10:28:36","http://biketourshanoi.com/wp-admin/css/colors/blue/2c.jpg","offline","malware_download","Troldesh","https://urlhaus.abuse.ch/url/235358/","JAMESWT_MHT"
 "235357","2019-09-25 10:28:21","https://apsaradigitalworld.com/wp-content/themes/flatsome/flatsome/languages/2c.jpg","offline","malware_download","None","https://urlhaus.abuse.ch/url/235357/","JAMESWT_MHT"
 "235356","2019-09-25 10:28:18","http://hnw.midnitehabit.com/_bak/2013/demo/2c.jpg","offline","malware_download","GandCrab","https://urlhaus.abuse.ch/url/235356/","JAMESWT_MHT"
@@ -117790,7 +118310,7 @@
 "233607","2019-09-20 12:18:13","http://matomo.meerai.eu/lang/2c.jpg","offline","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/233607/","JAMESWT_MHT"
 "233606","2019-09-20 12:17:50","http://meta.meerai.io/public/assets/avatars/2c.jpg","offline","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/233606/","JAMESWT_MHT"
 "233605","2019-09-20 12:17:40","http://appointments.meerai.eu/storage/cache/2c.jpg","offline","malware_download","Ransomware,Shade","https://urlhaus.abuse.ch/url/233605/","JAMESWT_MHT"
-"233604","2019-09-20 12:17:39","http://intertradeassociates.com.au/awstats/data/2c.jpg","online","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/233604/","JAMESWT_MHT"
+"233604","2019-09-20 12:17:39","http://intertradeassociates.com.au/awstats/data/2c.jpg","offline","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/233604/","JAMESWT_MHT"
 "233603","2019-09-20 12:17:21","http://www.anniechase.com/wp-content/themes/garfunkel/js/2c.jpg","offline","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/233603/","JAMESWT_MHT"
 "233602","2019-09-20 12:17:12","http://thiennamhomeland.com/wp-content/themes/thiennam/database/2c.jpg","offline","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/233602/","JAMESWT_MHT"
 "233601","2019-09-20 12:17:06","http://michaelkensy.de/wp-content/themes/twentyseventeen/template-parts/footer/2c.jpg","offline","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/233601/","JAMESWT_MHT"
@@ -117857,7 +118377,7 @@
 "233540","2019-09-20 10:35:07","http://facevalu.es/wp-admin/css/colors/blue/2c.jpg","offline","malware_download","Ransomware,Shade","https://urlhaus.abuse.ch/url/233540/","JAMESWT_MHT"
 "233539","2019-09-20 10:35:05","http://maximzaytsev.com/wp-content/themes/zaytsev2/fonts/2c.jpg","offline","malware_download","Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/233539/","JAMESWT_MHT"
 "233538","2019-09-20 10:34:20","http://valerieheslop.co.uk/templates/beez_20/fonts/doc/","offline","malware_download","downloader,js,Shade,zip","https://urlhaus.abuse.ch/url/233538/","JAMESWT_MHT"
-"233537","2019-09-20 10:34:16","http://activecost.com.au/wp-admin/css/colors/blue/xls/","online","malware_download","downloader,js,Shade,zip","https://urlhaus.abuse.ch/url/233537/","JAMESWT_MHT"
+"233537","2019-09-20 10:34:16","http://activecost.com.au/wp-admin/css/colors/blue/xls/","offline","malware_download","downloader,js,Shade,zip","https://urlhaus.abuse.ch/url/233537/","JAMESWT_MHT"
 "233536","2019-09-20 10:33:39","http://interyouth.net/wp-admin/css/colors/blue/xls/","offline","malware_download","downloader,js,Shade,zip","https://urlhaus.abuse.ch/url/233536/","JAMESWT_MHT"
 "233535","2019-09-20 10:33:37","http://karinaagency.com/templates/final/html/xls/","offline","malware_download","downloader,js,Shade,zip","https://urlhaus.abuse.ch/url/233535/","JAMESWT_MHT"
 "233534","2019-09-20 10:33:34","http://sat1000.org/dating/images/doc/","offline","malware_download","downloader,js,Shade,zip","https://urlhaus.abuse.ch/url/233534/","JAMESWT_MHT"
@@ -140291,7 +140811,7 @@
 "210544","2019-06-20 04:18:04","http://134.209.112.30:80/bins/hoho.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210544/","zbetcheckin"
 "210543","2019-06-20 04:18:04","http://78.128.114.66:80/zehir/z3hir.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210543/","zbetcheckin"
 "210542","2019-06-20 04:18:03","http://78.128.114.66/zehir/z3hir.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210542/","zbetcheckin"
-"210541","2019-06-20 04:10:49","http://indonesias.me:9998/64.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/210541/","zbetcheckin"
+"210541","2019-06-20 04:10:49","http://indonesias.me:9998/64.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/210541/","zbetcheckin"
 "210540","2019-06-20 04:10:05","http://203.95.192.84:9998/32.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/210540/","zbetcheckin"
 "210539","2019-06-20 04:06:02","http://connetquotlibrary.org/services/copy-print-and-fax/wireless-printing/connetquot-library-wifi-printer.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/210539/","zbetcheckin"
 "210538","2019-06-20 03:24:03","http://78.128.114.66:80/zehir/z3hir.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210538/","zbetcheckin"
@@ -140308,7 +140828,7 @@
 "210527","2019-06-20 01:47:03","http://51.79.53.247/lmaoWTF/loligang.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210527/","zbetcheckin"
 "210526","2019-06-20 01:47:02","http://51.79.53.247/lmaoWTF/loligang.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210526/","zbetcheckin"
 "210525","2019-06-20 01:39:07","http://fakers.co.jp/20.06.2019_130.22.doc","offline","malware_download","doc","https://urlhaus.abuse.ch/url/210525/","zbetcheckin"
-"210524","2019-06-20 01:06:53","http://indonesias.me:9998/c64.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/210524/","zbetcheckin"
+"210524","2019-06-20 01:06:53","http://indonesias.me:9998/c64.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/210524/","zbetcheckin"
 "210523","2019-06-20 00:37:03","http://179.43.147.77/pm1","offline","malware_download","msi","https://urlhaus.abuse.ch/url/210523/","zbetcheckin"
 "210521","2019-06-20 00:20:06","http://46.101.218.87/bins/BaCkTrAcK.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210521/","zbetcheckin"
 "210520","2019-06-20 00:20:06","http://46.101.218.87:80/bins/BaCkTrAcK.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/210520/","zbetcheckin"
@@ -147129,7 +147649,7 @@
 "203683","2019-05-29 22:19:03","http://spideronfire.com/css/esp/lhtbsyThX/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203683/","Cryptolaemus1"
 "203682","2019-05-29 22:17:12","http://www.whgaty.com/gs.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/203682/","zbetcheckin"
 "203681","2019-05-29 22:16:02","http://spiritofbeauty.de/AGBs/FILE/KZQzKdKpSJJQRiBAepUIdJlD/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/203681/","spamhaus"
-"203680","2019-05-29 22:12:37","http://download.ktkt.com/setupKtPro_V1.0.4.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/203680/","zbetcheckin"
+"203680","2019-05-29 22:12:37","http://download.ktkt.com/setupKtPro_V1.0.4.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/203680/","zbetcheckin"
 "203679","2019-05-29 22:12:11","http://tncnet.com/images/yh050r_w6ser-9083/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/203679/","Cryptolaemus1"
 "203678","2019-05-29 22:12:08","http://tittgen.eu/iXOWCOaq/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/203678/","Cryptolaemus1"
 "203677","2019-05-29 22:12:08","https://tecnocrimp.com/administrator/KkGEhGES/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/203677/","Cryptolaemus1"
@@ -148627,7 +149147,7 @@
 "202175","2019-05-26 17:29:32","http://web.tiscalinet.it/cometseeker/suoni/install.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/202175/","zbetcheckin"
 "202174","2019-05-26 17:22:03","http://u2.innerpeer.com/cb/uzzf_gmly9tr9.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/202174/","zbetcheckin"
 "202173","2019-05-26 17:21:33","http://wh.didiwl.com/cb/uzzf_gmly9tr9.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/202173/","zbetcheckin"
-"202172","2019-05-26 17:17:33","http://stevewalker.com.au/images/gallery/pdf.exe","online","malware_download","exe,zeus","https://urlhaus.abuse.ch/url/202172/","zbetcheckin"
+"202172","2019-05-26 17:17:33","http://stevewalker.com.au/images/gallery/pdf.exe","offline","malware_download","exe,zeus","https://urlhaus.abuse.ch/url/202172/","zbetcheckin"
 "202171","2019-05-26 17:13:31","http://parrocchiebotticino.it/cache/Pedido0987.cpl","offline","malware_download","exe","https://urlhaus.abuse.ch/url/202171/","zbetcheckin"
 "202170","2019-05-26 16:10:32","http://www.softnew.com.br/softnew/SFTELMAR-SITE/Demo/Instala.EXE","offline","malware_download","exe","https://urlhaus.abuse.ch/url/202170/","zbetcheckin"
 "202169","2019-05-26 16:02:03","http://www.softnew.com.br/Sfatalho.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/202169/","zbetcheckin"
@@ -149270,7 +149790,7 @@
 "201531","2019-05-24 18:04:48","http://strochki.info/wupvd.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/201531/","zbetcheckin"
 "201530","2019-05-24 17:59:06","http://nevernews.club/app/e7.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/201530/","zbetcheckin"
 "201529","2019-05-24 17:54:04","http://nevernews.club/app/updateprofile-0321.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/201529/","zbetcheckin"
-"201528","2019-05-24 17:46:32","http://toe.polinema.ac.id/wp-content/ikgpvd1mrjj_xc3cdj2kj6-31458325609/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/201528/","Cryptolaemus1"
+"201528","2019-05-24 17:46:32","http://toe.polinema.ac.id/wp-content/ikgpvd1mrjj_xc3cdj2kj6-31458325609/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/201528/","Cryptolaemus1"
 "201527","2019-05-24 17:46:25","http://sc.stopinsult.by/blogs/y7bzzgu9p74fh75o8s9jq17ebt3l_nvs3gr33-134753095903/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/201527/","Cryptolaemus1"
 "201526","2019-05-24 17:46:20","http://vanphongphamhyvong.com/wp-content/xpyyziuwUe/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/201526/","Cryptolaemus1"
 "201525","2019-05-24 17:45:59","http://testsite.nambuccatech.com/wp-content/FHIBYpKSdzzgIfFDxtSetKKic/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/201525/","Cryptolaemus1"
@@ -153515,7 +154035,7 @@
 "197268","2019-05-16 12:53:07","https://innovate-wp.club/wp-content/uploads/FILE/bPYdoYkAmNrMQVSzGycLJJeNgF/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/197268/","spamhaus"
 "197267","2019-05-16 12:53:06","http://whitelilygreens.ga/wp-content/sites/RTmnhskXEelCtFMyXNqZmGNWZFAjzP/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/197267/","spamhaus"
 "197266","2019-05-16 12:53:03","https://heritagehampers.com/wp-content/Scan/w47f1wrvkbj_nkrlejr-2795797927401/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/197266/","spamhaus"
-"197265","2019-05-16 12:21:10","http://47.14.99.185:9808/.i","offline","malware_download","elf,hjamie","https://urlhaus.abuse.ch/url/197265/","UrBogan"
+"197265","2019-05-16 12:21:10","http://47.14.99.185:9808/.i","online","malware_download","elf,hjamie","https://urlhaus.abuse.ch/url/197265/","UrBogan"
 "197264","2019-05-16 12:21:05","http://220.79.131.52:15242/.i","offline","malware_download","elf,hjamie","https://urlhaus.abuse.ch/url/197264/","UrBogan"
 "197263","2019-05-16 12:21:00","http://77.251.136.61:61911/.i","offline","malware_download","elf,hjamie","https://urlhaus.abuse.ch/url/197263/","UrBogan"
 "197262","2019-05-16 12:20:56","http://93.119.236.63:41359/.i","offline","malware_download","elf,hjamie","https://urlhaus.abuse.ch/url/197262/","UrBogan"
@@ -154791,7 +155311,7 @@
 "195977","2019-05-14 06:57:15","http://86.107.167.186:21932/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195977/","UrBogan"
 "195976","2019-05-14 06:57:11","http://77.230.116.99:8048/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195976/","UrBogan"
 "195975","2019-05-14 06:57:07","http://94.226.184.75:59765/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195975/","UrBogan"
-"195974","2019-05-14 06:57:05","http://109.185.26.178:29394/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195974/","UrBogan"
+"195974","2019-05-14 06:57:05","http://109.185.26.178:29394/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195974/","UrBogan"
 "195973","2019-05-14 06:56:28","http://5.56.114.113:6158/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195973/","UrBogan"
 "195972","2019-05-14 06:56:21","http://27.2.138.157:18439/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195972/","UrBogan"
 "195971","2019-05-14 06:56:16","http://178.132.140.195:15609/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/195971/","UrBogan"
@@ -164913,7 +165433,7 @@
 "185716","2019-04-26 19:22:06","https://mackprints.com/clean.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/185716/","zbetcheckin"
 "185715","2019-04-26 19:20:05","http://mywebnerd.com/moodle/XEcYR-UXE2Bb0IBkAUuyE_jTYXuGRd-70q/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/185715/","Cryptolaemus1"
 "185714","2019-04-26 19:20:04","http://todomuta.com/tm/INC/jXQ6wZkLswqp/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/185714/","spamhaus"
-"185713","2019-04-26 19:17:06","http://xiaoma-10021647.file.myqcloud.com/qrtb.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/185713/","zbetcheckin"
+"185713","2019-04-26 19:17:06","http://xiaoma-10021647.file.myqcloud.com/qrtb.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/185713/","zbetcheckin"
 "185712","2019-04-26 19:16:08","http://heke.net/images/grbZW-zBzuxgmP6whmiz_GMJxbDwu-ay/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/185712/","Cryptolaemus1"
 "185711","2019-04-26 19:16:06","http://tohkatsukumiai.or.jp/img/INC/XPm3QwY1C0W/","offline","malware_download","None","https://urlhaus.abuse.ch/url/185711/","spamhaus"
 "185710","2019-04-26 19:08:04","http://hermagi.ir/wp-includes/tvhIv-9wayRECj2S3bI9_paHMqLmlH-fN/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/185710/","Cryptolaemus1"
@@ -166582,7 +167102,7 @@
 "184013","2019-04-24 16:44:25","http://baldorclip.icu/clp/2.exe","offline","malware_download","ArkeiStealer,exe","https://urlhaus.abuse.ch/url/184013/","x42x5a"
 "184012","2019-04-24 16:44:12","http://baldorclip.icu/clp/1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/184012/","x42x5a"
 "184011","2019-04-24 16:44:03","http://nehty-maki.cz/wp-content/LLC/A4LYwMGwFg/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/184011/","spamhaus"
-"184010","2019-04-24 16:43:19","http://mutec.jp/.www/aloha.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/184010/","x42x5a"
+"184010","2019-04-24 16:43:19","http://mutec.jp/.www/aloha.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/184010/","x42x5a"
 "184009","2019-04-24 16:41:42","http://www.sunnysani.com/hasr/REMEME.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/184009/","de_aviation"
 "184008","2019-04-24 16:41:06","http://92.38.135.134/dom2","offline","malware_download","None","https://urlhaus.abuse.ch/url/184008/","de_aviation"
 "184007","2019-04-24 16:40:06","http://beautybusiness.by/bitrix/admin/css/order.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/184007/","de_aviation"
@@ -167529,7 +168049,7 @@
 "183063","2019-04-23 15:48:04","http://emrabulweni.co.za/wp-admin/Io_z/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/183063/","Cryptolaemus1"
 "183062","2019-04-23 15:47:19","http://www.hotissue.xyz/wp-content/ZqUsZ-YwyY7D6e86Fihv_BXiDDFqc-9r/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/183062/","Cryptolaemus1"
 "183061","2019-04-23 15:47:07","https://wordpress.carelesscloud.com/wp-includes/Scan/SjNzNCJocgR4/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/183061/","spamhaus"
-"183060","2019-04-23 15:44:11","http://194.169.88.56:49151/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/183060/","zbetcheckin"
+"183060","2019-04-23 15:44:11","http://194.169.88.56:49151/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/183060/","zbetcheckin"
 "183059","2019-04-23 15:44:10","http://185.158.249.131:80/bins/x86.light","offline","malware_download","elf","https://urlhaus.abuse.ch/url/183059/","zbetcheckin"
 "183057","2019-04-23 15:44:09","http://201.143.201.23:15425/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/183057/","zbetcheckin"
 "183058","2019-04-23 15:44:09","http://206.189.127.182:80/lmaoWTF/loligang.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/183058/","zbetcheckin"
@@ -183493,7 +184013,7 @@
 "166627","2019-03-26 23:03:13","http://obigeorge.com/publicfiles/3RRmiE/97893257003976/pTom-5Q_xlZmcTO-NAx/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/166627/","spamhaus"
 "166626","2019-03-26 23:03:12","http://phonelocaltoday.com/we5r87y-6aqlcpm-ylmc/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/166626/","spamhaus"
 "166625","2019-03-26 23:03:11","http://okiembociana.pl/admin/gwru-3im4wb3-nppj/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/166625/","spamhaus"
-"166624","2019-03-26 23:03:10","http://mattayom31.go.th/financial/a0hg98-eus06rn-uqrhglo/","online","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/166624/","spamhaus"
+"166624","2019-03-26 23:03:10","http://mattayom31.go.th/financial/a0hg98-eus06rn-uqrhglo/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/166624/","spamhaus"
 "166623","2019-03-26 23:03:07","http://ndm-services.co.uk/stats/lj486-0kquats-huco/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/166623/","spamhaus"
 "166622","2019-03-26 23:03:06","http://movewithketty.com/awstats/12ydwuz-ej3ls-fotjhr/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/166622/","spamhaus"
 "166621","2019-03-26 23:03:05","http://londonhypnosis.org.uk/media/hx2d4sp-90msizz-lyciz/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/166621/","spamhaus"
@@ -185286,7 +185806,7 @@
 "164825","2019-03-24 08:52:03","http://134.209.125.198/bins/sbot.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/164825/","zbetcheckin"
 "164824","2019-03-24 08:52:02","http://134.209.125.198/bins/sbot.arm6","offline","malware_download","elf","https://urlhaus.abuse.ch/url/164824/","zbetcheckin"
 "164823","2019-03-24 08:47:02","http://134.209.125.198/bins/sbot.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/164823/","zbetcheckin"
-"164822","2019-03-24 08:43:22","http://k3.etfiber.net/K3Cloud/ClientBin/SilverlightResources/Silverlight.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/164822/","zbetcheckin"
+"164822","2019-03-24 08:43:22","http://k3.etfiber.net/K3Cloud/ClientBin/SilverlightResources/Silverlight.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/164822/","zbetcheckin"
 "164821","2019-03-24 08:43:02","http://134.209.125.198/bins/sbot.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/164821/","zbetcheckin"
 "164820","2019-03-24 08:34:03","http://68.183.207.14/vi/x86.yakuza","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/164820/","zbetcheckin"
 "164819","2019-03-24 08:30:19","http://46.101.146.86/bins/hoho.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/164819/","zbetcheckin"
@@ -186242,7 +186762,7 @@
 "163868","2019-03-22 06:05:06","http://46.101.156.58:80/gaybub/miori.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/163868/","zbetcheckin"
 "163867","2019-03-22 06:05:04","http://46.101.156.58:80/gaybub/miori.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/163867/","zbetcheckin"
 "163866","2019-03-22 06:03:32","http://www.twinplaza.jp/library/use/Photo.scr","offline","malware_download","None","https://urlhaus.abuse.ch/url/163866/","papa_anniekey"
-"163865","2019-03-22 05:52:06","http://s14b.91danji.com/20151215/%E9%87%91%E5%AD%97%E5%A1%94%E6%96%B9%E5%9D%97.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/163865/","zbetcheckin"
+"163865","2019-03-22 05:52:06","http://s14b.91danji.com/20151215/%E9%87%91%E5%AD%97%E5%A1%94%E6%96%B9%E5%9D%97.exe","online","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/163865/","zbetcheckin"
 "163864","2019-03-22 05:48:02","https://electromada.com/bbl.jpg","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/163864/","cocaman"
 "163862","2019-03-22 05:42:15","http://206.189.30.147/bins/sbot.arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/163862/","Gandylyan1"
 "163861","2019-03-22 05:42:15","http://206.189.30.147/bins/sbot.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/163861/","Gandylyan1"
@@ -186274,12 +186794,12 @@
 "163835","2019-03-22 05:16:03","http://turismolenzarote.com/accounting/documents/download.php?file=ODQ3Mjk5NjI2OF9fX19lbGV3dWwuZXhl","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163835/","zbetcheckin"
 "163834","2019-03-22 05:08:08","http://declic-prospection.com/installation_declic.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163834/","zbetcheckin"
 "163833","2019-03-22 05:08:02","http://turismolenzarote.com/accounting/documents/download.php?file=NDg0ODU5MDQyNl9fX19zY2FuczM0LnBuZw==","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163833/","zbetcheckin"
-"163832","2019-03-22 05:03:14","http://s14b.groundyun.cn/20151218/%E5%B0%8F%E9%B8%A1%E5%85%A5%E4%BE%B5%E8%80%853.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163832/","zbetcheckin"
+"163832","2019-03-22 05:03:14","http://s14b.groundyun.cn/20151218/%E5%B0%8F%E9%B8%A1%E5%85%A5%E4%BE%B5%E8%80%853.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/163832/","zbetcheckin"
 "163831","2019-03-22 05:02:43","http://rrbmexico.com/license.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163831/","zbetcheckin"
 "163830","2019-03-22 04:51:04","https://www.drivingwitharrow.com/wp-content/plugins/w8KF86/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/163830/","Cryptolaemus1"
 "163829","2019-03-22 04:49:06","http://www.winkniga.ru/installw.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163829/","zbetcheckin"
-"163828","2019-03-22 04:40:28","http://s14b.91danji.com/20151218/%E5%B0%8F%E9%B8%A1%E5%85%A5%E4%BE%B5%E8%80%853.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163828/","zbetcheckin"
-"163827","2019-03-22 04:24:44","http://s14b.91danji.com/20151220/%E5%8C%97%E6%96%97%E7%A5%9E%E6%8B%B3%E4%B8%96%E7%BA%AA%E6%9C%AB%E6%95%91%E4%B8%96%E4%B8%BB%E4%BC%A0%E8%AF%B4.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163827/","zbetcheckin"
+"163828","2019-03-22 04:40:28","http://s14b.91danji.com/20151218/%E5%B0%8F%E9%B8%A1%E5%85%A5%E4%BE%B5%E8%80%853.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/163828/","zbetcheckin"
+"163827","2019-03-22 04:24:44","http://s14b.91danji.com/20151220/%E5%8C%97%E6%96%97%E7%A5%9E%E6%8B%B3%E4%B8%96%E7%BA%AA%E6%9C%AB%E6%95%91%E4%B8%96%E4%B8%BB%E4%BC%A0%E8%AF%B4.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/163827/","zbetcheckin"
 "163826","2019-03-22 03:53:18","http://ahsantiago.pt/templates/beez3/images/personal/rTRhOOmU4duXOXr.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/163826/","zbetcheckin"
 "163825","2019-03-22 03:47:11","http://turismolenzarote.com/accounting/documents/download.php?file=NjU0NDM3NjE4M19fX19pd2VjZXR1LmV4ZQ==","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163825/","zbetcheckin"
 "163824","2019-03-22 03:26:08","http://fileloader.netx.host/ktr/227.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163824/","zbetcheckin"
@@ -186289,7 +186809,7 @@
 "163820","2019-03-22 03:10:06","http://107.172.41.9/pftp","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/163820/","zbetcheckin"
 "163819","2019-03-22 03:10:05","http://145.239.222.222/armv7l","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/163819/","zbetcheckin"
 "163818","2019-03-22 03:10:03","http://104.248.23.140/tenshiarm6","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/163818/","zbetcheckin"
-"163817","2019-03-22 03:08:23","http://s14b.91danji.com/20160101/%E7%9C%9F%E5%AE%9E%E8%B0%8E%E8%A8%80%E4%B8%96%E7%95%8C%E7%89%88.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/163817/","zbetcheckin"
+"163817","2019-03-22 03:08:23","http://s14b.91danji.com/20160101/%E7%9C%9F%E5%AE%9E%E8%B0%8E%E8%A8%80%E4%B8%96%E7%95%8C%E7%89%88.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/163817/","zbetcheckin"
 "163815","2019-03-22 02:52:25","http://104.248.23.140/tenshim68k","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/163815/","zbetcheckin"
 "163813","2019-03-22 02:50:05","http://104.248.23.140/tenshii686","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/163813/","zbetcheckin"
 "163814","2019-03-22 02:50:05","http://104.248.23.140/tenshix86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/163814/","zbetcheckin"
@@ -190262,7 +190782,7 @@
 "159819","2019-03-15 06:11:14","http://45.67.14.165/kekopenssh","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/159819/","zbetcheckin"
 "159818","2019-03-15 06:11:13","http://31.31.203.120/ins/rift.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/159818/","zbetcheckin"
 "159817","2019-03-15 06:11:13","https://transloud.com/wp-admin/sendincsecure/support/vertrauen/De_de/2019-03/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/159817/","Cryptolaemus1"
-"159816","2019-03-15 06:11:10","https://teacherlinx.com/uploads2/trust.myaccount.docs.com/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/159816/","Cryptolaemus1"
+"159816","2019-03-15 06:11:10","https://teacherlinx.com/uploads2/trust.myaccount.docs.com/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/159816/","Cryptolaemus1"
 "159815","2019-03-15 06:11:09","http://www.yindushopping.com/wp-admin/verif.accounts.send.com/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/159815/","Cryptolaemus1"
 "159814","2019-03-15 06:11:04","http://www.buzztinker.com/wp-content/trust.myaccount.docs.net/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/159814/","Cryptolaemus1"
 "159813","2019-03-15 06:11:02","http://test-lab55.ru/wp-content/Telekom/Transaktion/022019/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/159813/","Cryptolaemus1"
@@ -191922,7 +192442,7 @@
 "158151","2019-03-13 09:55:11","http://188.209.49.189/nyKnYe6khg/fbot.x86","offline","malware_download","elf,fbot","https://urlhaus.abuse.ch/url/158151/","0xrb"
 "158150","2019-03-13 09:55:10","http://188.209.49.189/nyKnYe6khg/fbot.x86_64","offline","malware_download","elf,fbot","https://urlhaus.abuse.ch/url/158150/","0xrb"
 "158149","2019-03-13 09:55:08","http://hohesc.donebox.hu/wp-admin/0uofhz-550nrs-rznrde/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/158149/","spamhaus"
-"158148","2019-03-13 09:53:08","http://www.hmpmall.co.kr/statics/images/HMPMall.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/158148/","zbetcheckin"
+"158148","2019-03-13 09:53:08","http://www.hmpmall.co.kr/statics/images/HMPMall.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/158148/","zbetcheckin"
 "158145","2019-03-13 09:39:09","http://185.244.25.169/H18/sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/158145/","VtLyra"
 "158147","2019-03-13 09:39:09","http://185.244.25.169/H18/spc","offline","malware_download","None","https://urlhaus.abuse.ch/url/158147/","VtLyra"
 "158146","2019-03-13 09:39:09","http://185.244.25.169:80/H18/sh4","offline","malware_download","None","https://urlhaus.abuse.ch/url/158146/","VtLyra"
@@ -192807,7 +193327,7 @@
 "157261","2019-03-12 12:07:10","https://www.homing.us/wp-content/1zha-7s86pey-vkegrux/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/157261/","spamhaus"
 "157260","2019-03-12 12:07:06","http://mc.kalselprov.go.id/wp-content/kqep-4bgoas-vyfdpr/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/157260/","spamhaus"
 "157259","2019-03-12 11:59:04","http://loja.kaebischschokoladen.com.br/2018/wp-content/uploads/bau9io-tvdzx-exqsnd/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/157259/","spamhaus"
-"157258","2019-03-12 11:56:11","https://teacherlinx.com/uploads2/7vdv-1pm4cj3-kbhxtpi/","online","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/157258/","spamhaus"
+"157258","2019-03-12 11:56:11","https://teacherlinx.com/uploads2/7vdv-1pm4cj3-kbhxtpi/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/157258/","spamhaus"
 "157257","2019-03-12 11:56:10","http://176.107.129.9/brother/mips.bot","offline","malware_download","elf","https://urlhaus.abuse.ch/url/157257/","Gandylyan1"
 "157256","2019-03-12 11:56:10","http://176.107.129.9/brother/mpsl.bot","offline","malware_download","elf","https://urlhaus.abuse.ch/url/157256/","Gandylyan1"
 "157255","2019-03-12 11:56:09","http://176.107.129.9/brother/x86.bot","offline","malware_download","elf","https://urlhaus.abuse.ch/url/157255/","Gandylyan1"
@@ -194271,7 +194791,7 @@
 "155790","2019-03-11 06:31:13","http://59.24.115.81:12141/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/155790/","zbetcheckin"
 "155789","2019-03-11 06:30:20","http://142.93.53.87/bins/guguru.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/155789/","zbetcheckin"
 "155788","2019-03-11 06:30:13","http://142.93.53.87/bins/guguru.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/155788/","zbetcheckin"
-"155787","2019-03-11 06:28:24","http://71.14.255.251:57740/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/155787/","zbetcheckin"
+"155787","2019-03-11 06:28:24","http://71.14.255.251:57740/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/155787/","zbetcheckin"
 "155786","2019-03-11 06:28:17","http://167.99.74.12:80/bins/kwari.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/155786/","zbetcheckin"
 "155785","2019-03-11 06:28:08","http://167.99.74.12/bins/kwari.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/155785/","zbetcheckin"
 "155784","2019-03-11 06:27:29","http://167.99.74.12/bins/kwari.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/155784/","zbetcheckin"
@@ -195352,7 +195872,7 @@
 "154708","2019-03-08 01:22:09","https://albertgrafica.com.br/wp-content/themes/betheme/assets/animations/msg.jpg","offline","malware_download","exe,Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/154708/","malware_traffic"
 "154707","2019-03-08 01:21:32","http://wt8.91tzy.com/uiso_pe.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/154707/","zbetcheckin"
 "154706","2019-03-08 00:55:09","http://37.142.119.187:38843/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/154706/","zbetcheckin"
-"154705","2019-03-08 00:54:35","http://61.58.55.226:35773/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/154705/","zbetcheckin"
+"154705","2019-03-08 00:54:35","http://61.58.55.226:35773/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/154705/","zbetcheckin"
 "154704","2019-03-08 00:54:21","http://haipanet.com/wp-content/themes/autofocuslite/css/AvtoProNissan.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/154704/","zbetcheckin"
 "154703","2019-03-08 00:54:07","http://185.244.25.171:80/bins/tuna.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/154703/","zbetcheckin"
 "154702","2019-03-08 00:52:04","http://haipanet.com/wp-content/themes/autofocuslite/css/GKPIK.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/154702/","zbetcheckin"
@@ -197406,7 +197926,7 @@
 "152646","2019-03-05 16:47:18","http://originalsbrands.com/extensions/sendincsec/messages/question/EN_en/03-2019/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/152646/","Cryptolaemus1"
 "152645","2019-03-05 16:47:16","http://nottingham24hourplumbers.co.uk/howe3k5jf/sendincverif/legal/ios/EN_en/03-2019/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/152645/","Cryptolaemus1"
 "152644","2019-03-05 16:46:45","http://myshoppingcarts.in/wp-admin/sendincverif/support/secure/en_EN/201903/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/152644/","Cryptolaemus1"
-"152643","2019-03-05 16:46:41","http://kleinendeli.co.za/oilysgv/sendinc/legal/sec/En/2019-03/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/152643/","Cryptolaemus1"
+"152643","2019-03-05 16:46:41","http://kleinendeli.co.za/oilysgv/sendinc/legal/sec/En/2019-03/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/152643/","Cryptolaemus1"
 "152642","2019-03-05 16:46:36","http://cnr.org.br/validacao/sendincverif/legal/trust/En_en/201903/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/152642/","Cryptolaemus1"
 "152641","2019-03-05 16:46:32","http://azartline.com/wp-admin/sendincverif/service/sec/en_EN/201903/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/152641/","Cryptolaemus1"
 "152640","2019-03-05 16:46:30","http://ARENDAKASS.su/v6yq8qg/sendincencrypt/legal/ios/en_EN/032019/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/152640/","Cryptolaemus1"
@@ -197583,8 +198103,8 @@
 "152469","2019-03-05 12:51:16","http://ooliab.org/cgi-bin/td6q2-gzi2o-eqzpz.view/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/152469/","spamhaus"
 "152468","2019-03-05 12:50:10","http://blog.atxin.cc/wp-admin/sendincsec/messages/trust/EN/032019/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/152468/","Cryptolaemus1"
 "152467","2019-03-05 12:45:05","http://project.hoangnq.com/tour/images/catalog/sendincverif/service/secure/EN_en/03-2019/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/152467/","Cryptolaemus1"
-"152466","2019-03-05 12:35:02","http://ozemag.com/wp-content/themes/emag/template-parts/ashan.russia.zakaz.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/152466/","zbetcheckin"
-"152465","2019-03-05 12:34:07","http://ozemag.com/wp-content/themes/emag/template-parts/metro.cash.and.carry.zakaz.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/152465/","zbetcheckin"
+"152466","2019-03-05 12:35:02","http://ozemag.com/wp-content/themes/emag/template-parts/ashan.russia.zakaz.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/152466/","zbetcheckin"
+"152465","2019-03-05 12:34:07","http://ozemag.com/wp-content/themes/emag/template-parts/metro.cash.and.carry.zakaz.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/152465/","zbetcheckin"
 "152464","2019-03-05 12:34:04","http://46.29.160.82/mips","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/152464/","zbetcheckin"
 "152463","2019-03-05 12:33:03","http://pantone-iq.com/wp-admin/kboh-1vr6p-jzks.view/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/152463/","Cryptolaemus1"
 "152462","2019-03-05 12:30:44","http://mohidigi.com/wp-admin/woic5-n2xz2-qjlnc.view/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/152462/","spamhaus"
@@ -236962,7 +237482,7 @@
 "112426","2019-01-28 21:23:16","http://rus-fishing.com/images/main/2/1/officeonline.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/112426/","zbetcheckin"
 "112425","2019-01-28 21:23:11","http://rus-fishing.com/images/main/1/msoffice.msi","offline","malware_download","msi","https://urlhaus.abuse.ch/url/112425/","zbetcheckin"
 "112424","2019-01-28 21:12:12","http://kobacco.com/shop/haoa.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/112424/","zbetcheckin"
-"112423","2019-01-28 21:09:17","http://dgnj.cn/clbweb2005/gisstat/j2re-1_4_2-windows-i586.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/112423/","zbetcheckin"
+"112423","2019-01-28 21:09:17","http://dgnj.cn/clbweb2005/gisstat/j2re-1_4_2-windows-i586.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/112423/","zbetcheckin"
 "112422","2019-01-28 20:54:27","http://x.jmxded153.net/y.z?l=http://thuraya.kz/iVIg-wWj_tCpHue-kR/EXT/PaymentStatus/En/Past-Due-Invoice&r=11940086345&d=271873&p=1&t=h/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/112422/","Cryptolaemus1"
 "112421","2019-01-28 20:54:22","http://trehoadatoanthan.net/dBsSs-Kbz_I-lLs/EXT/PaymentStatus/En/Service-Report-15060//","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/112421/","Cryptolaemus1"
 "112420","2019-01-28 20:54:14","http://t2lisboa.lisbonlab.com/GxCR-4lm_N-Be/INVOICE/2769/OVERPAYMENT/US/Companies-Invoice-7952621/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/112420/","Cryptolaemus1"
@@ -237905,7 +238425,7 @@
 "111451","2019-01-27 15:15:04","http://80.211.8.37/bins/sora.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/111451/","0xrb"
 "111449","2019-01-27 15:15:03","http://80.211.8.37/bins/sora.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/111449/","0xrb"
 "111450","2019-01-27 15:15:03","http://80.211.8.37/bins/sora.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/111450/","0xrb"
-"111448","2019-01-27 15:13:31","http://down.pdf.cqmjkjzx.com/setupgspdf_4410.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/111448/","zbetcheckin"
+"111448","2019-01-27 15:13:31","http://down.pdf.cqmjkjzx.com/setupgspdf_4410.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/111448/","zbetcheckin"
 "111447","2019-01-27 15:09:05","http://realdealhouse.eu/OBO/obi.exe","offline","malware_download","exe,Formbook,NanoCore","https://urlhaus.abuse.ch/url/111447/","zbetcheckin"
 "111446","2019-01-27 15:08:07","http://www.majesticintltravel.com/web/ow.exe","offline","malware_download","exe,RemcosRAT","https://urlhaus.abuse.ch/url/111446/","zbetcheckin"
 "111445","2019-01-27 15:00:03","http://92.63.197.153/m/1.exe","offline","malware_download","exe,GandCrab,Ransomware,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/111445/","de_aviation"
@@ -243098,7 +243618,7 @@
 "106037","2019-01-20 08:00:11","http://config.wwmhdq.com/bug/jkpic/JikePicUpFile.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106037/","zbetcheckin"
 "106036","2019-01-20 06:11:48","http://kimyen.net/upload/CTCKeoxe2.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/106036/","zbetcheckin"
 "106035","2019-01-20 05:26:31","http://sgm.pc6.com/xiao/llk00.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106035/","zbetcheckin"
-"106034","2019-01-20 05:26:18","http://sgm.pc6.com/xiao4/kongjiangbing_65337.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106034/","zbetcheckin"
+"106034","2019-01-20 05:26:18","http://sgm.pc6.com/xiao4/kongjiangbing_65337.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/106034/","zbetcheckin"
 "106033","2019-01-20 05:20:09","http://config.wwmhdq.com/bug/jkpic/sub/GeekPicMPage.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106033/","zbetcheckin"
 "106032","2019-01-20 05:03:09","http://cu.dodonew.com/dodonew1137/donewk.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106032/","zbetcheckin"
 "106031","2019-01-20 04:52:23","http://sgm.pc6.com/xiao5/AlphaBallSetup.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/106031/","zbetcheckin"
@@ -247959,7 +248479,7 @@
 "101046","2019-01-02 10:57:07","http://greenwhitegranit.com/components/com_search/models/image.zip","offline","malware_download","arkei,Encoded,Task","https://urlhaus.abuse.ch/url/101046/","anonymous"
 "101045","2019-01-02 10:57:06","http://teevo.lpipl.com/uploads/music/thumbnails/zic.zip","offline","malware_download","arkei,Encoded,Task","https://urlhaus.abuse.ch/url/101045/","anonymous"
 "101044","2019-01-02 10:56:31","http://kolobkoproms.ug/freebl3.dll","offline","malware_download","arkei,Module","https://urlhaus.abuse.ch/url/101044/","anonymous"
-"101043","2019-01-02 10:53:06","http://livetrack.in/EmployeeMasterImages/qace.jpg","offline","malware_download","arkei,Encoded,Task","https://urlhaus.abuse.ch/url/101043/","anonymous"
+"101043","2019-01-02 10:53:06","http://livetrack.in/EmployeeMasterImages/qace.jpg","online","malware_download","arkei,Encoded,Task","https://urlhaus.abuse.ch/url/101043/","anonymous"
 "101042","2019-01-02 10:50:03","https://deniselevenick.com/","offline","malware_download","BrushaLoader,geofenced,ITA,POL,zipped-VBS","https://urlhaus.abuse.ch/url/101042/","anonymous"
 "101041","2019-01-02 09:52:16","http://bihanhtailor.com/DOC/tracking-number-and-invoice-of-your-order/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/101041/","zbetcheckin"
 "101040","2019-01-02 09:18:07","http://bihanhtailor.com/Greeting-ECard-2018/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/101040/","zbetcheckin"
@@ -261095,7 +261615,7 @@
 "87533","2018-11-30 15:44:07","http://macecraft.site/modules/geoip/geofile/dll/popup.dbs","offline","malware_download","exe","https://urlhaus.abuse.ch/url/87533/","de_aviation"
 "87532","2018-11-30 15:44:04","http://ddl3.data.hu/get/300095/11552248/2018112810098HTG.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/87532/","de_aviation"
 "87531","2018-11-30 15:44:03","https://share.dmca.gripe/3MPMOJEMMqUSlT7v.jpg","offline","malware_download","exe,NanoCore,rat","https://urlhaus.abuse.ch/url/87531/","de_aviation"
-"87530","2018-11-30 15:29:01","http://www.tandenblekenhoofddorp.nl/files/EN_en/Sales-Invoice/","offline","malware_download","emotet,heodo,word doc","https://urlhaus.abuse.ch/url/87530/","malware_traffic"
+"87530","2018-11-30 15:29:01","http://www.tandenblekenhoofddorp.nl/files/EN_en/Sales-Invoice/","online","malware_download","emotet,heodo,word doc","https://urlhaus.abuse.ch/url/87530/","malware_traffic"
 "87529","2018-11-30 15:29:00","http://wowter.com/files/US/Invoice-for-i/w-11/29/2018/","offline","malware_download","emotet,heodo,word doc","https://urlhaus.abuse.ch/url/87529/","malware_traffic"
 "87528","2018-11-30 15:28:58","http://winnieobrien.com/doc/En/Past-Due-Invoice/","offline","malware_download","emotet,heodo,word doc","https://urlhaus.abuse.ch/url/87528/","malware_traffic"
 "87527","2018-11-30 15:28:56","http://whysquare.co.nz/EN/Clients_Coupons/","offline","malware_download","emotet,heodo,word doc","https://urlhaus.abuse.ch/url/87527/","malware_traffic"
@@ -270529,7 +271049,7 @@
 "77872","2018-11-09 15:38:04","http://kpg.ru/EjsaGtbK","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/77872/","ps66uk"
 "77871","2018-11-09 15:38:03","http://uc-olimp.ru/r7nv7Do","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/77871/","ps66uk"
 "77870","2018-11-09 15:36:06","http://officemysuppbox.com/staterepository","offline","malware_download","exe","https://urlhaus.abuse.ch/url/77870/","de_aviation"
-"77869","2018-11-09 15:36:05","http://150.co.il/AnyDesk.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/77869/","de_aviation"
+"77869","2018-11-09 15:36:05","http://150.co.il/AnyDesk.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/77869/","de_aviation"
 "77868","2018-11-09 15:14:06","https://www.retailtechexpo.cn/en/wp-content/wp-rocket-config/Corporation/En/Important-Please-Read/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/77868/","zbetcheckin"
 "77867","2018-11-09 15:02:03","http://wiki.campusvirtualelmayor.edu.co/sites/default/files/..!/wsc.dll","offline","malware_download","None","https://urlhaus.abuse.ch/url/77867/","JayTHL"
 "77866","2018-11-09 15:00:05","http://185.5.248.205/xxx64.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/77866/","zbetcheckin"
@@ -280710,7 +281230,7 @@
 "67529","2018-10-13 05:02:07","http://www.aractidf.org/misc/rl8109.jpg","offline","malware_download","exxe","https://urlhaus.abuse.ch/url/67529/","de_aviation"
 "67528","2018-10-13 05:02:06","http://www.aractidf.org/misc/pw8109.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/67528/","de_aviation"
 "67527","2018-10-13 05:02:02","http://www.aractidf.org/misc/dr8109.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/67527/","de_aviation"
-"67526","2018-10-13 04:13:41","http://ftpcnc-p2sp.pconline.com.cn/pub/download/200509/CH-Nebula_225_PConline.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/67526/","zbetcheckin"
+"67526","2018-10-13 04:13:41","http://ftpcnc-p2sp.pconline.com.cn/pub/download/200509/CH-Nebula_225_PConline.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/67526/","zbetcheckin"
 "67525","2018-10-13 03:28:41","http://ftpcnc-p2sp.pconline.com.cn/pub/download/200408/001TV.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/67525/","zbetcheckin"
 "67524","2018-10-13 03:14:05","http://www.msmapparelsourcing.com/wp-admin/users/newnaocor.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/67524/","zbetcheckin"
 "67523","2018-10-13 02:30:18","http://smplmods-ru.1gb.ru/ptss_crypted.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/67523/","zbetcheckin"
@@ -281532,7 +282052,7 @@
 "66696","2018-10-11 06:39:05","https://onedrive.live.com/download?cid=1587E1503945705D&resid=1587E1503945705D%21142&authkey=AHip447CL0iJn60","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66696/","zbetcheckin"
 "66695","2018-10-11 06:33:04","http://46.29.165.163/kek.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/66695/","zbetcheckin"
 "66694","2018-10-11 06:26:14","http://pay.aqiu6.com/autoup/Client/AQClient.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/66694/","zbetcheckin"
-"66692","2018-10-11 06:20:11","http://zj.9553.com/soft/qqzhuangjia_v5.0.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66692/","zbetcheckin"
+"66692","2018-10-11 06:20:11","http://zj.9553.com/soft/qqzhuangjia_v5.0.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66692/","zbetcheckin"
 "66691","2018-10-11 05:58:03","http://tunjihost.ga/svr/foxy.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/66691/","zbetcheckin"
 "66690","2018-10-11 05:47:04","http://46.105.103.57/DATA/TV/csrss.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/66690/","abuse_ch"
 "66689","2018-10-11 05:44:02","http://176.32.33.155/bins/gemini.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/66689/","zbetcheckin"
@@ -288904,7 +289424,7 @@
 "59190","2018-09-23 13:05:06","http://medicalfarmitalia.it/themes/theme1197/modules/blocklink/translations/apps/ygx.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59190/","zbetcheckin"
 "59189","2018-09-23 11:39:03","http://bastom58.ru/urldefense_proofpoint/billpay_bankofamerica_com/PaymentCenter_Index/09_18","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59189/","zbetcheckin"
 "59188","2018-09-23 11:38:03","http://mail.wasafi.tv/scan/EN_en/Invoice","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59188/","zbetcheckin"
-"59187","2018-09-23 11:37:11","http://config.cqhbkjzx.com/bug/skoffice/thinkerup.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59187/","zbetcheckin"
+"59187","2018-09-23 11:37:11","http://config.cqhbkjzx.com/bug/skoffice/thinkerup.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/59187/","zbetcheckin"
 "59186","2018-09-23 11:35:08","http://blog.51cto.com/attachment/201206/4594712_1339214458.rar","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59186/","zbetcheckin"
 "59185","2018-09-23 11:23:05","http://vnt.website/nomoes/ban.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59185/","zbetcheckin"
 "59184","2018-09-23 11:22:08","http://skynetexpress.ml/akss/bbnn.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59184/","zbetcheckin"
@@ -322337,7 +322857,7 @@
 "25170","2018-06-28 23:04:08","http://signsdesigns.com.au/Invoice-Corrections-06/28/2018/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/25170/","anonymous"
 "25171","2018-06-28 23:04:08","http://smi-nkama.ru/STATUS/New-Invoice-QL5101-VO-90626/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/25171/","anonymous"
 "25169","2018-06-28 23:04:06","http://sasamototen.jp/Company-Invoices-June/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/25169/","anonymous"
-"25168","2018-06-28 23:04:04","http://sahathaikasetpan.com/Declaracion-mensual-junio/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/25168/","anonymous"
+"25168","2018-06-28 23:04:04","http://sahathaikasetpan.com/Declaracion-mensual-junio/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/25168/","anonymous"
 "25167","2018-06-28 23:04:01","http://sahathaikasetpan.com/DEF/New-Order-Upcoming/Invoice-06-28-18/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/25167/","anonymous"
 "25165","2018-06-28 23:03:57","http://nisekotourguide.net/acmailer/harmoneyresorts/image/Payment-and-address/Order-8288256568/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/25165/","anonymous"
 "25164","2018-06-28 23:03:55","http://muybn.com/aspnet_client/Outstanding-Invoices-June/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/25164/","anonymous"
@@ -323019,7 +323539,7 @@
 "24480","2018-06-28 04:33:00","http://saudigeriatrics.org/OVERDUE-ACCOUNT/Invoice-06-27-18/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/24480/","JayTHL"
 "24478","2018-06-28 04:32:58","http://sandearth.com/Client/Invoice-955175372-062618/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/24478/","JayTHL"
 "24479","2018-06-28 04:32:58","http://sangorod.websaiting.ru/RECHNUNG/Bezahlen-Sie-die-Rechnung/","offline","malware_download","None","https://urlhaus.abuse.ch/url/24479/","JayTHL"
-"24477","2018-06-28 04:32:51","http://sahathaikasetpan.com/ACCOUNT/Order-22374507161/","online","malware_download","heodo","https://urlhaus.abuse.ch/url/24477/","JayTHL"
+"24477","2018-06-28 04:32:51","http://sahathaikasetpan.com/ACCOUNT/Order-22374507161/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/24477/","JayTHL"
 "24476","2018-06-28 04:32:46","http://ru-usa.ru/New-Order-Upcoming/Invoice-03575/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/24476/","JayTHL"
 "24475","2018-06-28 04:32:44","http://russiantraders.ru/Zahlungserinnerung/Erinnerung-an-die-Rechnungszahlung-Nr03625/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/24475/","JayTHL"
 "24474","2018-06-28 04:32:41","http://rite-equipment.aboxercompany.com/Pago-atrasado/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/24474/","JayTHL"
@@ -341440,7 +341960,7 @@
 "1491","2018-03-29 14:42:52","http://cosmeticoslindas.com/Mar-20-01-58-05/Quantum-View/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1491/","abuse_ch"
 "1490","2018-03-29 14:42:48","http://coolsculptingbeforeafter.com/PayPal-US/Corporation/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1490/","abuse_ch"
 "1489","2018-03-29 14:42:45","http://clients.steadfast.digital/QQV-206648272849/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1489/","abuse_ch"
-"1488","2018-03-29 14:42:44","http://cista-dobra-voda.com/WIRE-FORM/PK-4143542213772/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1488/","abuse_ch"
+"1488","2018-03-29 14:42:44","http://cista-dobra-voda.com/WIRE-FORM/PK-4143542213772/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1488/","abuse_ch"
 "1487","2018-03-29 14:42:23","http://chungcuirisgardenmydinh.info/WIRE-FORM/QCQ-44937/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1487/","abuse_ch"
 "1486","2018-03-29 14:42:05","http://chovaytienmatdanang.info/WIRE-FORM/CUB-89915244/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1486/","abuse_ch"
 "1485","2018-03-29 14:41:45","http://chdagent.com/PayPal-US/INFO/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/1485/","abuse_ch"
diff --git a/urlhaus-filter-bind-online.conf b/urlhaus-filter-bind-online.conf
index e8b66c86..3eff5786 100644
--- a/urlhaus-filter-bind-online.conf
+++ b/urlhaus-filter-bind-online.conf
@@ -1,16 +1,19 @@
 # Title: abuse.ch URLhaus Malicious Domains BIND Blocklist
-# Updated: Wed, 29 Apr 2020 12:09:39 UTC
+# Updated: Thu, 30 Apr 2020 00:09:24 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
 zone "0400msc.com" { type master; notify no; file "null.zone.file"; };
 zone "13pope.com" { type master; notify no; file "null.zone.file"; };
-zone "150.co.il" { type master; notify no; file "null.zone.file"; };
+zone "1l04.timeisletitgo.ru" { type master; notify no; file "null.zone.file"; };
 zone "2000kumdo.com" { type master; notify no; file "null.zone.file"; };
 zone "21robo.com" { type master; notify no; file "null.zone.file"; };
+zone "2xmy.timeisletitgo.ru" { type master; notify no; file "null.zone.file"; };
 zone "3.zhzy999.net" { type master; notify no; file "null.zone.file"; };
 zone "3.zhzy999.net3.zhzy999.net" { type master; notify no; file "null.zone.file"; };
 zone "3mandatesmedia.com" { type master; notify no; file "null.zone.file"; };
+zone "3q9h.timeisletitgo.ru" { type master; notify no; file "null.zone.file"; };
+zone "3vc6.seeanu.ru" { type master; notify no; file "null.zone.file"; };
 zone "402musicfest.com" { type master; notify no; file "null.zone.file"; };
 zone "420hempizone.co" { type master; notify no; file "null.zone.file"; };
 zone "49parallel.ca" { type master; notify no; file "null.zone.file"; };
@@ -18,17 +21,20 @@ zone "5321msc.com" { type master; notify no; file "null.zone.file"; };
 zone "786suncity.com" { type master; notify no; file "null.zone.file"; };
 zone "8133msc.com" { type master; notify no; file "null.zone.file"; };
 zone "8200msc.com" { type master; notify no; file "null.zone.file"; };
+zone "87du.vip" { type master; notify no; file "null.zone.file"; };
 zone "887sconline.com" { type master; notify no; file "null.zone.file"; };
 zone "88mscco.com" { type master; notify no; file "null.zone.file"; };
 zone "9983suncity.com" { type master; notify no; file "null.zone.file"; };
+zone "Muanha.xyz" { type master; notify no; file "null.zone.file"; };
 zone "ZEROTERWWGFBOT.hoesbigmadzero.tk" { type master; notify no; file "null.zone.file"; };
 zone "a-reality.co.uk" { type master; notify no; file "null.zone.file"; };
+zone "a.seeanu.ru" { type master; notify no; file "null.zone.file"; };
 zone "a.xiazai163.com" { type master; notify no; file "null.zone.file"; };
 zone "aaasolution.co.th" { type master; notify no; file "null.zone.file"; };
 zone "accentlandscapes.com" { type master; notify no; file "null.zone.file"; };
 zone "accessyouraudience.com" { type master; notify no; file "null.zone.file"; };
 zone "acteon.com.ar" { type master; notify no; file "null.zone.file"; };
-zone "activecost.com.au" { type master; notify no; file "null.zone.file"; };
+zone "aelogica.com" { type master; notify no; file "null.zone.file"; };
 zone "agiandsam.com" { type master; notify no; file "null.zone.file"; };
 zone "agipasesores.com" { type master; notify no; file "null.zone.file"; };
 zone "agsir.com" { type master; notify no; file "null.zone.file"; };
@@ -46,10 +52,9 @@ zone "alohasoftware.net" { type master; notify no; file "null.zone.file"; };
 zone "alphaconsumer.net" { type master; notify no; file "null.zone.file"; };
 zone "am-concepts.ca" { type master; notify no; file "null.zone.file"; };
 zone "amd.alibuf.com" { type master; notify no; file "null.zone.file"; };
+zone "amedeoscognamiglio.329263.com" { type master; notify no; file "null.zone.file"; };
 zone "amemarine.co.th" { type master; notify no; file "null.zone.file"; };
 zone "americanrange.com" { type master; notify no; file "null.zone.file"; };
-zone "anadolutatili.com" { type master; notify no; file "null.zone.file"; };
-zone "anaekppystdy4initalymedicalconsultancy.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "andreabo1.myftp.biz" { type master; notify no; file "null.zone.file"; };
 zone "andreelapeyre.com" { type master; notify no; file "null.zone.file"; };
 zone "andremaraisbeleggings.co.za" { type master; notify no; file "null.zone.file"; };
@@ -63,7 +68,7 @@ zone "apware.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "archiv.bg" { type master; notify no; file "null.zone.file"; };
 zone "areac-agr.com" { type master; notify no; file "null.zone.file"; };
 zone "aresorganics.com" { type master; notify no; file "null.zone.file"; };
-zone "asadairtravel.com" { type master; notify no; file "null.zone.file"; };
+zone "arowanafishforsale.com" { type master; notify no; file "null.zone.file"; };
 zone "ascentive.com" { type master; notify no; file "null.zone.file"; };
 zone "ashoakacharya.com" { type master; notify no; file "null.zone.file"; };
 zone "askarindo.or.id" { type master; notify no; file "null.zone.file"; };
@@ -92,7 +97,7 @@ zone "bd11.52lishi.com" { type master; notify no; file "null.zone.file"; };
 zone "bd12.52lishi.com" { type master; notify no; file "null.zone.file"; };
 zone "bd18.52lishi.com" { type master; notify no; file "null.zone.file"; };
 zone "bd19.52lishi.com" { type master; notify no; file "null.zone.file"; };
-zone "beachview.co.za" { type master; notify no; file "null.zone.file"; };
+zone "beforeshithappens.com" { type master; notify no; file "null.zone.file"; };
 zone "beibei.xx007.cc" { type master; notify no; file "null.zone.file"; };
 zone "bepgroup.com.hk" { type master; notify no; file "null.zone.file"; };
 zone "besserblok-ufa.ru" { type master; notify no; file "null.zone.file"; };
@@ -109,19 +114,23 @@ zone "blankki.com" { type master; notify no; file "null.zone.file"; };
 zone "blog.241optical.com" { type master; notify no; file "null.zone.file"; };
 zone "blog.anytimeneeds.com" { type master; notify no; file "null.zone.file"; };
 zone "blog.hanxe.com" { type master; notify no; file "null.zone.file"; };
+zone "bolescy.com" { type master; notify no; file "null.zone.file"; };
 zone "bolidar.dnset.com" { type master; notify no; file "null.zone.file"; };
 zone "bondbuild.com.sg" { type master; notify no; file "null.zone.file"; };
+zone "bonyamin.com" { type master; notify no; file "null.zone.file"; };
 zone "bookmytripping.com" { type master; notify no; file "null.zone.file"; };
 zone "bpo.correct.go.th" { type master; notify no; file "null.zone.file"; };
 zone "brasstec.com.br" { type master; notify no; file "null.zone.file"; };
 zone "brbs.customer.netspace.net.au" { type master; notify no; file "null.zone.file"; };
 zone "brenleyquartzgh.com" { type master; notify no; file "null.zone.file"; };
 zone "brewmethods.com" { type master; notify no; file "null.zone.file"; };
+zone "britica.vn" { type master; notify no; file "null.zone.file"; };
 zone "btlocum.pl" { type master; notify no; file "null.zone.file"; };
 zone "bugansavings.com" { type master; notify no; file "null.zone.file"; };
 zone "buydishtv.in" { type master; notify no; file "null.zone.file"; };
 zone "byqkdy.com" { type master; notify no; file "null.zone.file"; };
 zone "cameli.vn" { type master; notify no; file "null.zone.file"; };
+zone "capath.vn" { type master; notify no; file "null.zone.file"; };
 zone "caravella.com.br" { type master; notify no; file "null.zone.file"; };
 zone "cassiagumrefined.com" { type master; notify no; file "null.zone.file"; };
 zone "cassovia.sk" { type master; notify no; file "null.zone.file"; };
@@ -137,7 +146,6 @@ zone "cf0.pw" { type master; notify no; file "null.zone.file"; };
 zone "cfs5.tistory.com" { type master; notify no; file "null.zone.file"; };
 zone "ch.rmu.ac.th" { type master; notify no; file "null.zone.file"; };
 zone "changematterscounselling.com" { type master; notify no; file "null.zone.file"; };
-zone "chantdownproster.com" { type master; notify no; file "null.zone.file"; };
 zone "chanvribloc.com" { type master; notify no; file "null.zone.file"; };
 zone "charm.bizfxr.com" { type master; notify no; file "null.zone.file"; };
 zone "chauffeursontravel.com" { type master; notify no; file "null.zone.file"; };
@@ -146,16 +154,16 @@ zone "chinhdropfile.myvnc.com" { type master; notify no; file "null.zone.file";
 zone "chinhdropfile80.myvnc.com" { type master; notify no; file "null.zone.file"; };
 zone "chipmarkets.com" { type master; notify no; file "null.zone.file"; };
 zone "chj.m.dodo52.com" { type master; notify no; file "null.zone.file"; };
-zone "cista-dobra-voda.com" { type master; notify no; file "null.zone.file"; };
+zone "cinnamoncreations.com.au" { type master; notify no; file "null.zone.file"; };
 zone "clearwaterriveroutfitting.com" { type master; notify no; file "null.zone.file"; };
 zone "client.yaap.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "clinicamariademolina.com" { type master; notify no; file "null.zone.file"; };
-zone "cloud.wmsinfo.com.br" { type master; notify no; file "null.zone.file"; };
 zone "common-factor.nl" { type master; notify no; file "null.zone.file"; };
 zone "compesat.com" { type master; notify no; file "null.zone.file"; };
 zone "complan.hu" { type master; notify no; file "null.zone.file"; };
 zone "complanbt.hu" { type master; notify no; file "null.zone.file"; };
 zone "comtechadsl.com" { type master; notify no; file "null.zone.file"; };
+zone "config.cqhbkjzx.com" { type master; notify no; file "null.zone.file"; };
 zone "config.kuaisousou.top" { type master; notify no; file "null.zone.file"; };
 zone "consultingcy.com" { type master; notify no; file "null.zone.file"; };
 zone "corazondelcielo.mx" { type master; notify no; file "null.zone.file"; };
@@ -163,7 +171,7 @@ zone "counciloflight.bravepages.com" { type master; notify no; file "null.zone.f
 zone "cqjcc.org" { type master; notify no; file "null.zone.file"; };
 zone "crimebranch.in" { type master; notify no; file "null.zone.file"; };
 zone "crittersbythebay.com" { type master; notify no; file "null.zone.file"; };
-zone "crudenergyllc.com" { type master; notify no; file "null.zone.file"; };
+zone "cryptoomarket.com" { type master; notify no; file "null.zone.file"; };
 zone "csnserver.com" { type master; notify no; file "null.zone.file"; };
 zone "csw.hu" { type master; notify no; file "null.zone.file"; };
 zone "cvc.com.pl" { type master; notify no; file "null.zone.file"; };
@@ -182,17 +190,22 @@ zone "dawaphoto.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "daynightgym.com" { type master; notify no; file "null.zone.file"; };
 zone "de.gsearch.com.de" { type master; notify no; file "null.zone.file"; };
 zone "deixameuskls.tripod.com" { type master; notify no; file "null.zone.file"; };
+zone "demo10.onbm.ir" { type master; notify no; file "null.zone.file"; };
+zone "demo13.dsdemosite.com" { type master; notify no; file "null.zone.file"; };
 zone "denkagida.com.tr" { type master; notify no; file "null.zone.file"; };
 zone "depgrup.com" { type master; notify no; file "null.zone.file"; };
 zone "depot7.com" { type master; notify no; file "null.zone.file"; };
 zone "derivativespro.in" { type master; notify no; file "null.zone.file"; };
+zone "dev.apshaps.se" { type master; notify no; file "null.zone.file"; };
 zone "dev.sebpo.net" { type master; notify no; file "null.zone.file"; };
+zone "dev1.xicom.us" { type master; notify no; file "null.zone.file"; };
 zone "dev5.mypagevn.com" { type master; notify no; file "null.zone.file"; };
 zone "dezcom.com" { type master; notify no; file "null.zone.file"; };
 zone "dfcf.91756.cn" { type master; notify no; file "null.zone.file"; };
 zone "dfd.zhzy999.net" { type master; notify no; file "null.zone.file"; };
 zone "dfzm.91756.cn" { type master; notify no; file "null.zone.file"; };
 zone "dgecolesdepolice.bf" { type master; notify no; file "null.zone.file"; };
+zone "dgnj.cn" { type master; notify no; file "null.zone.file"; };
 zone "dhlservices.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "diazavendano.cl" { type master; notify no; file "null.zone.file"; };
 zone "dichvuvesinhcongnghiep.top" { type master; notify no; file "null.zone.file"; };
@@ -200,6 +213,7 @@ zone "dienmaycu.vn" { type master; notify no; file "null.zone.file"; };
 zone "dieselmoreno.cl" { type master; notify no; file "null.zone.file"; };
 zone "digilib.dianhusada.ac.id" { type master; notify no; file "null.zone.file"; };
 zone "digiovanniconsultants.com" { type master; notify no; file "null.zone.file"; };
+zone "digital-marketing-institute-delhi.empeeevents.com" { type master; notify no; file "null.zone.file"; };
 zone "digitaldog.de" { type master; notify no; file "null.zone.file"; };
 zone "discuzx.win" { type master; notify no; file "null.zone.file"; };
 zone "ditec.com.my" { type master; notify no; file "null.zone.file"; };
@@ -224,6 +238,7 @@ zone "down.ancamera.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "down.gogominer.com" { type master; notify no; file "null.zone.file"; };
 zone "down.haote.com" { type master; notify no; file "null.zone.file"; };
 zone "down.pcclear.com" { type master; notify no; file "null.zone.file"; };
+zone "down.pdf.cqmjkjzx.com" { type master; notify no; file "null.zone.file"; };
 zone "down.startools.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "down.tgjkbx.cn" { type master; notify no; file "null.zone.file"; };
 zone "down.upzxt.com" { type master; notify no; file "null.zone.file"; };
@@ -246,6 +261,7 @@ zone "dralpaslan.com" { type master; notify no; file "null.zone.file"; };
 zone "dreamtrips.cheap" { type master; notify no; file "null.zone.file"; };
 zone "drools-moved.46999.n3.nabble.com" { type master; notify no; file "null.zone.file"; };
 zone "druzim.freewww.biz" { type master; notify no; file "null.zone.file"; };
+zone "drwendyellis.com" { type master; notify no; file "null.zone.file"; };
 zone "dsiun.com" { type master; notify no; file "null.zone.file"; };
 zone "dtsay.xyz" { type master; notify no; file "null.zone.file"; };
 zone "dudulm.com" { type master; notify no; file "null.zone.file"; };
@@ -256,15 +272,17 @@ zone "dx1.qqtn.com" { type master; notify no; file "null.zone.file"; };
 zone "dx2.qqtn.com" { type master; notify no; file "null.zone.file"; };
 zone "dx30.siweidaoxiang.com" { type master; notify no; file "null.zone.file"; };
 zone "dx60.siweidaoxiang.com" { type master; notify no; file "null.zone.file"; };
+zone "dzapasigroup.usapglobal.org" { type master; notify no; file "null.zone.file"; };
 zone "dzinestudio87.co.uk" { type master; notify no; file "null.zone.file"; };
-zone "dzyzz.cn" { type master; notify no; file "null.zone.file"; };
 zone "e.dangeana.com" { type master; notify no; file "null.zone.file"; };
+zone "earningtipsbd.com" { type master; notify no; file "null.zone.file"; };
 zone "easydown.workday360.cn" { type master; notify no; file "null.zone.file"; };
 zone "ebook.w3wvg.com" { type master; notify no; file "null.zone.file"; };
 zone "edicolanazionale.it" { type master; notify no; file "null.zone.file"; };
 zone "emir-elbahr.com" { type master; notify no; file "null.zone.file"; };
 zone "enc-tech.com" { type master; notify no; file "null.zone.file"; };
 zone "entre-potes.mon-application.com" { type master; notify no; file "null.zone.file"; };
+zone "eposar.com.ar" { type master; notify no; file "null.zone.file"; };
 zone "er-bulisguvenligi.com" { type master; notify no; file "null.zone.file"; };
 zone "ermekanik.com" { type master; notify no; file "null.zone.file"; };
 zone "esolvent.pl" { type master; notify no; file "null.zone.file"; };
@@ -278,6 +296,7 @@ zone "fastsoft.onlinedown.net" { type master; notify no; file "null.zone.file";
 zone "fazi.pl" { type master; notify no; file "null.zone.file"; };
 zone "fenoma.net" { type master; notify no; file "null.zone.file"; };
 zone "fidiag.kymco.com" { type master; notify no; file "null.zone.file"; };
+zone "fifa555easy.329263.com" { type master; notify no; file "null.zone.file"; };
 zone "figuig.net" { type master; notify no; file "null.zone.file"; };
 zone "fileco.jobkorea.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "filen3.utengine.co.kr" { type master; notify no; file "null.zone.file"; };
@@ -289,21 +308,22 @@ zone "fitmanacademy.com" { type master; notify no; file "null.zone.file"; };
 zone "fkd.derpcity.ru" { type master; notify no; file "null.zone.file"; };
 zone "flex.ru" { type master; notify no; file "null.zone.file"; };
 zone "flood-protection.org" { type master; notify no; file "null.zone.file"; };
-zone "foodbooktv.com" { type master; notify no; file "null.zone.file"; };
 zone "fordlamdong.com.vn" { type master; notify no; file "null.zone.file"; };
-zone "foreveramericabrands.com" { type master; notify no; file "null.zone.file"; };
 zone "foreverprecious.org" { type master; notify no; file "null.zone.file"; };
+zone "foxfennecs.com" { type master; notify no; file "null.zone.file"; };
 zone "frin.ng" { type master; notify no; file "null.zone.file"; };
 zone "fte.m.dodo52.com" { type master; notify no; file "null.zone.file"; };
+zone "ftpcnc-p2sp.pconline.com.cn" { type master; notify no; file "null.zone.file"; };
 zone "ftpftpftp.com" { type master; notify no; file "null.zone.file"; };
 zone "funletters.net" { type master; notify no; file "null.zone.file"; };
-zone "funpartyrent.com" { type master; notify no; file "null.zone.file"; };
 zone "futuregraphics.com.ar" { type master; notify no; file "null.zone.file"; };
 zone "futurodelasciudades.org" { type master; notify no; file "null.zone.file"; };
 zone "g.7230.com" { type master; notify no; file "null.zone.file"; };
 zone "g0ogle.free.fr" { type master; notify no; file "null.zone.file"; };
+zone "gainsdirectory.com" { type master; notify no; file "null.zone.file"; };
 zone "galuhtea.com" { type master; notify no; file "null.zone.file"; };
 zone "gamee.top" { type master; notify no; file "null.zone.file"; };
+zone "garage.themebuffets.com" { type master; notify no; file "null.zone.file"; };
 zone "garenanow.myvnc.com" { type master; notify no; file "null.zone.file"; };
 zone "garenanow4.myvnc.com" { type master; notify no; file "null.zone.file"; };
 zone "gargiulo.com.ar" { type master; notify no; file "null.zone.file"; };
@@ -315,7 +335,6 @@ zone "germistonmiraclecentre.co.za" { type master; notify no; file "null.zone.fi
 zone "ghislain.dartois.pagesperso-orange.fr" { type master; notify no; file "null.zone.file"; };
 zone "ghwls44.gabia.io" { type master; notify no; file "null.zone.file"; };
 zone "gimscompany.com" { type master; notify no; file "null.zone.file"; };
-zone "glitchexotika.com" { type master; notify no; file "null.zone.file"; };
 zone "glitzygal.net" { type master; notify no; file "null.zone.file"; };
 zone "gnimelf.net" { type master; notify no; file "null.zone.file"; };
 zone "go.xsuad.com" { type master; notify no; file "null.zone.file"; };
@@ -325,9 +344,9 @@ zone "govhotel.us" { type master; notify no; file "null.zone.file"; };
 zone "grafchekloder.rebatesrule.net" { type master; notify no; file "null.zone.file"; };
 zone "granportale.com.br" { type master; notify no; file "null.zone.file"; };
 zone "green100.cn" { type master; notify no; file "null.zone.file"; };
-zone "greindustry.com" { type master; notify no; file "null.zone.file"; };
 zone "gssgroups.com" { type master; notify no; file "null.zone.file"; };
 zone "gx-10012947.file.myqcloud.com" { type master; notify no; file "null.zone.file"; };
+zone "h1.iwakalong.ru" { type master; notify no; file "null.zone.file"; };
 zone "habbotips.free.fr" { type master; notify no; file "null.zone.file"; };
 zone "hagebakken.no" { type master; notify no; file "null.zone.file"; };
 zone "halcat.com" { type master; notify no; file "null.zone.file"; };
@@ -335,6 +354,7 @@ zone "hanaphoto.co.kr" { type master; notify no; file "null.zone.file"; };
 zone "handrush.com" { type master; notify no; file "null.zone.file"; };
 zone "hanoihub.vn" { type master; notify no; file "null.zone.file"; };
 zone "hazel-azure.co.th" { type master; notify no; file "null.zone.file"; };
+zone "hdxa.net" { type master; notify no; file "null.zone.file"; };
 zone "healtina.com" { type master; notify no; file "null.zone.file"; };
 zone "heavenif.co.za" { type master; notify no; file "null.zone.file"; };
 zone "hediyegapsinternet.com" { type master; notify no; file "null.zone.file"; };
@@ -373,7 +393,6 @@ zone "ini.egkj.com" { type master; notify no; file "null.zone.file"; };
 zone "innovation4crisis.org" { type master; notify no; file "null.zone.file"; };
 zone "instanttechnology.com.au" { type master; notify no; file "null.zone.file"; };
 zone "intelicasa.ro" { type master; notify no; file "null.zone.file"; };
-zone "intertradeassociates.com.au" { type master; notify no; file "null.zone.file"; };
 zone "intoxicated-twilight.com" { type master; notify no; file "null.zone.file"; };
 zone "iran-gold.com" { type master; notify no; file "null.zone.file"; };
 zone "iremart.es" { type master; notify no; file "null.zone.file"; };
@@ -382,12 +401,13 @@ zone "itd.m.dodo52.com" { type master; notify no; file "null.zone.file"; };
 zone "itsnixielou.com" { type master; notify no; file "null.zone.file"; };
 zone "ixlonbcc.com" { type master; notify no; file "null.zone.file"; };
 zone "izu.co.jp" { type master; notify no; file "null.zone.file"; };
-zone "jaincakes.xyz" { type master; notify no; file "null.zone.file"; };
 zone "jamiekaylive.com" { type master; notify no; file "null.zone.file"; };
 zone "jansen-heesch.nl" { type master; notify no; file "null.zone.file"; };
 zone "janvierassocies.fr" { type master; notify no; file "null.zone.file"; };
+zone "jaservicioscontables.casteviajes.com" { type master; notify no; file "null.zone.file"; };
 zone "javatank.ru" { type master; notify no; file "null.zone.file"; };
 zone "jcedu.org" { type master; notify no; file "null.zone.file"; };
+zone "jessymart.flexyhub.com" { type master; notify no; file "null.zone.file"; };
 zone "jjjexx.329263.com" { type master; notify no; file "null.zone.file"; };
 zone "jmtc.91756.cn" { type master; notify no; file "null.zone.file"; };
 zone "jointings.org" { type master; notify no; file "null.zone.file"; };
@@ -404,6 +424,7 @@ zone "jvalert.com" { type master; notify no; file "null.zone.file"; };
 zone "jyv.fi" { type master; notify no; file "null.zone.file"; };
 zone "jzny.com.cn" { type master; notify no; file "null.zone.file"; };
 zone "k.ludong.tv" { type master; notify no; file "null.zone.file"; };
+zone "k3.etfiber.net" { type master; notify no; file "null.zone.file"; };
 zone "kabiru.ru" { type master; notify no; file "null.zone.file"; };
 zone "kachsurf.mylftv.com" { type master; notify no; file "null.zone.file"; };
 zone "kamasu11.cafe24.com" { type master; notify no; file "null.zone.file"; };
@@ -415,15 +436,15 @@ zone "kassohome.com.tr" { type master; notify no; file "null.zone.file"; };
 zone "kazanturkiye20gb.com" { type master; notify no; file "null.zone.file"; };
 zone "kbzsa.cn" { type master; notify no; file "null.zone.file"; };
 zone "kdsp.co.kr" { type master; notify no; file "null.zone.file"; };
-zone "keckarangdadap.pekalongankab.go.id" { type master; notify no; file "null.zone.file"; };
 zone "kejpa.com" { type master; notify no; file "null.zone.file"; };
-zone "kgfs3.329263.com" { type master; notify no; file "null.zone.file"; };
 zone "khan-associates.net" { type master; notify no; file "null.zone.file"; };
 zone "khunnapap.com" { type master; notify no; file "null.zone.file"; };
 zone "kiaowadubai.com" { type master; notify no; file "null.zone.file"; };
 zone "kiencuonghotel.vn" { type master; notify no; file "null.zone.file"; };
+zone "kingdomcarecan.com" { type master; notify no; file "null.zone.file"; };
 zone "kingsland.systemsolution.me" { type master; notify no; file "null.zone.file"; };
 zone "kjbm9.mof.gov.cn" { type master; notify no; file "null.zone.file"; };
+zone "kleinendeli.co.za" { type master; notify no; file "null.zone.file"; };
 zone "knightsbridgeenergy.com.ng" { type master; notify no; file "null.zone.file"; };
 zone "koppemotta.com.br" { type master; notify no; file "null.zone.file"; };
 zone "koralli.if.ua" { type master; notify no; file "null.zone.file"; };
@@ -440,7 +461,6 @@ zone "landmarktreks.com" { type master; notify no; file "null.zone.file"; };
 zone "langyabbs.05yun.cn" { type master; notify no; file "null.zone.file"; };
 zone "lcfurtado.com.br" { type master; notify no; file "null.zone.file"; };
 zone "ld.mediaget.com" { type master; notify no; file "null.zone.file"; };
-zone "leaksfly.com" { type master; notify no; file "null.zone.file"; };
 zone "learnbuddy.com" { type master; notify no; file "null.zone.file"; };
 zone "learningcomputing.org" { type master; notify no; file "null.zone.file"; };
 zone "lebedyn.info" { type master; notify no; file "null.zone.file"; };
@@ -451,8 +471,8 @@ zone "libya-info.com" { type master; notify no; file "null.zone.file"; };
 zone "lifeapt.biz" { type master; notify no; file "null.zone.file"; };
 zone "lists.ibiblio.org" { type master; notify no; file "null.zone.file"; };
 zone "lists.mplayerhq.hu" { type master; notify no; file "null.zone.file"; };
+zone "livetrack.in" { type master; notify no; file "null.zone.file"; };
 zone "livetvsports.ml" { type master; notify no; file "null.zone.file"; };
-zone "lodergord.com" { type master; notify no; file "null.zone.file"; };
 zone "log.yundabao.cn" { type master; notify no; file "null.zone.file"; };
 zone "lsyr.net" { type master; notify no; file "null.zone.file"; };
 zone "lt02.datacomspecialists.net" { type master; notify no; file "null.zone.file"; };
@@ -468,9 +488,7 @@ zone "makosoft.hu" { type master; notify no; file "null.zone.file"; };
 zone "malin-akerman.net" { type master; notify no; file "null.zone.file"; };
 zone "margopassadorestylist.com" { type master; notify no; file "null.zone.file"; };
 zone "marksidfgs.ug" { type master; notify no; file "null.zone.file"; };
-zone "marocaji.com" { type master; notify no; file "null.zone.file"; };
 zone "matt-e.it" { type master; notify no; file "null.zone.file"; };
-zone "mattayom31.go.th" { type master; notify no; file "null.zone.file"; };
 zone "mazury4x4.pl" { type master; notify no; file "null.zone.file"; };
 zone "mbgrm.com" { type master; notify no; file "null.zone.file"; };
 zone "mediamatkat.fi" { type master; notify no; file "null.zone.file"; };
@@ -497,12 +515,14 @@ zone "misterson.com" { type master; notify no; file "null.zone.file"; };
 zone "mistydeblasiophotography.com" { type master; notify no; file "null.zone.file"; };
 zone "mkk09.kr" { type master; notify no; file "null.zone.file"; };
 zone "mkontakt.az" { type master; notify no; file "null.zone.file"; };
-zone "mlbfreestream.gq" { type master; notify no; file "null.zone.file"; };
+zone "mlbfreestream.ml" { type master; notify no; file "null.zone.file"; };
 zone "mmc.ru.com" { type master; notify no; file "null.zone.file"; };
+zone "mobiadnews.com" { type master; notify no; file "null.zone.file"; };
 zone "mobilier-modern.ro" { type master; notify no; file "null.zone.file"; };
 zone "mochandmade.us" { type master; notify no; file "null.zone.file"; };
 zone "modcloudserver.eu" { type master; notify no; file "null.zone.file"; };
 zone "moha-group.com" { type master; notify no; file "null.zone.file"; };
+zone "mononet.lv" { type master; notify no; file "null.zone.file"; };
 zone "moscow11.at" { type master; notify no; file "null.zone.file"; };
 zone "mountveederwines.com" { type master; notify no; file "null.zone.file"; };
 zone "moyo.co.kr" { type master; notify no; file "null.zone.file"; };
@@ -512,7 +532,6 @@ zone "msecurity.ro" { type master; notify no; file "null.zone.file"; };
 zone "mteng.mmj7.com" { type master; notify no; file "null.zone.file"; };
 zone "mtfelektroteknik.com" { type master; notify no; file "null.zone.file"; };
 zone "mueblesjcp.cl" { type master; notify no; file "null.zone.file"; };
-zone "mutec.jp" { type master; notify no; file "null.zone.file"; };
 zone "mv360.net" { type master; notify no; file "null.zone.file"; };
 zone "mvb.kz" { type master; notify no; file "null.zone.file"; };
 zone "mxpiqw.am.files.1drv.com" { type master; notify no; file "null.zone.file"; };
@@ -539,7 +558,7 @@ zone "news.omumusic.net" { type master; notify no; file "null.zone.file"; };
 zone "newsun-shop.com" { type master; notify no; file "null.zone.file"; };
 zone "newxing.com" { type master; notify no; file "null.zone.file"; };
 zone "nfbio.com" { type master; notify no; file "null.zone.file"; };
-zone "nmal.info" { type master; notify no; file "null.zone.file"; };
+zone "nofound.000webhostapp.com" { type master; notify no; file "null.zone.file"; };
 zone "nprg.ru" { type master; notify no; file "null.zone.file"; };
 zone "nst-corporation.com" { type master; notify no; file "null.zone.file"; };
 zone "nwcsvcs.com" { type master; notify no; file "null.zone.file"; };
@@ -553,18 +572,17 @@ zone "omega.az" { type master; notify no; file "null.zone.file"; };
 zone "omsk-osma.ru" { type master; notify no; file "null.zone.file"; };
 zone "omuzgor.tj" { type master; notify no; file "null.zone.file"; };
 zone "onestin.ro" { type master; notify no; file "null.zone.file"; };
-zone "onlink-aoiuvr.com" { type master; notify no; file "null.zone.file"; };
-zone "onyourmarkmindsetgo.com" { type master; notify no; file "null.zone.file"; };
 zone "openclient.sroinfo.com" { type master; notify no; file "null.zone.file"; };
 zone "operasanpiox.bravepages.com" { type master; notify no; file "null.zone.file"; };
 zone "opolis.io" { type master; notify no; file "null.zone.file"; };
+zone "oralloy.com" { type master; notify no; file "null.zone.file"; };
 zone "osdsoft.com" { type master; notify no; file "null.zone.file"; };
 zone "osesama.jp" { type master; notify no; file "null.zone.file"; };
 zone "osheoufhusheoghuesd.ru" { type master; notify no; file "null.zone.file"; };
+zone "oskarnews.gazashare.com" { type master; notify no; file "null.zone.file"; };
 zone "otanityre.in" { type master; notify no; file "null.zone.file"; };
 zone "ouhfuosuoosrhfzr.su" { type master; notify no; file "null.zone.file"; };
 zone "ovelcom.com" { type master; notify no; file "null.zone.file"; };
-zone "ozemag.com" { type master; notify no; file "null.zone.file"; };
 zone "ozkayalar.com" { type master; notify no; file "null.zone.file"; };
 zone "p1.lingpao8.com" { type master; notify no; file "null.zone.file"; };
 zone "p2.lingpao8.com" { type master; notify no; file "null.zone.file"; };
@@ -582,6 +600,7 @@ zone "patch2.99ddd.com" { type master; notify no; file "null.zone.file"; };
 zone "patch3.99ddd.com" { type master; notify no; file "null.zone.file"; };
 zone "patrickchan-hk.net" { type master; notify no; file "null.zone.file"; };
 zone "pawel-sikora.pl" { type master; notify no; file "null.zone.file"; };
+zone "pcexperts.co.za" { type master; notify no; file "null.zone.file"; };
 zone "pcginsure.com" { type master; notify no; file "null.zone.file"; };
 zone "pcsoori.com" { type master; notify no; file "null.zone.file"; };
 zone "pedidoslalacteo.com.ar" { type master; notify no; file "null.zone.file"; };
@@ -590,7 +609,6 @@ zone "petromltd.com" { type master; notify no; file "null.zone.file"; };
 zone "ph4s.ru" { type master; notify no; file "null.zone.file"; };
 zone "phamchilong.com" { type master; notify no; file "null.zone.file"; };
 zone "phudieusongma.com" { type master; notify no; file "null.zone.file"; };
-zone "physiodelacomba.ch" { type master; notify no; file "null.zone.file"; };
 zone "piapendet.com" { type master; notify no; file "null.zone.file"; };
 zone "pink99.com" { type master; notify no; file "null.zone.file"; };
 zone "pmguide.net" { type master; notify no; file "null.zone.file"; };
@@ -599,6 +617,7 @@ zone "podrska.com.hr" { type master; notify no; file "null.zone.file"; };
 zone "ponto50.com.br" { type master; notify no; file "null.zone.file"; };
 zone "poolbook.ir" { type master; notify no; file "null.zone.file"; };
 zone "ppl.ac.id" { type master; notify no; file "null.zone.file"; };
+zone "privacytoolsstore.website" { type master; notify no; file "null.zone.file"; };
 zone "probost.cz" { type master; notify no; file "null.zone.file"; };
 zone "profitcoach.net" { type master; notify no; file "null.zone.file"; };
 zone "prosoc.nl" { type master; notify no; file "null.zone.file"; };
@@ -611,10 +630,12 @@ zone "qelie.com" { type master; notify no; file "null.zone.file"; };
 zone "qfjys.com.img.800cdn.com" { type master; notify no; file "null.zone.file"; };
 zone "qmsled.com" { type master; notify no; file "null.zone.file"; };
 zone "qppl.angiang.gov.vn" { type master; notify no; file "null.zone.file"; };
+zone "qualitygolfbags.com" { type master; notify no; file "null.zone.file"; };
 zone "quartier-midi.be" { type master; notify no; file "null.zone.file"; };
 zone "quehagoencartagena.com" { type master; notify no; file "null.zone.file"; };
 zone "raacts.in" { type master; notify no; file "null.zone.file"; };
 zone "raifix.com.br" { type master; notify no; file "null.zone.file"; };
+zone "rangebroadcasting.com" { type master; notify no; file "null.zone.file"; };
 zone "rapidex.co.rs" { type master; notify no; file "null.zone.file"; };
 zone "rc.ixiaoyang.cn" { type master; notify no; file "null.zone.file"; };
 zone "readytalk.github.io" { type master; notify no; file "null.zone.file"; };
@@ -630,24 +651,22 @@ zone "res.uf1.cn" { type master; notify no; file "null.zone.file"; };
 zone "ret.space" { type master; notify no; file "null.zone.file"; };
 zone "rezaazizi.ir" { type master; notify no; file "null.zone.file"; };
 zone "rinkaisystem-ht.com" { type master; notify no; file "null.zone.file"; };
-zone "riskxai.com" { type master; notify no; file "null.zone.file"; };
 zone "riyanenterprise.com" { type master; notify no; file "null.zone.file"; };
 zone "rkverify.securestudies.com" { type master; notify no; file "null.zone.file"; };
 zone "robertmcardle.com" { type master; notify no; file "null.zone.file"; };
 zone "robotrade.com.vn" { type master; notify no; file "null.zone.file"; };
 zone "rollingmill.in" { type master; notify no; file "null.zone.file"; };
 zone "rollscar.pk" { type master; notify no; file "null.zone.file"; };
-zone "ross-ocenka.ru" { type master; notify no; file "null.zone.file"; };
 zone "rossogato.com" { type master; notify no; file "null.zone.file"; };
 zone "ruisgood.ru" { type master; notify no; file "null.zone.file"; };
 zone "rusch.nu" { type master; notify no; file "null.zone.file"; };
 zone "s.51shijuan.com" { type master; notify no; file "null.zone.file"; };
 zone "s.kk30.com" { type master; notify no; file "null.zone.file"; };
+zone "s14b.91danji.com" { type master; notify no; file "null.zone.file"; };
+zone "s14b.groundyun.cn" { type master; notify no; file "null.zone.file"; };
 zone "sabiupd.compress.to" { type master; notify no; file "null.zone.file"; };
 zone "saboorjaam.ir" { type master; notify no; file "null.zone.file"; };
 zone "sabupda.vizvaz.com" { type master; notify no; file "null.zone.file"; };
-zone "saglikliapp.live" { type master; notify no; file "null.zone.file"; };
-zone "sahathaikasetpan.com" { type master; notify no; file "null.zone.file"; };
 zone "salvation24.com" { type master; notify no; file "null.zone.file"; };
 zone "salvationbd.com" { type master; notify no; file "null.zone.file"; };
 zone "sandovalgraphics.com" { type master; notify no; file "null.zone.file"; };
@@ -656,9 +675,9 @@ zone "saskklo.com" { type master; notify no; file "null.zone.file"; };
 zone "scglobal.co.th" { type master; notify no; file "null.zone.file"; };
 zone "schollaert.eu" { type master; notify no; file "null.zone.file"; };
 zone "schoongezicht.org" { type master; notify no; file "null.zone.file"; };
+zone "seeanu.ru" { type master; notify no; file "null.zone.file"; };
 zone "seenext.com.pk" { type master; notify no; file "null.zone.file"; };
 zone "sefp-boispro.fr" { type master; notify no; file "null.zone.file"; };
-zone "seibee.biz" { type master; notify no; file "null.zone.file"; };
 zone "selekture.com" { type master; notify no; file "null.zone.file"; };
 zone "selfuseproperty.com" { type master; notify no; file "null.zone.file"; };
 zone "selvikoyunciftligi.com" { type master; notify no; file "null.zone.file"; };
@@ -668,6 +687,7 @@ zone "servicemhkd80.myvnc.com" { type master; notify no; file "null.zone.file";
 zone "serviciosinfoware.cl" { type master; notify no; file "null.zone.file"; };
 zone "sexybaccarat.329263.com" { type master; notify no; file "null.zone.file"; };
 zone "sfoodfeedf.org" { type master; notify no; file "null.zone.file"; };
+zone "sgm.pc6.com" { type master; notify no; file "null.zone.file"; };
 zone "shacked.webdepot.co.il" { type master; notify no; file "null.zone.file"; };
 zone "shahtoba.faqserv.com" { type master; notify no; file "null.zone.file"; };
 zone "shaoxiaofei.cn" { type master; notify no; file "null.zone.file"; };
@@ -705,35 +725,33 @@ zone "sriglobalit.com" { type master; notify no; file "null.zone.file"; };
 zone "srvmanos.no-ip.info" { type master; notify no; file "null.zone.file"; };
 zone "ss.cybersoft-vn.com" { type master; notify no; file "null.zone.file"; };
 zone "sslv3.at" { type master; notify no; file "null.zone.file"; };
+zone "staging.popclusive.asia" { type master; notify no; file "null.zone.file"; };
 zone "starcountry.net" { type master; notify no; file "null.zone.file"; };
 zone "static.ilclock.com" { type master; notify no; file "null.zone.file"; };
 zone "static.topxgun.com" { type master; notify no; file "null.zone.file"; };
 zone "stationaryhome.com" { type master; notify no; file "null.zone.file"; };
-zone "stdykungeduationaldeveloper15investmenqg.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "stecit.nl" { type master; notify no; file "null.zone.file"; };
 zone "steelbuildings.com" { type master; notify no; file "null.zone.file"; };
-zone "stevewalker.com.au" { type master; notify no; file "null.zone.file"; };
 zone "story-maker.jp" { type master; notify no; file "null.zone.file"; };
 zone "stubbackup.ru" { type master; notify no; file "null.zone.file"; };
 zone "suc9898.com" { type master; notify no; file "null.zone.file"; };
 zone "suncity116.com" { type master; notify no; file "null.zone.file"; };
 zone "support.clz.kr" { type master; notify no; file "null.zone.file"; };
-zone "surecake.com" { type master; notify no; file "null.zone.file"; };
 zone "sv.pvroe.com" { type master; notify no; file "null.zone.file"; };
 zone "svkacademy.com" { type master; notify no; file "null.zone.file"; };
 zone "svn.cc.jyu.fi" { type master; notify no; file "null.zone.file"; };
 zone "sweaty.dk" { type master; notify no; file "null.zone.file"; };
 zone "swwbia.com" { type master; notify no; file "null.zone.file"; };
-zone "sylvaclouds.eu" { type master; notify no; file "null.zone.file"; };
 zone "symanreni.mysecondarydns.com" { type master; notify no; file "null.zone.file"; };
 zone "szxypt.com" { type master; notify no; file "null.zone.file"; };
 zone "t.honker.info" { type master; notify no; file "null.zone.file"; };
+zone "tandenblekenhoofddorp.nl" { type master; notify no; file "null.zone.file"; };
 zone "taraward.com" { type master; notify no; file "null.zone.file"; };
 zone "taxpos.com" { type master; notify no; file "null.zone.file"; };
 zone "tcy.198424.com" { type master; notify no; file "null.zone.file"; };
-zone "teacherlinx.com" { type master; notify no; file "null.zone.file"; };
 zone "teardrop-productions.ro" { type master; notify no; file "null.zone.file"; };
 zone "technoites.com" { type master; notify no; file "null.zone.file"; };
+zone "tecnobella.cl" { type master; notify no; file "null.zone.file"; };
 zone "tehrenberg.com" { type master; notify no; file "null.zone.file"; };
 zone "telescopelms.com" { type master; notify no; file "null.zone.file"; };
 zone "telsiai.info" { type master; notify no; file "null.zone.file"; };
@@ -752,19 +770,21 @@ zone "theprestige.ro" { type master; notify no; file "null.zone.file"; };
 zone "theptiendat.com" { type master; notify no; file "null.zone.file"; };
 zone "therecruiter.io" { type master; notify no; file "null.zone.file"; };
 zone "thesecuritysoftwarescannerindustrgreat.duckdns.org" { type master; notify no; file "null.zone.file"; };
+zone "thevision.ro" { type master; notify no; file "null.zone.file"; };
 zone "thornadops.com" { type master; notify no; file "null.zone.file"; };
 zone "thosewebbs.com" { type master; notify no; file "null.zone.file"; };
 zone "tianangdep.com" { type master; notify no; file "null.zone.file"; };
+zone "tianmaouae.com" { type master; notify no; file "null.zone.file"; };
 zone "tianzi8.cn" { type master; notify no; file "null.zone.file"; };
 zone "tibinst.mefound.com" { type master; notify no; file "null.zone.file"; };
 zone "tibok.lflink.com" { type master; notify no; file "null.zone.file"; };
 zone "ticte.in" { type master; notify no; file "null.zone.file"; };
 zone "timlinger.com" { type master; notify no; file "null.zone.file"; };
 zone "tmhfashionhouse.co.za" { type master; notify no; file "null.zone.file"; };
+zone "toe.polinema.ac.id" { type master; notify no; file "null.zone.file"; };
 zone "tonghopgia.net" { type master; notify no; file "null.zone.file"; };
 zone "tonydong.com" { type master; notify no; file "null.zone.file"; };
 zone "tonyzone.com" { type master; notify no; file "null.zone.file"; };
-zone "tovarentertainment.in" { type master; notify no; file "null.zone.file"; };
 zone "tsd.jxwan.com" { type master; notify no; file "null.zone.file"; };
 zone "tsredco.telangana.gov.in" { type master; notify no; file "null.zone.file"; };
 zone "tulli.info" { type master; notify no; file "null.zone.file"; };
@@ -773,6 +793,7 @@ zone "tuneup.ibk.me" { type master; notify no; file "null.zone.file"; };
 zone "tup.com.cn" { type master; notify no; file "null.zone.file"; };
 zone "tutuler.com" { type master; notify no; file "null.zone.file"; };
 zone "uc-56.ru" { type master; notify no; file "null.zone.file"; };
+zone "ufabet168168.329263.com" { type master; notify no; file "null.zone.file"; };
 zone "ugc.wegame.com.cn" { type master; notify no; file "null.zone.file"; };
 zone "ultimatelamborghiniexperience.com" { type master; notify no; file "null.zone.file"; };
 zone "ultimatepointsstore.com" { type master; notify no; file "null.zone.file"; };
@@ -781,7 +802,6 @@ zone "undantagforlag.se" { type master; notify no; file "null.zone.file"; };
 zone "unicorpbrunei.com" { type master; notify no; file "null.zone.file"; };
 zone "unilevercopabr.mbiz20.net" { type master; notify no; file "null.zone.file"; };
 zone "uniquehall.net" { type master; notify no; file "null.zone.file"; };
-zone "uniteddefence8forstdygorvermentsocialeyx.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "unokaoeojoejfghr.ru" { type master; notify no; file "null.zone.file"; };
 zone "upd.m.dodo52.com" { type master; notify no; file "null.zone.file"; };
 zone "update.iwang8.com" { type master; notify no; file "null.zone.file"; };
@@ -802,7 +822,8 @@ zone "vfocus.net" { type master; notify no; file "null.zone.file"; };
 zone "videoswebcammsn.free.fr" { type master; notify no; file "null.zone.file"; };
 zone "vietducbio.com" { type master; notify no; file "null.zone.file"; };
 zone "vigilar.com.br" { type master; notify no; file "null.zone.file"; };
-zone "visagepk.com" { type master; notify no; file "null.zone.file"; };
+zone "vip.recommendedtoyoo.com" { type master; notify no; file "null.zone.file"; };
+zone "virustreatments.empeeevents.com" { type master; notify no; file "null.zone.file"; };
 zone "visualdata.ru" { type master; notify no; file "null.zone.file"; };
 zone "vitinhvnt.com" { type master; notify no; file "null.zone.file"; };
 zone "vitromed.ro" { type master; notify no; file "null.zone.file"; };
@@ -822,7 +843,6 @@ zone "webarte.com.br" { type master; notify no; file "null.zone.file"; };
 zone "webq.wikaba.com" { type master; notify no; file "null.zone.file"; };
 zone "webserverthai.com" { type master; notify no; file "null.zone.file"; };
 zone "websound.ru" { type master; notify no; file "null.zone.file"; };
-zone "webxposndytechnologyhardsoftware6buyers.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "welcometothefuture.com" { type master; notify no; file "null.zone.file"; };
 zone "whgaty.com" { type master; notify no; file "null.zone.file"; };
 zone "wiebe-sanitaer.de" { type master; notify no; file "null.zone.file"; };
@@ -837,14 +857,13 @@ zone "writesofpassage.co.za" { type master; notify no; file "null.zone.file"; };
 zone "wsg.com.sg" { type master; notify no; file "null.zone.file"; };
 zone "wt8.siweidaoxiang.com" { type master; notify no; file "null.zone.file"; };
 zone "wt9.siweidaoxiang.com" { type master; notify no; file "null.zone.file"; };
+zone "wwealthllc.com" { type master; notify no; file "null.zone.file"; };
 zone "www2.recepty5.com" { type master; notify no; file "null.zone.file"; };
 zone "x2vn.com" { type master; notify no; file "null.zone.file"; };
 zone "xia.vzboot.com" { type master; notify no; file "null.zone.file"; };
 zone "xiaidown.com" { type master; notify no; file "null.zone.file"; };
-zone "xiaoma-10021647.file.myqcloud.com" { type master; notify no; file "null.zone.file"; };
 zone "xiegushi.cn" { type master; notify no; file "null.zone.file"; };
 zone "xirfad.com" { type master; notify no; file "null.zone.file"; };
-zone "xn--transfgran-mgbbb600b.ro" { type master; notify no; file "null.zone.file"; };
 zone "xsdtx.xyz" { type master; notify no; file "null.zone.file"; };
 zone "xsryx.xyz" { type master; notify no; file "null.zone.file"; };
 zone "xtremeforumz.com" { type master; notify no; file "null.zone.file"; };
@@ -852,6 +871,8 @@ zone "xuhss.com" { type master; notify no; file "null.zone.file"; };
 zone "xxbdr.xyz" { type master; notify no; file "null.zone.file"; };
 zone "xxwl.kuaiyunds.com" { type master; notify no; file "null.zone.file"; };
 zone "xxxze.co.nu" { type master; notify no; file "null.zone.file"; };
+zone "y-sani.com" { type master; notify no; file "null.zone.file"; };
+zone "yc5.timeisletitgo.ru" { type master; notify no; file "null.zone.file"; };
 zone "yeez.net" { type master; notify no; file "null.zone.file"; };
 zone "yesky.51down.org.cn" { type master; notify no; file "null.zone.file"; };
 zone "yesky.xzstatic.com" { type master; notify no; file "null.zone.file"; };
@@ -867,7 +888,6 @@ zone "zd4b.lonlyfafner.ru" { type master; notify no; file "null.zone.file"; };
 zone "zdy.17110.com" { type master; notify no; file "null.zone.file"; };
 zone "zenkashow.com" { type master; notify no; file "null.zone.file"; };
 zone "zentealounge.com.au" { type master; notify no; file "null.zone.file"; };
-zone "zethla.com" { type master; notify no; file "null.zone.file"; };
 zone "zeytinyagisabun.com" { type master; notify no; file "null.zone.file"; };
 zone "zhetysu360.kz" { type master; notify no; file "null.zone.file"; };
 zone "zhzy999.net" { type master; notify no; file "null.zone.file"; };
@@ -876,6 +896,8 @@ zone "zmmore.com" { type master; notify no; file "null.zone.file"; };
 zone "zoetermeerov.nl" { type master; notify no; file "null.zone.file"; };
 zone "zoeydeutchweb.com" { type master; notify no; file "null.zone.file"; };
 zone "zonefound.com.cn" { type master; notify no; file "null.zone.file"; };
+zone "zskyjov.cz" { type master; notify no; file "null.zone.file"; };
 zone "ztqsc.com.cn" { type master; notify no; file "null.zone.file"; };
 zone "zumodelima.com" { type master; notify no; file "null.zone.file"; };
 zone "zxcet.xyz" { type master; notify no; file "null.zone.file"; };
+zone "zzv.seeanu.ru" { type master; notify no; file "null.zone.file"; };
diff --git a/urlhaus-filter-bind.conf b/urlhaus-filter-bind.conf
index 29b389ca..0a6e7e53 100644
--- a/urlhaus-filter-bind.conf
+++ b/urlhaus-filter-bind.conf
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains BIND Blocklist
-# Updated: Wed, 29 Apr 2020 12:09:39 UTC
+# Updated: Thu, 30 Apr 2020 00:09:24 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -97,6 +97,7 @@ zone "1000lostchildren.com" { type master; notify no; file "null.zone.file"; };
 zone "1001-territoires.fr" { type master; notify no; file "null.zone.file"; };
 zone "1001newsng.com" { type master; notify no; file "null.zone.file"; };
 zone "1001tur-tver.ru" { type master; notify no; file "null.zone.file"; };
+zone "10022020newfolder1002002231-service1002.space" { type master; notify no; file "null.zone.file"; };
 zone "100alternance.fr" { type master; notify no; file "null.zone.file"; };
 zone "100kala.ir" { type master; notify no; file "null.zone.file"; };
 zone "100percentforkids.org" { type master; notify no; file "null.zone.file"; };
@@ -300,6 +301,7 @@ zone "1in10jamaica.com" { type master; notify no; file "null.zone.file"; };
 zone "1jpg1host.net16.net" { type master; notify no; file "null.zone.file"; };
 zone "1jxmt.com" { type master; notify no; file "null.zone.file"; };
 zone "1kvk.com" { type master; notify no; file "null.zone.file"; };
+zone "1l04.timeisletitgo.ru" { type master; notify no; file "null.zone.file"; };
 zone "1liveradar.de" { type master; notify no; file "null.zone.file"; };
 zone "1lo.lukow.pl" { type master; notify no; file "null.zone.file"; };
 zone "1localexpert.com" { type master; notify no; file "null.zone.file"; };
@@ -620,6 +622,7 @@ zone "2vidyo.xyz" { type master; notify no; file "null.zone.file"; };
 zone "2wheelrider.com" { type master; notify no; file "null.zone.file"; };
 zone "2winresidency.com" { type master; notify no; file "null.zone.file"; };
 zone "2x2print.com" { type master; notify no; file "null.zone.file"; };
+zone "2xmy.timeisletitgo.ru" { type master; notify no; file "null.zone.file"; };
 zone "2yb5.andichust.ru" { type master; notify no; file "null.zone.file"; };
 zone "2yf32q.ch.files.1drv.com" { type master; notify no; file "null.zone.file"; };
 zone "2yourwealth.com.au" { type master; notify no; file "null.zone.file"; };
@@ -778,6 +781,7 @@ zone "3pabook.com" { type master; notify no; file "null.zone.file"; };
 zone "3ppuubb.com" { type master; notify no; file "null.zone.file"; };
 zone "3prokladkaeu.com" { type master; notify no; file "null.zone.file"; };
 zone "3pubeu.com" { type master; notify no; file "null.zone.file"; };
+zone "3q9h.timeisletitgo.ru" { type master; notify no; file "null.zone.file"; };
 zone "3rdperson.ml" { type master; notify no; file "null.zone.file"; };
 zone "3rdsectorsupportafrica.org" { type master; notify no; file "null.zone.file"; };
 zone "3rytghjhkss.cf" { type master; notify no; file "null.zone.file"; };
@@ -800,6 +804,7 @@ zone "3uqp.com" { type master; notify no; file "null.zone.file"; };
 zone "3uso2927wiwofeppwi29.com" { type master; notify no; file "null.zone.file"; };
 zone "3v5.net" { type master; notify no; file "null.zone.file"; };
 zone "3v6bz7g2bncvrinwmaawz2t4.file.truckbennels.com" { type master; notify no; file "null.zone.file"; };
+zone "3vc6.seeanu.ru" { type master; notify no; file "null.zone.file"; };
 zone "3vdataguard.com" { type master; notify no; file "null.zone.file"; };
 zone "3vventures.com" { type master; notify no; file "null.zone.file"; };
 zone "3wereareyou.icu" { type master; notify no; file "null.zone.file"; };
@@ -1356,6 +1361,8 @@ zone "FlorissantFire.com" { type master; notify no; file "null.zone.file"; };
 zone "ForRealTraffic.com" { type master; notify no; file "null.zone.file"; };
 zone "Heavensconcept.ng" { type master; notify no; file "null.zone.file"; };
 zone "Mozilla.theworkpc.com" { type master; notify no; file "null.zone.file"; };
+zone "Muanha.xyz" { type master; notify no; file "null.zone.file"; };
+zone "NCERTSOLUTIONACADEMY.COM" { type master; notify no; file "null.zone.file"; };
 zone "NeedCareers.com" { type master; notify no; file "null.zone.file"; };
 zone "OpalAlert.com" { type master; notify no; file "null.zone.file"; };
 zone "RENTITOUT.CO" { type master; notify no; file "null.zone.file"; };
@@ -1406,6 +1413,7 @@ zone "a.pomf.su" { type master; notify no; file "null.zone.file"; };
 zone "a.pomfe.co" { type master; notify no; file "null.zone.file"; };
 zone "a.rokket.space" { type master; notify no; file "null.zone.file"; };
 zone "a.safe.moe" { type master; notify no; file "null.zone.file"; };
+zone "a.seeanu.ru" { type master; notify no; file "null.zone.file"; };
 zone "a.teamworx.ph" { type master; notify no; file "null.zone.file"; };
 zone "a.turnuvam.org" { type master; notify no; file "null.zone.file"; };
 zone "a.uchi.moe" { type master; notify no; file "null.zone.file"; };
@@ -2227,6 +2235,7 @@ zone "addpics.site" { type master; notify no; file "null.zone.file"; };
 zone "addtomap.ru" { type master; notify no; file "null.zone.file"; };
 zone "adducity.ga" { type master; notify no; file "null.zone.file"; };
 zone "addvitashop.com" { type master; notify no; file "null.zone.file"; };
+zone "ade.topepics.com" { type master; notify no; file "null.zone.file"; };
 zone "adebeo.co.in" { type master; notify no; file "null.zone.file"; };
 zone "adecityevents.com" { type master; notify no; file "null.zone.file"; };
 zone "aded.co.in" { type master; notify no; file "null.zone.file"; };
@@ -2514,6 +2523,7 @@ zone "aeletselschade.nl" { type master; notify no; file "null.zone.file"; };
 zone "aelinks.com" { type master; notify no; file "null.zone.file"; };
 zone "aellly.000webhostapp.com" { type master; notify no; file "null.zone.file"; };
 zone "aelmas.5gbfree.com" { type master; notify no; file "null.zone.file"; };
+zone "aelogica.com" { type master; notify no; file "null.zone.file"; };
 zone "aemgrup.com.tr" { type master; notify no; file "null.zone.file"; };
 zone "aemo-mecanique-usinage.fr" { type master; notify no; file "null.zone.file"; };
 zone "aengineeringltd.com" { type master; notify no; file "null.zone.file"; };
@@ -3550,6 +3560,7 @@ zone "alexandre-muhl.fr" { type master; notify no; file "null.zone.file"; };
 zone "alexandrearchitecte.fr" { type master; notify no; file "null.zone.file"; };
 zone "alexandrearealty.com" { type master; notify no; file "null.zone.file"; };
 zone "alexandrecabello.com.br" { type master; notify no; file "null.zone.file"; };
+zone "alexandredekerchove.com" { type master; notify no; file "null.zone.file"; };
 zone "alexandrepaiva.com" { type master; notify no; file "null.zone.file"; };
 zone "alexandrerivelli.com" { type master; notify no; file "null.zone.file"; };
 zone "alexandria.run" { type master; notify no; file "null.zone.file"; };
@@ -5748,6 +5759,7 @@ zone "ariacommunications.in" { type master; notify no; file "null.zone.file"; };
 zone "ariadna.org.ua" { type master; notify no; file "null.zone.file"; };
 zone "ariafm.gr" { type master; notify no; file "null.zone.file"; };
 zone "arianasdelinewdorpplaza.com" { type master; notify no; file "null.zone.file"; };
+zone "arianegerkens.com" { type master; notify no; file "null.zone.file"; };
 zone "arianrayaneh.com" { type master; notify no; file "null.zone.file"; };
 zone "arianshopping.com" { type master; notify no; file "null.zone.file"; };
 zone "ariasms.ir" { type master; notify no; file "null.zone.file"; };
@@ -8216,6 +8228,7 @@ zone "batch-photo-editor.com" { type master; notify no; file "null.zone.file"; }
 zone "batchenangmuasieuben.com" { type master; notify no; file "null.zone.file"; };
 zone "batdongsan3b.com" { type master; notify no; file "null.zone.file"; };
 zone "batdongsanbamien24h.com" { type master; notify no; file "null.zone.file"; };
+zone "batdongsanbentre.com.vn" { type master; notify no; file "null.zone.file"; };
 zone "batdongsanhadong.info" { type master; notify no; file "null.zone.file"; };
 zone "batdongsanhathanh.net" { type master; notify no; file "null.zone.file"; };
 zone "batdongsanhuyphat68.com" { type master; notify no; file "null.zone.file"; };
@@ -9126,6 +9139,7 @@ zone "betokont.com.tr" { type master; notify no; file "null.zone.file"; };
 zone "beton-dubna.com" { type master; notify no; file "null.zone.file"; };
 zone "betonbrother.com" { type master; notify no; file "null.zone.file"; };
 zone "betonkeritesgyar.hu" { type master; notify no; file "null.zone.file"; };
+zone "betopceo.com" { type master; notify no; file "null.zone.file"; };
 zone "betprediksi.com" { type master; notify no; file "null.zone.file"; };
 zone "betrachtungssicht.de" { type master; notify no; file "null.zone.file"; };
 zone "betrogroup.com" { type master; notify no; file "null.zone.file"; };
@@ -10419,6 +10433,7 @@ zone "blueboxsourcing.com" { type master; notify no; file "null.zone.file"; };
 zone "blueboxxinterior.com" { type master; notify no; file "null.zone.file"; };
 zone "bluebunni.com" { type master; notify no; file "null.zone.file"; };
 zone "blueclutch.com" { type master; notify no; file "null.zone.file"; };
+zone "bluecollarfinancial.net" { type master; notify no; file "null.zone.file"; };
 zone "bluecrayonconsulting.com" { type master; notify no; file "null.zone.file"; };
 zone "bluecrestpress.com" { type master; notify no; file "null.zone.file"; };
 zone "bluecrystalband.com" { type master; notify no; file "null.zone.file"; };
@@ -10659,6 +10674,7 @@ zone "boldog.hu" { type master; notify no; file "null.zone.file"; };
 zone "boldreflectionsmn.com" { type master; notify no; file "null.zone.file"; };
 zone "bolegreenhotel.com" { type master; notify no; file "null.zone.file"; };
 zone "bolehprediksi.com" { type master; notify no; file "null.zone.file"; };
+zone "bolescy.com" { type master; notify no; file "null.zone.file"; };
 zone "bolesni.net" { type master; notify no; file "null.zone.file"; };
 zone "bolhomes.stringbind.info" { type master; notify no; file "null.zone.file"; };
 zone "bolidar.dnset.com" { type master; notify no; file "null.zone.file"; };
@@ -11277,6 +11293,7 @@ zone "bristter.com" { type master; notify no; file "null.zone.file"; };
 zone "britan.mx" { type master; notify no; file "null.zone.file"; };
 zone "britanniasuperior.uk" { type master; notify no; file "null.zone.file"; };
 zone "briteindonesia.com" { type master; notify no; file "null.zone.file"; };
+zone "britica.vn" { type master; notify no; file "null.zone.file"; };
 zone "british-rainbow.com" { type master; notify no; file "null.zone.file"; };
 zone "britishvoices.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "brittanishantel.com" { type master; notify no; file "null.zone.file"; };
@@ -12379,6 +12396,7 @@ zone "capacitacioncomercial.cl" { type master; notify no; file "null.zone.file";
 zone "capamh.org" { type master; notify no; file "null.zone.file"; };
 zone "capanoandassociates.com" { type master; notify no; file "null.zone.file"; };
 zone "capasso.de" { type master; notify no; file "null.zone.file"; };
+zone "capath.vn" { type master; notify no; file "null.zone.file"; };
 zone "capaxinfiniti.ml" { type master; notify no; file "null.zone.file"; };
 zone "capbangkok.com" { type master; notify no; file "null.zone.file"; };
 zone "capebethel.org" { type master; notify no; file "null.zone.file"; };
@@ -13331,11 +13349,13 @@ zone "ceramicasaosebastiao.com.br" { type master; notify no; file "null.zone.fil
 zone "cercolorlaghi.com" { type master; notify no; file "null.zone.file"; };
 zone "cerebro-coaching.fr" { type master; notify no; file "null.zone.file"; };
 zone "cerenkent.com" { type master; notify no; file "null.zone.file"; };
+zone "cerisiers.be" { type master; notify no; file "null.zone.file"; };
 zone "ceritaislami.000webhostapp.com" { type master; notify no; file "null.zone.file"; };
 zone "cermiamakmur.com" { type master; notify no; file "null.zone.file"; };
 zone "ceronamtinclube.icu" { type master; notify no; file "null.zone.file"; };
 zone "cerotex.webprojemiz.com" { type master; notify no; file "null.zone.file"; };
 zone "cerovica.com" { type master; notify no; file "null.zone.file"; };
+zone "cerradocredito.com.br" { type master; notify no; file "null.zone.file"; };
 zone "cerrahibeyinpedi.com" { type master; notify no; file "null.zone.file"; };
 zone "cerrajeria-sabbath.holy-animero.com" { type master; notify no; file "null.zone.file"; };
 zone "cerrajeriajimenez.cl" { type master; notify no; file "null.zone.file"; };
@@ -13670,6 +13690,7 @@ zone "cheappigeontraps.com" { type master; notify no; file "null.zone.file"; };
 zone "cheapraccoontraps.com" { type master; notify no; file "null.zone.file"; };
 zone "cheapseoprovider.com" { type master; notify no; file "null.zone.file"; };
 zone "cheapsilkscreenprinting.com" { type master; notify no; file "null.zone.file"; };
+zone "cheaptours.in.ua" { type master; notify no; file "null.zone.file"; };
 zone "cheaptrainticket.cogbiz-infotech.com" { type master; notify no; file "null.zone.file"; };
 zone "cheaptravel-spb.ru" { type master; notify no; file "null.zone.file"; };
 zone "cheapwebvn.net" { type master; notify no; file "null.zone.file"; };
@@ -13746,6 +13767,7 @@ zone "chepi.net" { type master; notify no; file "null.zone.file"; };
 zone "cherdavis.com" { type master; notify no; file "null.zone.file"; };
 zone "chergo.es" { type master; notify no; file "null.zone.file"; };
 zone "cherinetiles.com" { type master; notify no; file "null.zone.file"; };
+zone "cheriyilbuilders.com" { type master; notify no; file "null.zone.file"; };
 zone "cherkassy.info" { type master; notify no; file "null.zone.file"; };
 zone "cheron.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "cherrett.net" { type master; notify no; file "null.zone.file"; };
@@ -16392,6 +16414,7 @@ zone "cryptomega.ga" { type master; notify no; file "null.zone.file"; };
 zone "cryptomub.com" { type master; notify no; file "null.zone.file"; };
 zone "cryptonias.top" { type master; notify no; file "null.zone.file"; };
 zone "cryptoniaz.top" { type master; notify no; file "null.zone.file"; };
+zone "cryptoomarket.com" { type master; notify no; file "null.zone.file"; };
 zone "cryptorgasms.com" { type master; notify no; file "null.zone.file"; };
 zone "cryptoseed.co.za" { type master; notify no; file "null.zone.file"; };
 zone "cryptostruct.bunker.zone" { type master; notify no; file "null.zone.file"; };
@@ -17236,6 +17259,7 @@ zone "dardash.info" { type master; notify no; file "null.zone.file"; };
 zone "dareldjazair.com" { type master; notify no; file "null.zone.file"; };
 zone "darelyateem.org" { type master; notify no; file "null.zone.file"; };
 zone "darianinc.com" { type master; notify no; file "null.zone.file"; };
+zone "daricci.de" { type master; notify no; file "null.zone.file"; };
 zone "darice.in" { type master; notify no; file "null.zone.file"; };
 zone "dario-mraz.from.hr" { type master; notify no; file "null.zone.file"; };
 zone "dariojucker.edelegation.com" { type master; notify no; file "null.zone.file"; };
@@ -18130,6 +18154,7 @@ zone "demo1.parsnet.space" { type master; notify no; file "null.zone.file"; };
 zone "demo10.onbm.ir" { type master; notify no; file "null.zone.file"; };
 zone "demo12.maybay.net" { type master; notify no; file "null.zone.file"; };
 zone "demo13.abc-it.net.au" { type master; notify no; file "null.zone.file"; };
+zone "demo13.dsdemosite.com" { type master; notify no; file "null.zone.file"; };
 zone "demo15.versamall.com" { type master; notify no; file "null.zone.file"; };
 zone "demo15.webindia.com" { type master; notify no; file "null.zone.file"; };
 zone "demo19.keltron.org" { type master; notify no; file "null.zone.file"; };
@@ -18256,6 +18281,7 @@ zone "dentsheaven.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "dentsov.ru" { type master; notify no; file "null.zone.file"; };
 zone "denttrade.com.kg" { type master; notify no; file "null.zone.file"; };
 zone "denuchoco.com" { type master; notify no; file "null.zone.file"; };
+zone "denunciesoftwareilegal.org.br" { type master; notify no; file "null.zone.file"; };
 zone "denverfs.org" { type master; notify no; file "null.zone.file"; };
 zone "denverktrade.xyz" { type master; notify no; file "null.zone.file"; };
 zone "deny.radio-denisa.com" { type master; notify no; file "null.zone.file"; };
@@ -18525,6 +18551,7 @@ zone "dev.454mediahouse.com" { type master; notify no; file "null.zone.file"; };
 zone "dev.abitotv.it" { type master; notify no; file "null.zone.file"; };
 zone "dev.adrianapatsalou.com" { type master; notify no; file "null.zone.file"; };
 zone "dev.ameekids.com" { type master; notify no; file "null.zone.file"; };
+zone "dev.apshaps.se" { type master; notify no; file "null.zone.file"; };
 zone "dev.artoonsolutions.com" { type master; notify no; file "null.zone.file"; };
 zone "dev.ateamymm.ca" { type master; notify no; file "null.zone.file"; };
 zone "dev.bassetlawscouts.org.uk" { type master; notify no; file "null.zone.file"; };
@@ -19106,6 +19133,7 @@ zone "digistudy.vn" { type master; notify no; file "null.zone.file"; };
 zone "digital-cloud.healthycheapfast.com" { type master; notify no; file "null.zone.file"; };
 zone "digital-design.com.cn" { type master; notify no; file "null.zone.file"; };
 zone "digital-life.pro" { type master; notify no; file "null.zone.file"; };
+zone "digital-marketing-institute-delhi.empeeevents.com" { type master; notify no; file "null.zone.file"; };
 zone "digital-vision.nl" { type master; notify no; file "null.zone.file"; };
 zone "digital.audiobookjunkie.com" { type master; notify no; file "null.zone.file"; };
 zone "digital.etnasoft.eu" { type master; notify no; file "null.zone.file"; };
@@ -20561,6 +20589,7 @@ zone "drinkdirect.co.uk" { type master; notify no; file "null.zone.file"; };
 zone "drinkfoodapp.com" { type master; notify no; file "null.zone.file"; };
 zone "drinkgusto.sg" { type master; notify no; file "null.zone.file"; };
 zone "drinklass.com.br" { type master; notify no; file "null.zone.file"; };
+zone "drinkopolykopen.nl" { type master; notify no; file "null.zone.file"; };
 zone "drischler.de" { type master; notify no; file "null.zone.file"; };
 zone "drive.carlsongracieanaheim.com" { type master; notify no; file "null.zone.file"; };
 zone "drive.deescreationstore.com" { type master; notify no; file "null.zone.file"; };
@@ -20932,6 +20961,7 @@ zone "dunysaki.ru" { type master; notify no; file "null.zone.file"; };
 zone "duoliprudential.com.watchdogdns.duckdns.org" { type master; notify no; file "null.zone.file"; };
 zone "duomasters.com" { type master; notify no; file "null.zone.file"; };
 zone "duongcaoky.com" { type master; notify no; file "null.zone.file"; };
+zone "duongfpt.ga" { type master; notify no; file "null.zone.file"; };
 zone "duongmanhtuan.com" { type master; notify no; file "null.zone.file"; };
 zone "duoscript.com" { type master; notify no; file "null.zone.file"; };
 zone "duotechgroup.com" { type master; notify no; file "null.zone.file"; };
@@ -21112,6 +21142,7 @@ zone "dyvrullters.in" { type master; notify no; file "null.zone.file"; };
 zone "dywanypers.pl" { type master; notify no; file "null.zone.file"; };
 zone "dyyhfk120.com" { type master; notify no; file "null.zone.file"; };
 zone "dzain.com.br" { type master; notify no; file "null.zone.file"; };
+zone "dzapasigroup.usapglobal.org" { type master; notify no; file "null.zone.file"; };
 zone "dzbo.dp.ua" { type master; notify no; file "null.zone.file"; };
 zone "dzbooster.com" { type master; notify no; file "null.zone.file"; };
 zone "dzcorlandyu.band" { type master; notify no; file "null.zone.file"; };
@@ -26069,6 +26100,7 @@ zone "franchisorsuccess.com.au" { type master; notify no; file "null.zone.file";
 zone "francini.dk" { type master; notify no; file "null.zone.file"; };
 zone "francis-china.com" { type master; notify no; file "null.zone.file"; };
 zone "franciscossc.pbworks.com" { type master; notify no; file "null.zone.file"; };
+zone "francois-champion.com" { type master; notify no; file "null.zone.file"; };
 zone "francois-rommens.fr" { type master; notify no; file "null.zone.file"; };
 zone "francoise-vauzeilles.com" { type master; notify no; file "null.zone.file"; };
 zone "francoisebon.fr" { type master; notify no; file "null.zone.file"; };
@@ -29458,6 +29490,7 @@ zone "h.eurotrading.com.pl" { type master; notify no; file "null.zone.file"; };
 zone "h.j990981.ru" { type master; notify no; file "null.zone.file"; };
 zone "h.top4top.io" { type master; notify no; file "null.zone.file"; };
 zone "h.valerana44.ru" { type master; notify no; file "null.zone.file"; };
+zone "h1.iwakalong.ru" { type master; notify no; file "null.zone.file"; };
 zone "h112321.s08.test-hf.su" { type master; notify no; file "null.zone.file"; };
 zone "h13.doshimotai.ru" { type master; notify no; file "null.zone.file"; };
 zone "h135460.s08.test-hf.su" { type master; notify no; file "null.zone.file"; };
@@ -34848,6 +34881,7 @@ zone "jasclair.com" { type master; notify no; file "null.zone.file"; };
 zone "jasclean.sk" { type master; notify no; file "null.zone.file"; };
 zone "jascopump.com" { type master; notify no; file "null.zone.file"; };
 zone "jaseminedenise.com" { type master; notify no; file "null.zone.file"; };
+zone "jaservicioscontables.casteviajes.com" { type master; notify no; file "null.zone.file"; };
 zone "jasesoi.com" { type master; notify no; file "null.zone.file"; };
 zone "jaset.com.mx" { type master; notify no; file "null.zone.file"; };
 zone "jashneadab.org" { type master; notify no; file "null.zone.file"; };
@@ -35145,6 +35179,7 @@ zone "jessie-equitation.fr" { type master; notify no; file "null.zone.file"; };
 zone "jessijonesstar.com" { type master; notify no; file "null.zone.file"; };
 zone "jessikarkan.com" { type master; notify no; file "null.zone.file"; };
 zone "jesswalsh.co.uk" { type master; notify no; file "null.zone.file"; };
+zone "jessymart.flexyhub.com" { type master; notify no; file "null.zone.file"; };
 zone "jester.com.au" { type master; notify no; file "null.zone.file"; };
 zone "jet2.didev.id" { type master; notify no; file "null.zone.file"; };
 zone "jetallied.com" { type master; notify no; file "null.zone.file"; };
@@ -36373,6 +36408,7 @@ zone "kalyoncularyapi.com" { type master; notify no; file "null.zone.file"; };
 zone "kam.vladistart.art" { type master; notify no; file "null.zone.file"; };
 zone "kamadecor.ru" { type master; notify no; file "null.zone.file"; };
 zone "kamagra-wolf.com" { type master; notify no; file "null.zone.file"; };
+zone "kamagra.in.rs" { type master; notify no; file "null.zone.file"; };
 zone "kamagra4uk.com" { type master; notify no; file "null.zone.file"; };
 zone "kamajankowska.com" { type master; notify no; file "null.zone.file"; };
 zone "kamakran.ru" { type master; notify no; file "null.zone.file"; };
@@ -37928,6 +37964,7 @@ zone "koralli.if.ua" { type master; notify no; file "null.zone.file"; };
 zone "koranpeduli.co.id" { type master; notify no; file "null.zone.file"; };
 zone "korastation.com" { type master; notify no; file "null.zone.file"; };
 zone "koratmobilya.xyz" { type master; notify no; file "null.zone.file"; };
+zone "koravit.zaeteaw.net" { type master; notify no; file "null.zone.file"; };
 zone "korayche2002.free.fr" { type master; notify no; file "null.zone.file"; };
 zone "korbi-studio.com" { type master; notify no; file "null.zone.file"; };
 zone "korbiel.info" { type master; notify no; file "null.zone.file"; };
@@ -45324,6 +45361,7 @@ zone "monoclepetes.com" { type master; notify no; file "null.zone.file"; };
 zone "monodoze.com" { type master; notify no; file "null.zone.file"; };
 zone "monoit.eu" { type master; notify no; file "null.zone.file"; };
 zone "monomind.co.kr" { type master; notify no; file "null.zone.file"; };
+zone "mononet.lv" { type master; notify no; file "null.zone.file"; };
 zone "monopeets.com" { type master; notify no; file "null.zone.file"; };
 zone "monrottweiler.fr" { type master; notify no; file "null.zone.file"; };
 zone "monset.it" { type master; notify no; file "null.zone.file"; };
@@ -45470,6 +45508,7 @@ zone "morozan.it" { type master; notify no; file "null.zone.file"; };
 zone "morrell-stinson.com" { type master; notify no; file "null.zone.file"; };
 zone "morricone.kayakodev.com" { type master; notify no; file "null.zone.file"; };
 zone "morrissan.com" { type master; notify no; file "null.zone.file"; };
+zone "morruko.antesos.com" { type master; notify no; file "null.zone.file"; };
 zone "morsengthaithai.com" { type master; notify no; file "null.zone.file"; };
 zone "morshinnet.ru" { type master; notify no; file "null.zone.file"; };
 zone "mortalityreview.net" { type master; notify no; file "null.zone.file"; };
@@ -46417,6 +46456,7 @@ zone "mylistbuildingtraffic.com" { type master; notify no; file "null.zone.file"
 zone "myloanbaazar.com" { type master; notify no; file "null.zone.file"; };
 zone "mylocal.dk" { type master; notify no; file "null.zone.file"; };
 zone "mylocal.no" { type master; notify no; file "null.zone.file"; };
+zone "mylocalfoodie.com.au" { type master; notify no; file "null.zone.file"; };
 zone "myloglogistica.com.br" { type master; notify no; file "null.zone.file"; };
 zone "mylokipanel.cf" { type master; notify no; file "null.zone.file"; };
 zone "mylokipanel.ga" { type master; notify no; file "null.zone.file"; };
@@ -49823,6 +49863,7 @@ zone "oraclewednesday.org" { type master; notify no; file "null.zone.file"; };
 zone "oraio.com.py" { type master; notify no; file "null.zone.file"; };
 zone "oralcamp.com.br" { type master; notify no; file "null.zone.file"; };
 zone "oralflora.jp" { type master; notify no; file "null.zone.file"; };
+zone "oralloy.com" { type master; notify no; file "null.zone.file"; };
 zone "oramos.com.ar" { type master; notify no; file "null.zone.file"; };
 zone "oranbet.ml" { type master; notify no; file "null.zone.file"; };
 zone "orange-county-loans.com" { type master; notify no; file "null.zone.file"; };
@@ -50023,6 +50064,7 @@ zone "osim-heshbon.co.il" { type master; notify no; file "null.zone.file"; };
 zone "osirisre.online" { type master; notify no; file "null.zone.file"; };
 zone "osiyo555.com" { type master; notify no; file "null.zone.file"; };
 zone "osk-hornet.pl" { type master; notify no; file "null.zone.file"; };
+zone "oskarnews.gazashare.com" { type master; notify no; file "null.zone.file"; };
 zone "osliving.com" { type master; notify no; file "null.zone.file"; };
 zone "osmanager.com.br" { type master; notify no; file "null.zone.file"; };
 zone "osmanisports.com" { type master; notify no; file "null.zone.file"; };
@@ -50289,6 +50331,7 @@ zone "oyunw.com" { type master; notify no; file "null.zone.file"; };
 zone "oz-dn.org" { type master; notify no; file "null.zone.file"; };
 zone "oz-link.com" { type master; notify no; file "null.zone.file"; };
 zone "oz-tekpersonelkiyafetleri.com" { type master; notify no; file "null.zone.file"; };
+zone "oz.timeisletitgo.ru" { type master; notify no; file "null.zone.file"; };
 zone "oz4eai75936b8d.com" { type master; notify no; file "null.zone.file"; };
 zone "oz7p.dk" { type master; notify no; file "null.zone.file"; };
 zone "oz9lla.dk" { type master; notify no; file "null.zone.file"; };
@@ -53158,6 +53201,7 @@ zone "privacydesignstudio.com" { type master; notify no; file "null.zone.file";
 zone "privacymails.space" { type master; notify no; file "null.zone.file"; };
 zone "privacytools.life" { type master; notify no; file "null.zone.file"; };
 zone "privacytools.site" { type master; notify no; file "null.zone.file"; };
+zone "privacytoolsstore.website" { type master; notify no; file "null.zone.file"; };
 zone "privat-cyprian.sk" { type master; notify no; file "null.zone.file"; };
 zone "private-accounting.com" { type master; notify no; file "null.zone.file"; };
 zone "private-dining.com.ua" { type master; notify no; file "null.zone.file"; };
@@ -53450,6 +53494,7 @@ zone "proluxshop.ir" { type master; notify no; file "null.zone.file"; };
 zone "prom-alp.kz" { type master; notify no; file "null.zone.file"; };
 zone "prom-engineering.com" { type master; notify no; file "null.zone.file"; };
 zone "promacsolutions.mx" { type master; notify no; file "null.zone.file"; };
+zone "promassager.ga" { type master; notify no; file "null.zone.file"; };
 zone "promdon.dn.ua" { type master; notify no; file "null.zone.file"; };
 zone "promente.it" { type master; notify no; file "null.zone.file"; };
 zone "promep.utrng.edu.mx" { type master; notify no; file "null.zone.file"; };
@@ -57539,6 +57584,7 @@ zone "sageth.net" { type master; notify no; file "null.zone.file"; };
 zone "sagiri.org" { type master; notify no; file "null.zone.file"; };
 zone "saglikbakanligi20gbinternet.com" { type master; notify no; file "null.zone.file"; };
 zone "saglikbakanligindanhediye20gb.com" { type master; notify no; file "null.zone.file"; };
+zone "saglikgoalapp.site" { type master; notify no; file "null.zone.file"; };
 zone "saglikliapp.live" { type master; notify no; file "null.zone.file"; };
 zone "sagliklibedenim.com" { type master; notify no; file "null.zone.file"; };
 zone "sagrathi.com" { type master; notify no; file "null.zone.file"; };
@@ -58757,6 +58803,7 @@ zone "sedotwcdadilancar.com" { type master; notify no; file "null.zone.file"; };
 zone "sedotwcsejakarta.com" { type master; notify no; file "null.zone.file"; };
 zone "seductivestrands.com" { type master; notify no; file "null.zone.file"; };
 zone "see.prblm.li" { type master; notify no; file "null.zone.file"; };
+zone "seeanu.ru" { type master; notify no; file "null.zone.file"; };
 zone "seecareer.com" { type master; notify no; file "null.zone.file"; };
 zone "seednext.work" { type master; notify no; file "null.zone.file"; };
 zone "seedopk.org" { type master; notify no; file "null.zone.file"; };
@@ -60233,6 +60280,7 @@ zone "silverlineboatsales.com" { type master; notify no; file "null.zone.file";
 zone "silverliningcoaching.com.au" { type master; notify no; file "null.zone.file"; };
 zone "silverlinktechnologies.com" { type master; notify no; file "null.zone.file"; };
 zone "silveroks.com.ua" { type master; notify no; file "null.zone.file"; };
+zone "silverstargalaxy.com.silverstartv.website" { type master; notify no; file "null.zone.file"; };
 zone "silverstoltsen.com" { type master; notify no; file "null.zone.file"; };
 zone "silverswiss.com" { type master; notify no; file "null.zone.file"; };
 zone "silvesterinmailand.com" { type master; notify no; file "null.zone.file"; };
@@ -60282,6 +60330,7 @@ zone "simonsolutions.us" { type master; notify no; file "null.zone.file"; };
 zone "simorghealborz.com" { type master; notify no; file "null.zone.file"; };
 zone "simp-consulting.pl" { type master; notify no; file "null.zone.file"; };
 zone "simpelway.dk.linux154.unoeuro-server.com" { type master; notify no; file "null.zone.file"; };
+zone "simpl.pw" { type master; notify no; file "null.zone.file"; };
 zone "simplatecplc.com" { type master; notify no; file "null.zone.file"; };
 zone "simple-it.org" { type master; notify no; file "null.zone.file"; };
 zone "simple-it.si" { type master; notify no; file "null.zone.file"; };
@@ -61161,6 +61210,7 @@ zone "so-lonely.fr" { type master; notify no; file "null.zone.file"; };
 zone "so-nettel.ml" { type master; notify no; file "null.zone.file"; };
 zone "so.nevisconsultants.com" { type master; notify no; file "null.zone.file"; };
 zone "so370.com" { type master; notify no; file "null.zone.file"; };
+zone "so4.seeanu.ru" { type master; notify no; file "null.zone.file"; };
 zone "so766.sohost.pl" { type master; notify no; file "null.zone.file"; };
 zone "soa.com.pk" { type master; notify no; file "null.zone.file"; };
 zone "soafinance.com" { type master; notify no; file "null.zone.file"; };
@@ -62394,6 +62444,7 @@ zone "staging.overlogo.com" { type master; notify no; file "null.zone.file"; };
 zone "staging.pashminadevelopers.com" { type master; notify no; file "null.zone.file"; };
 zone "staging.phandeeyar.org" { type master; notify no; file "null.zone.file"; };
 zone "staging.playhualien.com" { type master; notify no; file "null.zone.file"; };
+zone "staging.popclusive.asia" { type master; notify no; file "null.zone.file"; };
 zone "staging.presthemes.com" { type master; notify no; file "null.zone.file"; };
 zone "staging.securenetworks.pk" { type master; notify no; file "null.zone.file"; };
 zone "staging.semperkitchen.com" { type master; notify no; file "null.zone.file"; };
@@ -62720,6 +62771,7 @@ zone "steinerurology.com.au" { type master; notify no; file "null.zone.file"; };
 zone "steinoe.dk" { type master; notify no; file "null.zone.file"; };
 zone "steinplatten-tirol.at" { type master; notify no; file "null.zone.file"; };
 zone "stekols.ru" { type master; notify no; file "null.zone.file"; };
+zone "stelamedien.de" { type master; notify no; file "null.zone.file"; };
 zone "stelastraveldiary.com" { type master; notify no; file "null.zone.file"; };
 zone "steldesign.com" { type master; notify no; file "null.zone.file"; };
 zone "stella.pk" { type master; notify no; file "null.zone.file"; };
@@ -63512,6 +63564,7 @@ zone "sunandsand.minnesotacowboy.com" { type master; notify no; file "null.zone.
 zone "sunaner.com" { type master; notify no; file "null.zone.file"; };
 zone "sunart-5.com" { type master; notify no; file "null.zone.file"; };
 zone "sunblessvgp.com" { type master; notify no; file "null.zone.file"; };
+zone "sunboom-gift.com" { type master; notify no; file "null.zone.file"; };
 zone "sunchipaint.com.vn" { type master; notify no; file "null.zone.file"; };
 zone "suncity116.com" { type master; notify no; file "null.zone.file"; };
 zone "suncity727.com" { type master; notify no; file "null.zone.file"; };
@@ -64187,6 +64240,7 @@ zone "t2.webtilia.com" { type master; notify no; file "null.zone.file"; };
 zone "t2lisboa.lisbonlab.com" { type master; notify no; file "null.zone.file"; };
 zone "t2tdesigns.com" { type master; notify no; file "null.zone.file"; };
 zone "t3-thanglongcapital.top" { type master; notify no; file "null.zone.file"; };
+zone "t37b.iwakalong.ru" { type master; notify no; file "null.zone.file"; };
 zone "t3dgraphics.com" { type master; notify no; file "null.zone.file"; };
 zone "t5forums.com" { type master; notify no; file "null.zone.file"; };
 zone "t6226.com" { type master; notify no; file "null.zone.file"; };
@@ -64722,6 +64776,7 @@ zone "taxpos.com" { type master; notify no; file "null.zone.file"; };
 zone "taxready.in" { type master; notify no; file "null.zone.file"; };
 zone "taxtell.ru" { type master; notify no; file "null.zone.file"; };
 zone "taxtionfree.co.in" { type master; notify no; file "null.zone.file"; };
+zone "taxukrebates.com" { type master; notify no; file "null.zone.file"; };
 zone "tay.batt2u.com" { type master; notify no; file "null.zone.file"; };
 zone "taybabuilders.com" { type master; notify no; file "null.zone.file"; };
 zone "tayebsojib.com" { type master; notify no; file "null.zone.file"; };
@@ -70543,6 +70598,7 @@ zone "vip-rocket.net" { type master; notify no; file "null.zone.file"; };
 zone "vip-watch.store" { type master; notify no; file "null.zone.file"; };
 zone "vip.lijinxi.com" { type master; notify no; file "null.zone.file"; };
 zone "vip.maohuagong.com" { type master; notify no; file "null.zone.file"; };
+zone "vip.recommendedtoyoo.com" { type master; notify no; file "null.zone.file"; };
 zone "vip.zbfcxx.cn" { type master; notify no; file "null.zone.file"; };
 zone "vip163.cf" { type master; notify no; file "null.zone.file"; };
 zone "vip163.ga" { type master; notify no; file "null.zone.file"; };
@@ -70614,6 +70670,7 @@ zone "virtualupload.org" { type master; notify no; file "null.zone.file"; };
 zone "virtuoushairline.org" { type master; notify no; file "null.zone.file"; };
 zone "virtuspartners.cl" { type master; notify no; file "null.zone.file"; };
 zone "viruscheckmake.gq" { type master; notify no; file "null.zone.file"; };
+zone "virustreatments.empeeevents.com" { type master; notify no; file "null.zone.file"; };
 zone "visa.indonesia.nl" { type master; notify no; file "null.zone.file"; };
 zone "visa.org.ua" { type master; notify no; file "null.zone.file"; };
 zone "visaatlantis.com" { type master; notify no; file "null.zone.file"; };
@@ -74031,6 +74088,7 @@ zone "ybtvmt.info" { type master; notify no; file "null.zone.file"; };
 zone "ybuat49ounh.kaligodfrey.casa" { type master; notify no; file "null.zone.file"; };
 zone "ybuzzfmdy.cf" { type master; notify no; file "null.zone.file"; };
 zone "yc.satnam.ru" { type master; notify no; file "null.zone.file"; };
+zone "yc5.timeisletitgo.ru" { type master; notify no; file "null.zone.file"; };
 zone "ycg-tw.com" { type master; notify no; file "null.zone.file"; };
 zone "ych.jp" { type master; notify no; file "null.zone.file"; };
 zone "ychynt.com" { type master; notify no; file "null.zone.file"; };
@@ -75228,5 +75286,6 @@ zone "zzii.net" { type master; notify no; file "null.zone.file"; };
 zone "zzjph.com" { type master; notify no; file "null.zone.file"; };
 zone "zzlong.xyz" { type master; notify no; file "null.zone.file"; };
 zone "zzpit.dk" { type master; notify no; file "null.zone.file"; };
+zone "zzv.seeanu.ru" { type master; notify no; file "null.zone.file"; };
 zone "zzyin.cn" { type master; notify no; file "null.zone.file"; };
 zone "zzz78.tk" { type master; notify no; file "null.zone.file"; };
diff --git a/urlhaus-filter-dnsmasq-online.conf b/urlhaus-filter-dnsmasq-online.conf
index a4247756..ca64ff6c 100644
--- a/urlhaus-filter-dnsmasq-online.conf
+++ b/urlhaus-filter-dnsmasq-online.conf
@@ -1,16 +1,19 @@
 # Title: abuse.ch URLhaus Malicious Domains dnsmasq Blocklist
-# Updated: Wed, 29 Apr 2020 12:09:39 UTC
+# Updated: Thu, 30 Apr 2020 00:09:24 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
 address=/0400msc.com/0.0.0.0
 address=/13pope.com/0.0.0.0
-address=/150.co.il/0.0.0.0
+address=/1l04.timeisletitgo.ru/0.0.0.0
 address=/2000kumdo.com/0.0.0.0
 address=/21robo.com/0.0.0.0
+address=/2xmy.timeisletitgo.ru/0.0.0.0
 address=/3.zhzy999.net/0.0.0.0
 address=/3.zhzy999.net3.zhzy999.net/0.0.0.0
 address=/3mandatesmedia.com/0.0.0.0
+address=/3q9h.timeisletitgo.ru/0.0.0.0
+address=/3vc6.seeanu.ru/0.0.0.0
 address=/402musicfest.com/0.0.0.0
 address=/420hempizone.co/0.0.0.0
 address=/49parallel.ca/0.0.0.0
@@ -18,17 +21,20 @@ address=/5321msc.com/0.0.0.0
 address=/786suncity.com/0.0.0.0
 address=/8133msc.com/0.0.0.0
 address=/8200msc.com/0.0.0.0
+address=/87du.vip/0.0.0.0
 address=/887sconline.com/0.0.0.0
 address=/88mscco.com/0.0.0.0
 address=/9983suncity.com/0.0.0.0
+address=/Muanha.xyz/0.0.0.0
 address=/ZEROTERWWGFBOT.hoesbigmadzero.tk/0.0.0.0
 address=/a-reality.co.uk/0.0.0.0
+address=/a.seeanu.ru/0.0.0.0
 address=/a.xiazai163.com/0.0.0.0
 address=/aaasolution.co.th/0.0.0.0
 address=/accentlandscapes.com/0.0.0.0
 address=/accessyouraudience.com/0.0.0.0
 address=/acteon.com.ar/0.0.0.0
-address=/activecost.com.au/0.0.0.0
+address=/aelogica.com/0.0.0.0
 address=/agiandsam.com/0.0.0.0
 address=/agipasesores.com/0.0.0.0
 address=/agsir.com/0.0.0.0
@@ -46,10 +52,9 @@ address=/alohasoftware.net/0.0.0.0
 address=/alphaconsumer.net/0.0.0.0
 address=/am-concepts.ca/0.0.0.0
 address=/amd.alibuf.com/0.0.0.0
+address=/amedeoscognamiglio.329263.com/0.0.0.0
 address=/amemarine.co.th/0.0.0.0
 address=/americanrange.com/0.0.0.0
-address=/anadolutatili.com/0.0.0.0
-address=/anaekppystdy4initalymedicalconsultancy.duckdns.org/0.0.0.0
 address=/andreabo1.myftp.biz/0.0.0.0
 address=/andreelapeyre.com/0.0.0.0
 address=/andremaraisbeleggings.co.za/0.0.0.0
@@ -63,7 +68,7 @@ address=/apware.co.kr/0.0.0.0
 address=/archiv.bg/0.0.0.0
 address=/areac-agr.com/0.0.0.0
 address=/aresorganics.com/0.0.0.0
-address=/asadairtravel.com/0.0.0.0
+address=/arowanafishforsale.com/0.0.0.0
 address=/ascentive.com/0.0.0.0
 address=/ashoakacharya.com/0.0.0.0
 address=/askarindo.or.id/0.0.0.0
@@ -92,7 +97,7 @@ address=/bd11.52lishi.com/0.0.0.0
 address=/bd12.52lishi.com/0.0.0.0
 address=/bd18.52lishi.com/0.0.0.0
 address=/bd19.52lishi.com/0.0.0.0
-address=/beachview.co.za/0.0.0.0
+address=/beforeshithappens.com/0.0.0.0
 address=/beibei.xx007.cc/0.0.0.0
 address=/bepgroup.com.hk/0.0.0.0
 address=/besserblok-ufa.ru/0.0.0.0
@@ -109,19 +114,23 @@ address=/blankki.com/0.0.0.0
 address=/blog.241optical.com/0.0.0.0
 address=/blog.anytimeneeds.com/0.0.0.0
 address=/blog.hanxe.com/0.0.0.0
+address=/bolescy.com/0.0.0.0
 address=/bolidar.dnset.com/0.0.0.0
 address=/bondbuild.com.sg/0.0.0.0
+address=/bonyamin.com/0.0.0.0
 address=/bookmytripping.com/0.0.0.0
 address=/bpo.correct.go.th/0.0.0.0
 address=/brasstec.com.br/0.0.0.0
 address=/brbs.customer.netspace.net.au/0.0.0.0
 address=/brenleyquartzgh.com/0.0.0.0
 address=/brewmethods.com/0.0.0.0
+address=/britica.vn/0.0.0.0
 address=/btlocum.pl/0.0.0.0
 address=/bugansavings.com/0.0.0.0
 address=/buydishtv.in/0.0.0.0
 address=/byqkdy.com/0.0.0.0
 address=/cameli.vn/0.0.0.0
+address=/capath.vn/0.0.0.0
 address=/caravella.com.br/0.0.0.0
 address=/cassiagumrefined.com/0.0.0.0
 address=/cassovia.sk/0.0.0.0
@@ -137,7 +146,6 @@ address=/cf0.pw/0.0.0.0
 address=/cfs5.tistory.com/0.0.0.0
 address=/ch.rmu.ac.th/0.0.0.0
 address=/changematterscounselling.com/0.0.0.0
-address=/chantdownproster.com/0.0.0.0
 address=/chanvribloc.com/0.0.0.0
 address=/charm.bizfxr.com/0.0.0.0
 address=/chauffeursontravel.com/0.0.0.0
@@ -146,16 +154,16 @@ address=/chinhdropfile.myvnc.com/0.0.0.0
 address=/chinhdropfile80.myvnc.com/0.0.0.0
 address=/chipmarkets.com/0.0.0.0
 address=/chj.m.dodo52.com/0.0.0.0
-address=/cista-dobra-voda.com/0.0.0.0
+address=/cinnamoncreations.com.au/0.0.0.0
 address=/clearwaterriveroutfitting.com/0.0.0.0
 address=/client.yaap.co.uk/0.0.0.0
 address=/clinicamariademolina.com/0.0.0.0
-address=/cloud.wmsinfo.com.br/0.0.0.0
 address=/common-factor.nl/0.0.0.0
 address=/compesat.com/0.0.0.0
 address=/complan.hu/0.0.0.0
 address=/complanbt.hu/0.0.0.0
 address=/comtechadsl.com/0.0.0.0
+address=/config.cqhbkjzx.com/0.0.0.0
 address=/config.kuaisousou.top/0.0.0.0
 address=/consultingcy.com/0.0.0.0
 address=/corazondelcielo.mx/0.0.0.0
@@ -163,7 +171,7 @@ address=/counciloflight.bravepages.com/0.0.0.0
 address=/cqjcc.org/0.0.0.0
 address=/crimebranch.in/0.0.0.0
 address=/crittersbythebay.com/0.0.0.0
-address=/crudenergyllc.com/0.0.0.0
+address=/cryptoomarket.com/0.0.0.0
 address=/csnserver.com/0.0.0.0
 address=/csw.hu/0.0.0.0
 address=/cvc.com.pl/0.0.0.0
@@ -182,17 +190,22 @@ address=/dawaphoto.co.kr/0.0.0.0
 address=/daynightgym.com/0.0.0.0
 address=/de.gsearch.com.de/0.0.0.0
 address=/deixameuskls.tripod.com/0.0.0.0
+address=/demo10.onbm.ir/0.0.0.0
+address=/demo13.dsdemosite.com/0.0.0.0
 address=/denkagida.com.tr/0.0.0.0
 address=/depgrup.com/0.0.0.0
 address=/depot7.com/0.0.0.0
 address=/derivativespro.in/0.0.0.0
+address=/dev.apshaps.se/0.0.0.0
 address=/dev.sebpo.net/0.0.0.0
+address=/dev1.xicom.us/0.0.0.0
 address=/dev5.mypagevn.com/0.0.0.0
 address=/dezcom.com/0.0.0.0
 address=/dfcf.91756.cn/0.0.0.0
 address=/dfd.zhzy999.net/0.0.0.0
 address=/dfzm.91756.cn/0.0.0.0
 address=/dgecolesdepolice.bf/0.0.0.0
+address=/dgnj.cn/0.0.0.0
 address=/dhlservices.duckdns.org/0.0.0.0
 address=/diazavendano.cl/0.0.0.0
 address=/dichvuvesinhcongnghiep.top/0.0.0.0
@@ -200,6 +213,7 @@ address=/dienmaycu.vn/0.0.0.0
 address=/dieselmoreno.cl/0.0.0.0
 address=/digilib.dianhusada.ac.id/0.0.0.0
 address=/digiovanniconsultants.com/0.0.0.0
+address=/digital-marketing-institute-delhi.empeeevents.com/0.0.0.0
 address=/digitaldog.de/0.0.0.0
 address=/discuzx.win/0.0.0.0
 address=/ditec.com.my/0.0.0.0
@@ -224,6 +238,7 @@ address=/down.ancamera.co.kr/0.0.0.0
 address=/down.gogominer.com/0.0.0.0
 address=/down.haote.com/0.0.0.0
 address=/down.pcclear.com/0.0.0.0
+address=/down.pdf.cqmjkjzx.com/0.0.0.0
 address=/down.startools.co.kr/0.0.0.0
 address=/down.tgjkbx.cn/0.0.0.0
 address=/down.upzxt.com/0.0.0.0
@@ -246,6 +261,7 @@ address=/dralpaslan.com/0.0.0.0
 address=/dreamtrips.cheap/0.0.0.0
 address=/drools-moved.46999.n3.nabble.com/0.0.0.0
 address=/druzim.freewww.biz/0.0.0.0
+address=/drwendyellis.com/0.0.0.0
 address=/dsiun.com/0.0.0.0
 address=/dtsay.xyz/0.0.0.0
 address=/dudulm.com/0.0.0.0
@@ -256,15 +272,17 @@ address=/dx1.qqtn.com/0.0.0.0
 address=/dx2.qqtn.com/0.0.0.0
 address=/dx30.siweidaoxiang.com/0.0.0.0
 address=/dx60.siweidaoxiang.com/0.0.0.0
+address=/dzapasigroup.usapglobal.org/0.0.0.0
 address=/dzinestudio87.co.uk/0.0.0.0
-address=/dzyzz.cn/0.0.0.0
 address=/e.dangeana.com/0.0.0.0
+address=/earningtipsbd.com/0.0.0.0
 address=/easydown.workday360.cn/0.0.0.0
 address=/ebook.w3wvg.com/0.0.0.0
 address=/edicolanazionale.it/0.0.0.0
 address=/emir-elbahr.com/0.0.0.0
 address=/enc-tech.com/0.0.0.0
 address=/entre-potes.mon-application.com/0.0.0.0
+address=/eposar.com.ar/0.0.0.0
 address=/er-bulisguvenligi.com/0.0.0.0
 address=/ermekanik.com/0.0.0.0
 address=/esolvent.pl/0.0.0.0
@@ -278,6 +296,7 @@ address=/fastsoft.onlinedown.net/0.0.0.0
 address=/fazi.pl/0.0.0.0
 address=/fenoma.net/0.0.0.0
 address=/fidiag.kymco.com/0.0.0.0
+address=/fifa555easy.329263.com/0.0.0.0
 address=/figuig.net/0.0.0.0
 address=/fileco.jobkorea.co.kr/0.0.0.0
 address=/filen3.utengine.co.kr/0.0.0.0
@@ -289,21 +308,22 @@ address=/fitmanacademy.com/0.0.0.0
 address=/fkd.derpcity.ru/0.0.0.0
 address=/flex.ru/0.0.0.0
 address=/flood-protection.org/0.0.0.0
-address=/foodbooktv.com/0.0.0.0
 address=/fordlamdong.com.vn/0.0.0.0
-address=/foreveramericabrands.com/0.0.0.0
 address=/foreverprecious.org/0.0.0.0
+address=/foxfennecs.com/0.0.0.0
 address=/frin.ng/0.0.0.0
 address=/fte.m.dodo52.com/0.0.0.0
+address=/ftpcnc-p2sp.pconline.com.cn/0.0.0.0
 address=/ftpftpftp.com/0.0.0.0
 address=/funletters.net/0.0.0.0
-address=/funpartyrent.com/0.0.0.0
 address=/futuregraphics.com.ar/0.0.0.0
 address=/futurodelasciudades.org/0.0.0.0
 address=/g.7230.com/0.0.0.0
 address=/g0ogle.free.fr/0.0.0.0
+address=/gainsdirectory.com/0.0.0.0
 address=/galuhtea.com/0.0.0.0
 address=/gamee.top/0.0.0.0
+address=/garage.themebuffets.com/0.0.0.0
 address=/garenanow.myvnc.com/0.0.0.0
 address=/garenanow4.myvnc.com/0.0.0.0
 address=/gargiulo.com.ar/0.0.0.0
@@ -315,7 +335,6 @@ address=/germistonmiraclecentre.co.za/0.0.0.0
 address=/ghislain.dartois.pagesperso-orange.fr/0.0.0.0
 address=/ghwls44.gabia.io/0.0.0.0
 address=/gimscompany.com/0.0.0.0
-address=/glitchexotika.com/0.0.0.0
 address=/glitzygal.net/0.0.0.0
 address=/gnimelf.net/0.0.0.0
 address=/go.xsuad.com/0.0.0.0
@@ -325,9 +344,9 @@ address=/govhotel.us/0.0.0.0
 address=/grafchekloder.rebatesrule.net/0.0.0.0
 address=/granportale.com.br/0.0.0.0
 address=/green100.cn/0.0.0.0
-address=/greindustry.com/0.0.0.0
 address=/gssgroups.com/0.0.0.0
 address=/gx-10012947.file.myqcloud.com/0.0.0.0
+address=/h1.iwakalong.ru/0.0.0.0
 address=/habbotips.free.fr/0.0.0.0
 address=/hagebakken.no/0.0.0.0
 address=/halcat.com/0.0.0.0
@@ -335,6 +354,7 @@ address=/hanaphoto.co.kr/0.0.0.0
 address=/handrush.com/0.0.0.0
 address=/hanoihub.vn/0.0.0.0
 address=/hazel-azure.co.th/0.0.0.0
+address=/hdxa.net/0.0.0.0
 address=/healtina.com/0.0.0.0
 address=/heavenif.co.za/0.0.0.0
 address=/hediyegapsinternet.com/0.0.0.0
@@ -373,7 +393,6 @@ address=/ini.egkj.com/0.0.0.0
 address=/innovation4crisis.org/0.0.0.0
 address=/instanttechnology.com.au/0.0.0.0
 address=/intelicasa.ro/0.0.0.0
-address=/intertradeassociates.com.au/0.0.0.0
 address=/intoxicated-twilight.com/0.0.0.0
 address=/iran-gold.com/0.0.0.0
 address=/iremart.es/0.0.0.0
@@ -382,12 +401,13 @@ address=/itd.m.dodo52.com/0.0.0.0
 address=/itsnixielou.com/0.0.0.0
 address=/ixlonbcc.com/0.0.0.0
 address=/izu.co.jp/0.0.0.0
-address=/jaincakes.xyz/0.0.0.0
 address=/jamiekaylive.com/0.0.0.0
 address=/jansen-heesch.nl/0.0.0.0
 address=/janvierassocies.fr/0.0.0.0
+address=/jaservicioscontables.casteviajes.com/0.0.0.0
 address=/javatank.ru/0.0.0.0
 address=/jcedu.org/0.0.0.0
+address=/jessymart.flexyhub.com/0.0.0.0
 address=/jjjexx.329263.com/0.0.0.0
 address=/jmtc.91756.cn/0.0.0.0
 address=/jointings.org/0.0.0.0
@@ -404,6 +424,7 @@ address=/jvalert.com/0.0.0.0
 address=/jyv.fi/0.0.0.0
 address=/jzny.com.cn/0.0.0.0
 address=/k.ludong.tv/0.0.0.0
+address=/k3.etfiber.net/0.0.0.0
 address=/kabiru.ru/0.0.0.0
 address=/kachsurf.mylftv.com/0.0.0.0
 address=/kamasu11.cafe24.com/0.0.0.0
@@ -415,15 +436,15 @@ address=/kassohome.com.tr/0.0.0.0
 address=/kazanturkiye20gb.com/0.0.0.0
 address=/kbzsa.cn/0.0.0.0
 address=/kdsp.co.kr/0.0.0.0
-address=/keckarangdadap.pekalongankab.go.id/0.0.0.0
 address=/kejpa.com/0.0.0.0
-address=/kgfs3.329263.com/0.0.0.0
 address=/khan-associates.net/0.0.0.0
 address=/khunnapap.com/0.0.0.0
 address=/kiaowadubai.com/0.0.0.0
 address=/kiencuonghotel.vn/0.0.0.0
+address=/kingdomcarecan.com/0.0.0.0
 address=/kingsland.systemsolution.me/0.0.0.0
 address=/kjbm9.mof.gov.cn/0.0.0.0
+address=/kleinendeli.co.za/0.0.0.0
 address=/knightsbridgeenergy.com.ng/0.0.0.0
 address=/koppemotta.com.br/0.0.0.0
 address=/koralli.if.ua/0.0.0.0
@@ -440,7 +461,6 @@ address=/landmarktreks.com/0.0.0.0
 address=/langyabbs.05yun.cn/0.0.0.0
 address=/lcfurtado.com.br/0.0.0.0
 address=/ld.mediaget.com/0.0.0.0
-address=/leaksfly.com/0.0.0.0
 address=/learnbuddy.com/0.0.0.0
 address=/learningcomputing.org/0.0.0.0
 address=/lebedyn.info/0.0.0.0
@@ -451,8 +471,8 @@ address=/libya-info.com/0.0.0.0
 address=/lifeapt.biz/0.0.0.0
 address=/lists.ibiblio.org/0.0.0.0
 address=/lists.mplayerhq.hu/0.0.0.0
+address=/livetrack.in/0.0.0.0
 address=/livetvsports.ml/0.0.0.0
-address=/lodergord.com/0.0.0.0
 address=/log.yundabao.cn/0.0.0.0
 address=/lsyr.net/0.0.0.0
 address=/lt02.datacomspecialists.net/0.0.0.0
@@ -468,9 +488,7 @@ address=/makosoft.hu/0.0.0.0
 address=/malin-akerman.net/0.0.0.0
 address=/margopassadorestylist.com/0.0.0.0
 address=/marksidfgs.ug/0.0.0.0
-address=/marocaji.com/0.0.0.0
 address=/matt-e.it/0.0.0.0
-address=/mattayom31.go.th/0.0.0.0
 address=/mazury4x4.pl/0.0.0.0
 address=/mbgrm.com/0.0.0.0
 address=/mediamatkat.fi/0.0.0.0
@@ -497,12 +515,14 @@ address=/misterson.com/0.0.0.0
 address=/mistydeblasiophotography.com/0.0.0.0
 address=/mkk09.kr/0.0.0.0
 address=/mkontakt.az/0.0.0.0
-address=/mlbfreestream.gq/0.0.0.0
+address=/mlbfreestream.ml/0.0.0.0
 address=/mmc.ru.com/0.0.0.0
+address=/mobiadnews.com/0.0.0.0
 address=/mobilier-modern.ro/0.0.0.0
 address=/mochandmade.us/0.0.0.0
 address=/modcloudserver.eu/0.0.0.0
 address=/moha-group.com/0.0.0.0
+address=/mononet.lv/0.0.0.0
 address=/moscow11.at/0.0.0.0
 address=/mountveederwines.com/0.0.0.0
 address=/moyo.co.kr/0.0.0.0
@@ -512,7 +532,6 @@ address=/msecurity.ro/0.0.0.0
 address=/mteng.mmj7.com/0.0.0.0
 address=/mtfelektroteknik.com/0.0.0.0
 address=/mueblesjcp.cl/0.0.0.0
-address=/mutec.jp/0.0.0.0
 address=/mv360.net/0.0.0.0
 address=/mvb.kz/0.0.0.0
 address=/mxpiqw.am.files.1drv.com/0.0.0.0
@@ -539,7 +558,7 @@ address=/news.omumusic.net/0.0.0.0
 address=/newsun-shop.com/0.0.0.0
 address=/newxing.com/0.0.0.0
 address=/nfbio.com/0.0.0.0
-address=/nmal.info/0.0.0.0
+address=/nofound.000webhostapp.com/0.0.0.0
 address=/nprg.ru/0.0.0.0
 address=/nst-corporation.com/0.0.0.0
 address=/nwcsvcs.com/0.0.0.0
@@ -553,18 +572,17 @@ address=/omega.az/0.0.0.0
 address=/omsk-osma.ru/0.0.0.0
 address=/omuzgor.tj/0.0.0.0
 address=/onestin.ro/0.0.0.0
-address=/onlink-aoiuvr.com/0.0.0.0
-address=/onyourmarkmindsetgo.com/0.0.0.0
 address=/openclient.sroinfo.com/0.0.0.0
 address=/operasanpiox.bravepages.com/0.0.0.0
 address=/opolis.io/0.0.0.0
+address=/oralloy.com/0.0.0.0
 address=/osdsoft.com/0.0.0.0
 address=/osesama.jp/0.0.0.0
 address=/osheoufhusheoghuesd.ru/0.0.0.0
+address=/oskarnews.gazashare.com/0.0.0.0
 address=/otanityre.in/0.0.0.0
 address=/ouhfuosuoosrhfzr.su/0.0.0.0
 address=/ovelcom.com/0.0.0.0
-address=/ozemag.com/0.0.0.0
 address=/ozkayalar.com/0.0.0.0
 address=/p1.lingpao8.com/0.0.0.0
 address=/p2.lingpao8.com/0.0.0.0
@@ -582,6 +600,7 @@ address=/patch2.99ddd.com/0.0.0.0
 address=/patch3.99ddd.com/0.0.0.0
 address=/patrickchan-hk.net/0.0.0.0
 address=/pawel-sikora.pl/0.0.0.0
+address=/pcexperts.co.za/0.0.0.0
 address=/pcginsure.com/0.0.0.0
 address=/pcsoori.com/0.0.0.0
 address=/pedidoslalacteo.com.ar/0.0.0.0
@@ -590,7 +609,6 @@ address=/petromltd.com/0.0.0.0
 address=/ph4s.ru/0.0.0.0
 address=/phamchilong.com/0.0.0.0
 address=/phudieusongma.com/0.0.0.0
-address=/physiodelacomba.ch/0.0.0.0
 address=/piapendet.com/0.0.0.0
 address=/pink99.com/0.0.0.0
 address=/pmguide.net/0.0.0.0
@@ -599,6 +617,7 @@ address=/podrska.com.hr/0.0.0.0
 address=/ponto50.com.br/0.0.0.0
 address=/poolbook.ir/0.0.0.0
 address=/ppl.ac.id/0.0.0.0
+address=/privacytoolsstore.website/0.0.0.0
 address=/probost.cz/0.0.0.0
 address=/profitcoach.net/0.0.0.0
 address=/prosoc.nl/0.0.0.0
@@ -611,10 +630,12 @@ address=/qelie.com/0.0.0.0
 address=/qfjys.com.img.800cdn.com/0.0.0.0
 address=/qmsled.com/0.0.0.0
 address=/qppl.angiang.gov.vn/0.0.0.0
+address=/qualitygolfbags.com/0.0.0.0
 address=/quartier-midi.be/0.0.0.0
 address=/quehagoencartagena.com/0.0.0.0
 address=/raacts.in/0.0.0.0
 address=/raifix.com.br/0.0.0.0
+address=/rangebroadcasting.com/0.0.0.0
 address=/rapidex.co.rs/0.0.0.0
 address=/rc.ixiaoyang.cn/0.0.0.0
 address=/readytalk.github.io/0.0.0.0
@@ -630,24 +651,22 @@ address=/res.uf1.cn/0.0.0.0
 address=/ret.space/0.0.0.0
 address=/rezaazizi.ir/0.0.0.0
 address=/rinkaisystem-ht.com/0.0.0.0
-address=/riskxai.com/0.0.0.0
 address=/riyanenterprise.com/0.0.0.0
 address=/rkverify.securestudies.com/0.0.0.0
 address=/robertmcardle.com/0.0.0.0
 address=/robotrade.com.vn/0.0.0.0
 address=/rollingmill.in/0.0.0.0
 address=/rollscar.pk/0.0.0.0
-address=/ross-ocenka.ru/0.0.0.0
 address=/rossogato.com/0.0.0.0
 address=/ruisgood.ru/0.0.0.0
 address=/rusch.nu/0.0.0.0
 address=/s.51shijuan.com/0.0.0.0
 address=/s.kk30.com/0.0.0.0
+address=/s14b.91danji.com/0.0.0.0
+address=/s14b.groundyun.cn/0.0.0.0
 address=/sabiupd.compress.to/0.0.0.0
 address=/saboorjaam.ir/0.0.0.0
 address=/sabupda.vizvaz.com/0.0.0.0
-address=/saglikliapp.live/0.0.0.0
-address=/sahathaikasetpan.com/0.0.0.0
 address=/salvation24.com/0.0.0.0
 address=/salvationbd.com/0.0.0.0
 address=/sandovalgraphics.com/0.0.0.0
@@ -656,9 +675,9 @@ address=/saskklo.com/0.0.0.0
 address=/scglobal.co.th/0.0.0.0
 address=/schollaert.eu/0.0.0.0
 address=/schoongezicht.org/0.0.0.0
+address=/seeanu.ru/0.0.0.0
 address=/seenext.com.pk/0.0.0.0
 address=/sefp-boispro.fr/0.0.0.0
-address=/seibee.biz/0.0.0.0
 address=/selekture.com/0.0.0.0
 address=/selfuseproperty.com/0.0.0.0
 address=/selvikoyunciftligi.com/0.0.0.0
@@ -668,6 +687,7 @@ address=/servicemhkd80.myvnc.com/0.0.0.0
 address=/serviciosinfoware.cl/0.0.0.0
 address=/sexybaccarat.329263.com/0.0.0.0
 address=/sfoodfeedf.org/0.0.0.0
+address=/sgm.pc6.com/0.0.0.0
 address=/shacked.webdepot.co.il/0.0.0.0
 address=/shahtoba.faqserv.com/0.0.0.0
 address=/shaoxiaofei.cn/0.0.0.0
@@ -705,35 +725,33 @@ address=/sriglobalit.com/0.0.0.0
 address=/srvmanos.no-ip.info/0.0.0.0
 address=/ss.cybersoft-vn.com/0.0.0.0
 address=/sslv3.at/0.0.0.0
+address=/staging.popclusive.asia/0.0.0.0
 address=/starcountry.net/0.0.0.0
 address=/static.ilclock.com/0.0.0.0
 address=/static.topxgun.com/0.0.0.0
 address=/stationaryhome.com/0.0.0.0
-address=/stdykungeduationaldeveloper15investmenqg.duckdns.org/0.0.0.0
 address=/stecit.nl/0.0.0.0
 address=/steelbuildings.com/0.0.0.0
-address=/stevewalker.com.au/0.0.0.0
 address=/story-maker.jp/0.0.0.0
 address=/stubbackup.ru/0.0.0.0
 address=/suc9898.com/0.0.0.0
 address=/suncity116.com/0.0.0.0
 address=/support.clz.kr/0.0.0.0
-address=/surecake.com/0.0.0.0
 address=/sv.pvroe.com/0.0.0.0
 address=/svkacademy.com/0.0.0.0
 address=/svn.cc.jyu.fi/0.0.0.0
 address=/sweaty.dk/0.0.0.0
 address=/swwbia.com/0.0.0.0
-address=/sylvaclouds.eu/0.0.0.0
 address=/symanreni.mysecondarydns.com/0.0.0.0
 address=/szxypt.com/0.0.0.0
 address=/t.honker.info/0.0.0.0
+address=/tandenblekenhoofddorp.nl/0.0.0.0
 address=/taraward.com/0.0.0.0
 address=/taxpos.com/0.0.0.0
 address=/tcy.198424.com/0.0.0.0
-address=/teacherlinx.com/0.0.0.0
 address=/teardrop-productions.ro/0.0.0.0
 address=/technoites.com/0.0.0.0
+address=/tecnobella.cl/0.0.0.0
 address=/tehrenberg.com/0.0.0.0
 address=/telescopelms.com/0.0.0.0
 address=/telsiai.info/0.0.0.0
@@ -752,19 +770,21 @@ address=/theprestige.ro/0.0.0.0
 address=/theptiendat.com/0.0.0.0
 address=/therecruiter.io/0.0.0.0
 address=/thesecuritysoftwarescannerindustrgreat.duckdns.org/0.0.0.0
+address=/thevision.ro/0.0.0.0
 address=/thornadops.com/0.0.0.0
 address=/thosewebbs.com/0.0.0.0
 address=/tianangdep.com/0.0.0.0
+address=/tianmaouae.com/0.0.0.0
 address=/tianzi8.cn/0.0.0.0
 address=/tibinst.mefound.com/0.0.0.0
 address=/tibok.lflink.com/0.0.0.0
 address=/ticte.in/0.0.0.0
 address=/timlinger.com/0.0.0.0
 address=/tmhfashionhouse.co.za/0.0.0.0
+address=/toe.polinema.ac.id/0.0.0.0
 address=/tonghopgia.net/0.0.0.0
 address=/tonydong.com/0.0.0.0
 address=/tonyzone.com/0.0.0.0
-address=/tovarentertainment.in/0.0.0.0
 address=/tsd.jxwan.com/0.0.0.0
 address=/tsredco.telangana.gov.in/0.0.0.0
 address=/tulli.info/0.0.0.0
@@ -773,6 +793,7 @@ address=/tuneup.ibk.me/0.0.0.0
 address=/tup.com.cn/0.0.0.0
 address=/tutuler.com/0.0.0.0
 address=/uc-56.ru/0.0.0.0
+address=/ufabet168168.329263.com/0.0.0.0
 address=/ugc.wegame.com.cn/0.0.0.0
 address=/ultimatelamborghiniexperience.com/0.0.0.0
 address=/ultimatepointsstore.com/0.0.0.0
@@ -781,7 +802,6 @@ address=/undantagforlag.se/0.0.0.0
 address=/unicorpbrunei.com/0.0.0.0
 address=/unilevercopabr.mbiz20.net/0.0.0.0
 address=/uniquehall.net/0.0.0.0
-address=/uniteddefence8forstdygorvermentsocialeyx.duckdns.org/0.0.0.0
 address=/unokaoeojoejfghr.ru/0.0.0.0
 address=/upd.m.dodo52.com/0.0.0.0
 address=/update.iwang8.com/0.0.0.0
@@ -802,7 +822,8 @@ address=/vfocus.net/0.0.0.0
 address=/videoswebcammsn.free.fr/0.0.0.0
 address=/vietducbio.com/0.0.0.0
 address=/vigilar.com.br/0.0.0.0
-address=/visagepk.com/0.0.0.0
+address=/vip.recommendedtoyoo.com/0.0.0.0
+address=/virustreatments.empeeevents.com/0.0.0.0
 address=/visualdata.ru/0.0.0.0
 address=/vitinhvnt.com/0.0.0.0
 address=/vitromed.ro/0.0.0.0
@@ -822,7 +843,6 @@ address=/webarte.com.br/0.0.0.0
 address=/webq.wikaba.com/0.0.0.0
 address=/webserverthai.com/0.0.0.0
 address=/websound.ru/0.0.0.0
-address=/webxposndytechnologyhardsoftware6buyers.duckdns.org/0.0.0.0
 address=/welcometothefuture.com/0.0.0.0
 address=/whgaty.com/0.0.0.0
 address=/wiebe-sanitaer.de/0.0.0.0
@@ -837,14 +857,13 @@ address=/writesofpassage.co.za/0.0.0.0
 address=/wsg.com.sg/0.0.0.0
 address=/wt8.siweidaoxiang.com/0.0.0.0
 address=/wt9.siweidaoxiang.com/0.0.0.0
+address=/wwealthllc.com/0.0.0.0
 address=/www2.recepty5.com/0.0.0.0
 address=/x2vn.com/0.0.0.0
 address=/xia.vzboot.com/0.0.0.0
 address=/xiaidown.com/0.0.0.0
-address=/xiaoma-10021647.file.myqcloud.com/0.0.0.0
 address=/xiegushi.cn/0.0.0.0
 address=/xirfad.com/0.0.0.0
-address=/xn--transfgran-mgbbb600b.ro/0.0.0.0
 address=/xsdtx.xyz/0.0.0.0
 address=/xsryx.xyz/0.0.0.0
 address=/xtremeforumz.com/0.0.0.0
@@ -852,6 +871,8 @@ address=/xuhss.com/0.0.0.0
 address=/xxbdr.xyz/0.0.0.0
 address=/xxwl.kuaiyunds.com/0.0.0.0
 address=/xxxze.co.nu/0.0.0.0
+address=/y-sani.com/0.0.0.0
+address=/yc5.timeisletitgo.ru/0.0.0.0
 address=/yeez.net/0.0.0.0
 address=/yesky.51down.org.cn/0.0.0.0
 address=/yesky.xzstatic.com/0.0.0.0
@@ -867,7 +888,6 @@ address=/zd4b.lonlyfafner.ru/0.0.0.0
 address=/zdy.17110.com/0.0.0.0
 address=/zenkashow.com/0.0.0.0
 address=/zentealounge.com.au/0.0.0.0
-address=/zethla.com/0.0.0.0
 address=/zeytinyagisabun.com/0.0.0.0
 address=/zhetysu360.kz/0.0.0.0
 address=/zhzy999.net/0.0.0.0
@@ -876,6 +896,8 @@ address=/zmmore.com/0.0.0.0
 address=/zoetermeerov.nl/0.0.0.0
 address=/zoeydeutchweb.com/0.0.0.0
 address=/zonefound.com.cn/0.0.0.0
+address=/zskyjov.cz/0.0.0.0
 address=/ztqsc.com.cn/0.0.0.0
 address=/zumodelima.com/0.0.0.0
 address=/zxcet.xyz/0.0.0.0
+address=/zzv.seeanu.ru/0.0.0.0
diff --git a/urlhaus-filter-dnsmasq.conf b/urlhaus-filter-dnsmasq.conf
index fa834519..bc17b2a7 100644
--- a/urlhaus-filter-dnsmasq.conf
+++ b/urlhaus-filter-dnsmasq.conf
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains dnsmasq Blocklist
-# Updated: Wed, 29 Apr 2020 12:09:39 UTC
+# Updated: Thu, 30 Apr 2020 00:09:24 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -97,6 +97,7 @@ address=/1000lostchildren.com/0.0.0.0
 address=/1001-territoires.fr/0.0.0.0
 address=/1001newsng.com/0.0.0.0
 address=/1001tur-tver.ru/0.0.0.0
+address=/10022020newfolder1002002231-service1002.space/0.0.0.0
 address=/100alternance.fr/0.0.0.0
 address=/100kala.ir/0.0.0.0
 address=/100percentforkids.org/0.0.0.0
@@ -300,6 +301,7 @@ address=/1in10jamaica.com/0.0.0.0
 address=/1jpg1host.net16.net/0.0.0.0
 address=/1jxmt.com/0.0.0.0
 address=/1kvk.com/0.0.0.0
+address=/1l04.timeisletitgo.ru/0.0.0.0
 address=/1liveradar.de/0.0.0.0
 address=/1lo.lukow.pl/0.0.0.0
 address=/1localexpert.com/0.0.0.0
@@ -620,6 +622,7 @@ address=/2vidyo.xyz/0.0.0.0
 address=/2wheelrider.com/0.0.0.0
 address=/2winresidency.com/0.0.0.0
 address=/2x2print.com/0.0.0.0
+address=/2xmy.timeisletitgo.ru/0.0.0.0
 address=/2yb5.andichust.ru/0.0.0.0
 address=/2yf32q.ch.files.1drv.com/0.0.0.0
 address=/2yourwealth.com.au/0.0.0.0
@@ -778,6 +781,7 @@ address=/3pabook.com/0.0.0.0
 address=/3ppuubb.com/0.0.0.0
 address=/3prokladkaeu.com/0.0.0.0
 address=/3pubeu.com/0.0.0.0
+address=/3q9h.timeisletitgo.ru/0.0.0.0
 address=/3rdperson.ml/0.0.0.0
 address=/3rdsectorsupportafrica.org/0.0.0.0
 address=/3rytghjhkss.cf/0.0.0.0
@@ -800,6 +804,7 @@ address=/3uqp.com/0.0.0.0
 address=/3uso2927wiwofeppwi29.com/0.0.0.0
 address=/3v5.net/0.0.0.0
 address=/3v6bz7g2bncvrinwmaawz2t4.file.truckbennels.com/0.0.0.0
+address=/3vc6.seeanu.ru/0.0.0.0
 address=/3vdataguard.com/0.0.0.0
 address=/3vventures.com/0.0.0.0
 address=/3wereareyou.icu/0.0.0.0
@@ -1356,6 +1361,8 @@ address=/FlorissantFire.com/0.0.0.0
 address=/ForRealTraffic.com/0.0.0.0
 address=/Heavensconcept.ng/0.0.0.0
 address=/Mozilla.theworkpc.com/0.0.0.0
+address=/Muanha.xyz/0.0.0.0
+address=/NCERTSOLUTIONACADEMY.COM/0.0.0.0
 address=/NeedCareers.com/0.0.0.0
 address=/OpalAlert.com/0.0.0.0
 address=/RENTITOUT.CO/0.0.0.0
@@ -1406,6 +1413,7 @@ address=/a.pomf.su/0.0.0.0
 address=/a.pomfe.co/0.0.0.0
 address=/a.rokket.space/0.0.0.0
 address=/a.safe.moe/0.0.0.0
+address=/a.seeanu.ru/0.0.0.0
 address=/a.teamworx.ph/0.0.0.0
 address=/a.turnuvam.org/0.0.0.0
 address=/a.uchi.moe/0.0.0.0
@@ -2227,6 +2235,7 @@ address=/addpics.site/0.0.0.0
 address=/addtomap.ru/0.0.0.0
 address=/adducity.ga/0.0.0.0
 address=/addvitashop.com/0.0.0.0
+address=/ade.topepics.com/0.0.0.0
 address=/adebeo.co.in/0.0.0.0
 address=/adecityevents.com/0.0.0.0
 address=/aded.co.in/0.0.0.0
@@ -2514,6 +2523,7 @@ address=/aeletselschade.nl/0.0.0.0
 address=/aelinks.com/0.0.0.0
 address=/aellly.000webhostapp.com/0.0.0.0
 address=/aelmas.5gbfree.com/0.0.0.0
+address=/aelogica.com/0.0.0.0
 address=/aemgrup.com.tr/0.0.0.0
 address=/aemo-mecanique-usinage.fr/0.0.0.0
 address=/aengineeringltd.com/0.0.0.0
@@ -3550,6 +3560,7 @@ address=/alexandre-muhl.fr/0.0.0.0
 address=/alexandrearchitecte.fr/0.0.0.0
 address=/alexandrearealty.com/0.0.0.0
 address=/alexandrecabello.com.br/0.0.0.0
+address=/alexandredekerchove.com/0.0.0.0
 address=/alexandrepaiva.com/0.0.0.0
 address=/alexandrerivelli.com/0.0.0.0
 address=/alexandria.run/0.0.0.0
@@ -5748,6 +5759,7 @@ address=/ariacommunications.in/0.0.0.0
 address=/ariadna.org.ua/0.0.0.0
 address=/ariafm.gr/0.0.0.0
 address=/arianasdelinewdorpplaza.com/0.0.0.0
+address=/arianegerkens.com/0.0.0.0
 address=/arianrayaneh.com/0.0.0.0
 address=/arianshopping.com/0.0.0.0
 address=/ariasms.ir/0.0.0.0
@@ -8216,6 +8228,7 @@ address=/batch-photo-editor.com/0.0.0.0
 address=/batchenangmuasieuben.com/0.0.0.0
 address=/batdongsan3b.com/0.0.0.0
 address=/batdongsanbamien24h.com/0.0.0.0
+address=/batdongsanbentre.com.vn/0.0.0.0
 address=/batdongsanhadong.info/0.0.0.0
 address=/batdongsanhathanh.net/0.0.0.0
 address=/batdongsanhuyphat68.com/0.0.0.0
@@ -9126,6 +9139,7 @@ address=/betokont.com.tr/0.0.0.0
 address=/beton-dubna.com/0.0.0.0
 address=/betonbrother.com/0.0.0.0
 address=/betonkeritesgyar.hu/0.0.0.0
+address=/betopceo.com/0.0.0.0
 address=/betprediksi.com/0.0.0.0
 address=/betrachtungssicht.de/0.0.0.0
 address=/betrogroup.com/0.0.0.0
@@ -10419,6 +10433,7 @@ address=/blueboxsourcing.com/0.0.0.0
 address=/blueboxxinterior.com/0.0.0.0
 address=/bluebunni.com/0.0.0.0
 address=/blueclutch.com/0.0.0.0
+address=/bluecollarfinancial.net/0.0.0.0
 address=/bluecrayonconsulting.com/0.0.0.0
 address=/bluecrestpress.com/0.0.0.0
 address=/bluecrystalband.com/0.0.0.0
@@ -10659,6 +10674,7 @@ address=/boldog.hu/0.0.0.0
 address=/boldreflectionsmn.com/0.0.0.0
 address=/bolegreenhotel.com/0.0.0.0
 address=/bolehprediksi.com/0.0.0.0
+address=/bolescy.com/0.0.0.0
 address=/bolesni.net/0.0.0.0
 address=/bolhomes.stringbind.info/0.0.0.0
 address=/bolidar.dnset.com/0.0.0.0
@@ -11277,6 +11293,7 @@ address=/bristter.com/0.0.0.0
 address=/britan.mx/0.0.0.0
 address=/britanniasuperior.uk/0.0.0.0
 address=/briteindonesia.com/0.0.0.0
+address=/britica.vn/0.0.0.0
 address=/british-rainbow.com/0.0.0.0
 address=/britishvoices.co.uk/0.0.0.0
 address=/brittanishantel.com/0.0.0.0
@@ -12379,6 +12396,7 @@ address=/capacitacioncomercial.cl/0.0.0.0
 address=/capamh.org/0.0.0.0
 address=/capanoandassociates.com/0.0.0.0
 address=/capasso.de/0.0.0.0
+address=/capath.vn/0.0.0.0
 address=/capaxinfiniti.ml/0.0.0.0
 address=/capbangkok.com/0.0.0.0
 address=/capebethel.org/0.0.0.0
@@ -13331,11 +13349,13 @@ address=/ceramicasaosebastiao.com.br/0.0.0.0
 address=/cercolorlaghi.com/0.0.0.0
 address=/cerebro-coaching.fr/0.0.0.0
 address=/cerenkent.com/0.0.0.0
+address=/cerisiers.be/0.0.0.0
 address=/ceritaislami.000webhostapp.com/0.0.0.0
 address=/cermiamakmur.com/0.0.0.0
 address=/ceronamtinclube.icu/0.0.0.0
 address=/cerotex.webprojemiz.com/0.0.0.0
 address=/cerovica.com/0.0.0.0
+address=/cerradocredito.com.br/0.0.0.0
 address=/cerrahibeyinpedi.com/0.0.0.0
 address=/cerrajeria-sabbath.holy-animero.com/0.0.0.0
 address=/cerrajeriajimenez.cl/0.0.0.0
@@ -13670,6 +13690,7 @@ address=/cheappigeontraps.com/0.0.0.0
 address=/cheapraccoontraps.com/0.0.0.0
 address=/cheapseoprovider.com/0.0.0.0
 address=/cheapsilkscreenprinting.com/0.0.0.0
+address=/cheaptours.in.ua/0.0.0.0
 address=/cheaptrainticket.cogbiz-infotech.com/0.0.0.0
 address=/cheaptravel-spb.ru/0.0.0.0
 address=/cheapwebvn.net/0.0.0.0
@@ -13746,6 +13767,7 @@ address=/chepi.net/0.0.0.0
 address=/cherdavis.com/0.0.0.0
 address=/chergo.es/0.0.0.0
 address=/cherinetiles.com/0.0.0.0
+address=/cheriyilbuilders.com/0.0.0.0
 address=/cherkassy.info/0.0.0.0
 address=/cheron.co.uk/0.0.0.0
 address=/cherrett.net/0.0.0.0
@@ -16392,6 +16414,7 @@ address=/cryptomega.ga/0.0.0.0
 address=/cryptomub.com/0.0.0.0
 address=/cryptonias.top/0.0.0.0
 address=/cryptoniaz.top/0.0.0.0
+address=/cryptoomarket.com/0.0.0.0
 address=/cryptorgasms.com/0.0.0.0
 address=/cryptoseed.co.za/0.0.0.0
 address=/cryptostruct.bunker.zone/0.0.0.0
@@ -17236,6 +17259,7 @@ address=/dardash.info/0.0.0.0
 address=/dareldjazair.com/0.0.0.0
 address=/darelyateem.org/0.0.0.0
 address=/darianinc.com/0.0.0.0
+address=/daricci.de/0.0.0.0
 address=/darice.in/0.0.0.0
 address=/dario-mraz.from.hr/0.0.0.0
 address=/dariojucker.edelegation.com/0.0.0.0
@@ -18130,6 +18154,7 @@ address=/demo1.parsnet.space/0.0.0.0
 address=/demo10.onbm.ir/0.0.0.0
 address=/demo12.maybay.net/0.0.0.0
 address=/demo13.abc-it.net.au/0.0.0.0
+address=/demo13.dsdemosite.com/0.0.0.0
 address=/demo15.versamall.com/0.0.0.0
 address=/demo15.webindia.com/0.0.0.0
 address=/demo19.keltron.org/0.0.0.0
@@ -18256,6 +18281,7 @@ address=/dentsheaven.co.uk/0.0.0.0
 address=/dentsov.ru/0.0.0.0
 address=/denttrade.com.kg/0.0.0.0
 address=/denuchoco.com/0.0.0.0
+address=/denunciesoftwareilegal.org.br/0.0.0.0
 address=/denverfs.org/0.0.0.0
 address=/denverktrade.xyz/0.0.0.0
 address=/deny.radio-denisa.com/0.0.0.0
@@ -18525,6 +18551,7 @@ address=/dev.454mediahouse.com/0.0.0.0
 address=/dev.abitotv.it/0.0.0.0
 address=/dev.adrianapatsalou.com/0.0.0.0
 address=/dev.ameekids.com/0.0.0.0
+address=/dev.apshaps.se/0.0.0.0
 address=/dev.artoonsolutions.com/0.0.0.0
 address=/dev.ateamymm.ca/0.0.0.0
 address=/dev.bassetlawscouts.org.uk/0.0.0.0
@@ -19106,6 +19133,7 @@ address=/digistudy.vn/0.0.0.0
 address=/digital-cloud.healthycheapfast.com/0.0.0.0
 address=/digital-design.com.cn/0.0.0.0
 address=/digital-life.pro/0.0.0.0
+address=/digital-marketing-institute-delhi.empeeevents.com/0.0.0.0
 address=/digital-vision.nl/0.0.0.0
 address=/digital.audiobookjunkie.com/0.0.0.0
 address=/digital.etnasoft.eu/0.0.0.0
@@ -20561,6 +20589,7 @@ address=/drinkdirect.co.uk/0.0.0.0
 address=/drinkfoodapp.com/0.0.0.0
 address=/drinkgusto.sg/0.0.0.0
 address=/drinklass.com.br/0.0.0.0
+address=/drinkopolykopen.nl/0.0.0.0
 address=/drischler.de/0.0.0.0
 address=/drive.carlsongracieanaheim.com/0.0.0.0
 address=/drive.deescreationstore.com/0.0.0.0
@@ -20932,6 +20961,7 @@ address=/dunysaki.ru/0.0.0.0
 address=/duoliprudential.com.watchdogdns.duckdns.org/0.0.0.0
 address=/duomasters.com/0.0.0.0
 address=/duongcaoky.com/0.0.0.0
+address=/duongfpt.ga/0.0.0.0
 address=/duongmanhtuan.com/0.0.0.0
 address=/duoscript.com/0.0.0.0
 address=/duotechgroup.com/0.0.0.0
@@ -21112,6 +21142,7 @@ address=/dyvrullters.in/0.0.0.0
 address=/dywanypers.pl/0.0.0.0
 address=/dyyhfk120.com/0.0.0.0
 address=/dzain.com.br/0.0.0.0
+address=/dzapasigroup.usapglobal.org/0.0.0.0
 address=/dzbo.dp.ua/0.0.0.0
 address=/dzbooster.com/0.0.0.0
 address=/dzcorlandyu.band/0.0.0.0
@@ -26069,6 +26100,7 @@ address=/franchisorsuccess.com.au/0.0.0.0
 address=/francini.dk/0.0.0.0
 address=/francis-china.com/0.0.0.0
 address=/franciscossc.pbworks.com/0.0.0.0
+address=/francois-champion.com/0.0.0.0
 address=/francois-rommens.fr/0.0.0.0
 address=/francoise-vauzeilles.com/0.0.0.0
 address=/francoisebon.fr/0.0.0.0
@@ -29458,6 +29490,7 @@ address=/h.eurotrading.com.pl/0.0.0.0
 address=/h.j990981.ru/0.0.0.0
 address=/h.top4top.io/0.0.0.0
 address=/h.valerana44.ru/0.0.0.0
+address=/h1.iwakalong.ru/0.0.0.0
 address=/h112321.s08.test-hf.su/0.0.0.0
 address=/h13.doshimotai.ru/0.0.0.0
 address=/h135460.s08.test-hf.su/0.0.0.0
@@ -34848,6 +34881,7 @@ address=/jasclair.com/0.0.0.0
 address=/jasclean.sk/0.0.0.0
 address=/jascopump.com/0.0.0.0
 address=/jaseminedenise.com/0.0.0.0
+address=/jaservicioscontables.casteviajes.com/0.0.0.0
 address=/jasesoi.com/0.0.0.0
 address=/jaset.com.mx/0.0.0.0
 address=/jashneadab.org/0.0.0.0
@@ -35145,6 +35179,7 @@ address=/jessie-equitation.fr/0.0.0.0
 address=/jessijonesstar.com/0.0.0.0
 address=/jessikarkan.com/0.0.0.0
 address=/jesswalsh.co.uk/0.0.0.0
+address=/jessymart.flexyhub.com/0.0.0.0
 address=/jester.com.au/0.0.0.0
 address=/jet2.didev.id/0.0.0.0
 address=/jetallied.com/0.0.0.0
@@ -36373,6 +36408,7 @@ address=/kalyoncularyapi.com/0.0.0.0
 address=/kam.vladistart.art/0.0.0.0
 address=/kamadecor.ru/0.0.0.0
 address=/kamagra-wolf.com/0.0.0.0
+address=/kamagra.in.rs/0.0.0.0
 address=/kamagra4uk.com/0.0.0.0
 address=/kamajankowska.com/0.0.0.0
 address=/kamakran.ru/0.0.0.0
@@ -37928,6 +37964,7 @@ address=/koralli.if.ua/0.0.0.0
 address=/koranpeduli.co.id/0.0.0.0
 address=/korastation.com/0.0.0.0
 address=/koratmobilya.xyz/0.0.0.0
+address=/koravit.zaeteaw.net/0.0.0.0
 address=/korayche2002.free.fr/0.0.0.0
 address=/korbi-studio.com/0.0.0.0
 address=/korbiel.info/0.0.0.0
@@ -45324,6 +45361,7 @@ address=/monoclepetes.com/0.0.0.0
 address=/monodoze.com/0.0.0.0
 address=/monoit.eu/0.0.0.0
 address=/monomind.co.kr/0.0.0.0
+address=/mononet.lv/0.0.0.0
 address=/monopeets.com/0.0.0.0
 address=/monrottweiler.fr/0.0.0.0
 address=/monset.it/0.0.0.0
@@ -45470,6 +45508,7 @@ address=/morozan.it/0.0.0.0
 address=/morrell-stinson.com/0.0.0.0
 address=/morricone.kayakodev.com/0.0.0.0
 address=/morrissan.com/0.0.0.0
+address=/morruko.antesos.com/0.0.0.0
 address=/morsengthaithai.com/0.0.0.0
 address=/morshinnet.ru/0.0.0.0
 address=/mortalityreview.net/0.0.0.0
@@ -46417,6 +46456,7 @@ address=/mylistbuildingtraffic.com/0.0.0.0
 address=/myloanbaazar.com/0.0.0.0
 address=/mylocal.dk/0.0.0.0
 address=/mylocal.no/0.0.0.0
+address=/mylocalfoodie.com.au/0.0.0.0
 address=/myloglogistica.com.br/0.0.0.0
 address=/mylokipanel.cf/0.0.0.0
 address=/mylokipanel.ga/0.0.0.0
@@ -49823,6 +49863,7 @@ address=/oraclewednesday.org/0.0.0.0
 address=/oraio.com.py/0.0.0.0
 address=/oralcamp.com.br/0.0.0.0
 address=/oralflora.jp/0.0.0.0
+address=/oralloy.com/0.0.0.0
 address=/oramos.com.ar/0.0.0.0
 address=/oranbet.ml/0.0.0.0
 address=/orange-county-loans.com/0.0.0.0
@@ -50023,6 +50064,7 @@ address=/osim-heshbon.co.il/0.0.0.0
 address=/osirisre.online/0.0.0.0
 address=/osiyo555.com/0.0.0.0
 address=/osk-hornet.pl/0.0.0.0
+address=/oskarnews.gazashare.com/0.0.0.0
 address=/osliving.com/0.0.0.0
 address=/osmanager.com.br/0.0.0.0
 address=/osmanisports.com/0.0.0.0
@@ -50289,6 +50331,7 @@ address=/oyunw.com/0.0.0.0
 address=/oz-dn.org/0.0.0.0
 address=/oz-link.com/0.0.0.0
 address=/oz-tekpersonelkiyafetleri.com/0.0.0.0
+address=/oz.timeisletitgo.ru/0.0.0.0
 address=/oz4eai75936b8d.com/0.0.0.0
 address=/oz7p.dk/0.0.0.0
 address=/oz9lla.dk/0.0.0.0
@@ -53158,6 +53201,7 @@ address=/privacydesignstudio.com/0.0.0.0
 address=/privacymails.space/0.0.0.0
 address=/privacytools.life/0.0.0.0
 address=/privacytools.site/0.0.0.0
+address=/privacytoolsstore.website/0.0.0.0
 address=/privat-cyprian.sk/0.0.0.0
 address=/private-accounting.com/0.0.0.0
 address=/private-dining.com.ua/0.0.0.0
@@ -53450,6 +53494,7 @@ address=/proluxshop.ir/0.0.0.0
 address=/prom-alp.kz/0.0.0.0
 address=/prom-engineering.com/0.0.0.0
 address=/promacsolutions.mx/0.0.0.0
+address=/promassager.ga/0.0.0.0
 address=/promdon.dn.ua/0.0.0.0
 address=/promente.it/0.0.0.0
 address=/promep.utrng.edu.mx/0.0.0.0
@@ -57539,6 +57584,7 @@ address=/sageth.net/0.0.0.0
 address=/sagiri.org/0.0.0.0
 address=/saglikbakanligi20gbinternet.com/0.0.0.0
 address=/saglikbakanligindanhediye20gb.com/0.0.0.0
+address=/saglikgoalapp.site/0.0.0.0
 address=/saglikliapp.live/0.0.0.0
 address=/sagliklibedenim.com/0.0.0.0
 address=/sagrathi.com/0.0.0.0
@@ -58757,6 +58803,7 @@ address=/sedotwcdadilancar.com/0.0.0.0
 address=/sedotwcsejakarta.com/0.0.0.0
 address=/seductivestrands.com/0.0.0.0
 address=/see.prblm.li/0.0.0.0
+address=/seeanu.ru/0.0.0.0
 address=/seecareer.com/0.0.0.0
 address=/seednext.work/0.0.0.0
 address=/seedopk.org/0.0.0.0
@@ -60233,6 +60280,7 @@ address=/silverlineboatsales.com/0.0.0.0
 address=/silverliningcoaching.com.au/0.0.0.0
 address=/silverlinktechnologies.com/0.0.0.0
 address=/silveroks.com.ua/0.0.0.0
+address=/silverstargalaxy.com.silverstartv.website/0.0.0.0
 address=/silverstoltsen.com/0.0.0.0
 address=/silverswiss.com/0.0.0.0
 address=/silvesterinmailand.com/0.0.0.0
@@ -60282,6 +60330,7 @@ address=/simonsolutions.us/0.0.0.0
 address=/simorghealborz.com/0.0.0.0
 address=/simp-consulting.pl/0.0.0.0
 address=/simpelway.dk.linux154.unoeuro-server.com/0.0.0.0
+address=/simpl.pw/0.0.0.0
 address=/simplatecplc.com/0.0.0.0
 address=/simple-it.org/0.0.0.0
 address=/simple-it.si/0.0.0.0
@@ -61161,6 +61210,7 @@ address=/so-lonely.fr/0.0.0.0
 address=/so-nettel.ml/0.0.0.0
 address=/so.nevisconsultants.com/0.0.0.0
 address=/so370.com/0.0.0.0
+address=/so4.seeanu.ru/0.0.0.0
 address=/so766.sohost.pl/0.0.0.0
 address=/soa.com.pk/0.0.0.0
 address=/soafinance.com/0.0.0.0
@@ -62394,6 +62444,7 @@ address=/staging.overlogo.com/0.0.0.0
 address=/staging.pashminadevelopers.com/0.0.0.0
 address=/staging.phandeeyar.org/0.0.0.0
 address=/staging.playhualien.com/0.0.0.0
+address=/staging.popclusive.asia/0.0.0.0
 address=/staging.presthemes.com/0.0.0.0
 address=/staging.securenetworks.pk/0.0.0.0
 address=/staging.semperkitchen.com/0.0.0.0
@@ -62720,6 +62771,7 @@ address=/steinerurology.com.au/0.0.0.0
 address=/steinoe.dk/0.0.0.0
 address=/steinplatten-tirol.at/0.0.0.0
 address=/stekols.ru/0.0.0.0
+address=/stelamedien.de/0.0.0.0
 address=/stelastraveldiary.com/0.0.0.0
 address=/steldesign.com/0.0.0.0
 address=/stella.pk/0.0.0.0
@@ -63512,6 +63564,7 @@ address=/sunandsand.minnesotacowboy.com/0.0.0.0
 address=/sunaner.com/0.0.0.0
 address=/sunart-5.com/0.0.0.0
 address=/sunblessvgp.com/0.0.0.0
+address=/sunboom-gift.com/0.0.0.0
 address=/sunchipaint.com.vn/0.0.0.0
 address=/suncity116.com/0.0.0.0
 address=/suncity727.com/0.0.0.0
@@ -64187,6 +64240,7 @@ address=/t2.webtilia.com/0.0.0.0
 address=/t2lisboa.lisbonlab.com/0.0.0.0
 address=/t2tdesigns.com/0.0.0.0
 address=/t3-thanglongcapital.top/0.0.0.0
+address=/t37b.iwakalong.ru/0.0.0.0
 address=/t3dgraphics.com/0.0.0.0
 address=/t5forums.com/0.0.0.0
 address=/t6226.com/0.0.0.0
@@ -64722,6 +64776,7 @@ address=/taxpos.com/0.0.0.0
 address=/taxready.in/0.0.0.0
 address=/taxtell.ru/0.0.0.0
 address=/taxtionfree.co.in/0.0.0.0
+address=/taxukrebates.com/0.0.0.0
 address=/tay.batt2u.com/0.0.0.0
 address=/taybabuilders.com/0.0.0.0
 address=/tayebsojib.com/0.0.0.0
@@ -70543,6 +70598,7 @@ address=/vip-rocket.net/0.0.0.0
 address=/vip-watch.store/0.0.0.0
 address=/vip.lijinxi.com/0.0.0.0
 address=/vip.maohuagong.com/0.0.0.0
+address=/vip.recommendedtoyoo.com/0.0.0.0
 address=/vip.zbfcxx.cn/0.0.0.0
 address=/vip163.cf/0.0.0.0
 address=/vip163.ga/0.0.0.0
@@ -70614,6 +70670,7 @@ address=/virtualupload.org/0.0.0.0
 address=/virtuoushairline.org/0.0.0.0
 address=/virtuspartners.cl/0.0.0.0
 address=/viruscheckmake.gq/0.0.0.0
+address=/virustreatments.empeeevents.com/0.0.0.0
 address=/visa.indonesia.nl/0.0.0.0
 address=/visa.org.ua/0.0.0.0
 address=/visaatlantis.com/0.0.0.0
@@ -74031,6 +74088,7 @@ address=/ybtvmt.info/0.0.0.0
 address=/ybuat49ounh.kaligodfrey.casa/0.0.0.0
 address=/ybuzzfmdy.cf/0.0.0.0
 address=/yc.satnam.ru/0.0.0.0
+address=/yc5.timeisletitgo.ru/0.0.0.0
 address=/ycg-tw.com/0.0.0.0
 address=/ych.jp/0.0.0.0
 address=/ychynt.com/0.0.0.0
@@ -75228,5 +75286,6 @@ address=/zzii.net/0.0.0.0
 address=/zzjph.com/0.0.0.0
 address=/zzlong.xyz/0.0.0.0
 address=/zzpit.dk/0.0.0.0
+address=/zzv.seeanu.ru/0.0.0.0
 address=/zzyin.cn/0.0.0.0
 address=/zzz78.tk/0.0.0.0
diff --git a/urlhaus-filter-domains-online.txt b/urlhaus-filter-domains-online.txt
index f0c6079f..96bd4ecd 100644
--- a/urlhaus-filter-domains-online.txt
+++ b/urlhaus-filter-domains-online.txt
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Online Malicious Domains Blocklist
-# Updated: Wed, 29 Apr 2020 12:09:39 UTC
+# Updated: Thu, 30 Apr 2020 00:09:24 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -14,11 +14,13 @@
 1.246.222.134
 1.246.222.14
 1.246.222.153
+1.246.222.165
 1.246.222.174
 1.246.222.20
 1.246.222.228
 1.246.222.232
 1.246.222.234
+1.246.222.237
 1.246.222.245
 1.246.222.249
 1.246.222.36
@@ -26,7 +28,6 @@
 1.246.222.4
 1.246.222.41
 1.246.222.43
-1.246.222.44
 1.246.222.49
 1.246.222.62
 1.246.222.63
@@ -43,7 +44,6 @@
 1.246.223.146
 1.246.223.15
 1.246.223.18
-1.246.223.223
 1.246.223.3
 1.246.223.30
 1.246.223.32
@@ -83,8 +83,8 @@
 103.237.173.218
 103.240.249.121
 103.245.199.222
+103.247.217.147
 103.254.205.135
-103.255.235.219
 103.31.47.214
 103.49.56.38
 103.51.249.64
@@ -95,6 +95,9 @@
 103.92.25.95
 104.148.124.120
 104.152.156.22
+104.168.169.137
+104.168.198.194
+104.175.99.243
 104.192.108.19
 104.33.52.85
 106.104.115.213
@@ -111,29 +114,27 @@
 106.248.202.245
 107.158.154.88
 107.158.154.99
-108.174.197.76
 108.190.31.236
 108.214.240.100
 108.220.3.201
 108.237.60.93
 108.77.246.129
-108.95.162.21
 109.104.197.153
-109.107.249.137
 109.124.90.229
 109.167.200.82
 109.167.226.84
 109.185.173.21
 109.185.229.159
+109.185.26.178
 109.233.196.232
-109.248.58.238
 109.86.85.253
 109.88.185.119
 109.96.57.246
+110.155.51.173
 110.179.30.218
-110.18.194.234
 110.182.107.42
 110.182.213.91
+110.34.28.113
 110.34.3.142
 110.35.239.25
 110.42.10.141
@@ -145,6 +146,7 @@
 111.185.126.63
 111.185.192.249
 111.185.227.170
+111.185.231.198
 111.185.235.13
 111.185.48.248
 111.38.25.106
@@ -162,24 +164,14 @@
 111.38.30.47
 111.38.9.115
 111.40.79.79
-111.42.102.131
-111.42.102.136
-111.42.102.89
-111.42.103.28
-111.42.103.37
 111.42.103.45
-111.42.103.93
+111.42.103.55
 111.42.67.73
-111.43.223.108
-111.43.223.114
-111.43.223.151
-111.43.223.182
-111.43.223.201
-111.43.223.79
-111.43.223.86
+111.43.223.17
 111.61.52.53
 111.90.187.162
 111.93.169.90
+112.122.61.250
 112.123.109.200
 112.123.61.18
 112.156.36.178
@@ -189,8 +181,8 @@
 112.167.14.237
 112.167.148.70
 112.167.218.221
-112.170.165.71
 112.170.23.21
+112.184.231.90
 112.184.88.60
 112.185.140.99
 112.185.94.183
@@ -208,9 +200,9 @@
 112.78.45.158
 113.11.95.254
 113.218.234.32
+113.221.145.204
 113.221.50.64
 113.240.186.132
-113.245.189.4
 113.254.169.251
 113.75.14.148
 114.168.158.117
@@ -226,37 +218,39 @@
 114.234.104.158
 114.234.150.187
 114.234.69.205
-114.235.202.162
+114.235.202.95
 114.235.246.18
 114.236.152.230
 114.239.112.118
 114.239.128.231
 114.239.242.70
 114.239.25.119
+114.239.37.159
 114.239.46.132
 114.239.79.212
 114.79.172.42
 115.207.177.5
 115.209.252.115
-115.216.214.215
+115.213.176.80
+115.216.210.105
 115.48.151.80
 115.49.46.254
 115.49.74.215
-115.50.229.168
+115.49.76.131
 115.51.125.66
-115.52.126.127
+115.53.63.184
 115.54.175.125
 115.55.9.181
 115.58.100.249
 115.58.98.171
+115.59.118.51
 115.59.15.145
 115.59.77.58
+115.61.2.125
+115.63.60.199
 115.77.186.182
 115.85.65.211
-116.114.95.108
-116.114.95.123
-116.114.95.232
-116.114.95.234
+116.114.95.50
 116.177.178.206
 116.206.164.46
 117.123.171.105
@@ -266,8 +260,10 @@
 117.63.51.128
 117.86.24.209
 117.87.44.106
+117.90.128.14
 117.90.89.95
 117.93.176.207
+117.93.216.98
 117.95.173.64
 117.95.194.127
 117.95.226.223
@@ -285,10 +281,8 @@
 118.46.7.246
 118.99.179.164
 118.99.239.217
-119.125.131.57
 119.194.91.157
 119.2.48.159
-119.203.9.192
 119.206.2.248
 119.212.101.8
 119.77.165.204
@@ -311,14 +305,14 @@
 120.69.89.50
 121.122.87.76
 121.135.146.40
-121.136.137.7
 121.140.141.73
-121.148.122.219
 121.148.72.160
 121.150.77.164
 121.154.107.249
 121.155.233.13
 121.155.233.159
+121.159.208.28
+121.162.174.59
 121.163.48.30
 121.176.31.174
 121.177.37.127
@@ -341,14 +335,13 @@
 121.233.24.190
 121.233.68.89
 121.86.113.254
-122.227.125.161
 122.234.175.245
+122.241.24.146
 123.0.198.186
 123.0.209.88
 123.10.148.8
 123.10.155.32
-123.10.51.103
-123.11.73.248
+123.10.229.210
 123.122.232.190
 123.13.5.90
 123.148.140.145
@@ -356,9 +349,9 @@
 123.194.60.238
 123.241.112.94
 123.51.152.54
-124.119.138.199
-124.230.99.203
+123.96.134.180
 124.67.89.70
+125.121.152.251
 125.130.59.163
 125.136.182.124
 125.136.238.170
@@ -380,6 +373,8 @@
 139.99.113.2
 13pope.com
 14.102.71.10
+14.113.229.49
+14.141.175.107
 14.161.4.53
 14.33.86.236
 14.34.165.243
@@ -391,13 +386,11 @@
 14.48.245.16
 14.48.41.82
 14.49.212.151
-14.50.235.236
 14.54.95.158
 14.55.136.146
 14.55.144.142
 141.0.178.134
 141.226.28.195
-141.226.94.115
 142.11.194.209
 142.11.195.135
 142.11.206.45
@@ -405,8 +398,6 @@
 144.136.155.166
 145.255.26.115
 146.71.79.230
-147.75.67.253
-150.co.il
 151.232.56.134
 151.236.38.234
 152.249.225.24
@@ -418,13 +409,12 @@
 162.212.112.240
 162.212.113.149
 162.212.113.70
-162.212.114.137
-162.212.114.50
 162.212.115.102
 162.250.126.186
 163.13.182.105
 163.22.51.1
 163.47.145.202
+165.227.220.189
 165.227.220.53
 165.73.60.72
 167.114.85.125
@@ -448,17 +438,15 @@
 174.2.176.60
 174.48.14.129
 175.10.145.138
-175.10.73.252
 175.11.193.122
 175.200.153.48
 175.202.162.120
+175.208.203.123
 175.210.50.4
 175.211.16.150
 175.212.31.241
-175.212.52.9
 175.213.134.89
 175.215.226.31
-175.4.192.21
 176.108.58.123
 176.113.161.101
 176.113.161.104
@@ -473,17 +461,20 @@
 176.113.161.133
 176.113.161.40
 176.113.161.41
+176.113.161.45
 176.113.161.47
 176.113.161.51
 176.113.161.52
+176.113.161.57
 176.113.161.65
+176.113.161.66
 176.113.161.67
 176.113.161.68
 176.113.161.71
-176.113.161.72
+176.113.161.76
 176.113.161.84
 176.113.161.86
-176.113.161.89
+176.113.161.87
 176.113.161.91
 176.113.161.92
 176.113.161.93
@@ -513,7 +504,6 @@
 178.134.248.74
 178.134.61.94
 178.136.195.90
-178.151.143.2
 178.165.122.141
 178.169.165.90
 178.19.183.14
@@ -521,14 +511,12 @@
 178.212.54.200
 178.214.73.181
 178.22.117.102
-178.233.234.188
 178.242.54.236
 178.34.183.30
 178.48.235.59
 179.108.246.34
 179.111.8.164
 179.127.180.9
-179.156.196.13
 179.60.84.7
 179.99.210.161
 180.104.183.200
@@ -543,12 +531,14 @@
 180.117.89.28
 180.117.91.251
 180.118.100.106
+180.120.12.85
 180.123.208.212
 180.123.29.68
 180.123.59.159
 180.124.126.199
 180.124.151.219
 180.124.174.33
+180.124.214.4
 180.124.6.47
 180.176.105.41
 180.176.110.243
@@ -583,22 +573,23 @@
 181.49.241.50
 182.113.226.230
 182.113.55.206
-182.116.107.161
-182.117.101.153
-182.119.102.175
+182.121.152.74
 182.124.218.35
+182.126.101.85
+182.126.213.171
 182.126.238.159
+182.127.201.42
 182.160.101.51
 182.160.125.229
 182.160.98.250
 182.171.202.23
 182.222.195.145
-182.222.195.192
 182.233.0.252
 183.100.109.156
 183.105.206.26
 183.106.201.118
-183.156.0.180
+183.107.57.170
+183.130.71.167
 183.221.125.206
 183.4.28.24
 183.4.30.251
@@ -607,7 +598,6 @@
 185.12.78.161
 185.136.193.70
 185.138.123.179
-185.172.110.208
 185.172.110.216
 185.172.110.224
 185.172.110.232
@@ -615,6 +605,7 @@
 185.172.110.243
 185.172.110.250
 185.181.10.234
+185.212.129.54
 185.227.64.59
 185.244.39.123
 185.34.16.231
@@ -625,7 +616,6 @@
 185.94.33.22
 186.120.84.242
 186.122.73.201
-186.179.243.112
 186.188.241.98
 186.225.120.173
 186.227.145.138
@@ -634,7 +624,6 @@
 186.251.253.134
 186.34.4.40
 186.42.255.230
-186.73.188.132
 187.12.10.98
 187.136.250.27
 187.142.7.199
@@ -643,9 +632,11 @@
 187.33.71.68
 187.36.134.227
 187.44.167.14
+187.63.19.112
 187.72.59.113
 187.73.21.30
 187.76.62.90
+188.133.189.193
 188.138.200.32
 188.138.203.128
 188.142.181.9
@@ -656,7 +647,6 @@
 188.170.177.98
 188.237.212.202
 188.242.242.144
-188.243.5.75
 188.36.121.184
 188.83.202.25
 189.126.70.222
@@ -666,7 +656,6 @@
 190.0.42.106
 190.109.189.120
 190.109.189.204
-190.110.161.252
 190.119.207.58
 190.12.4.98
 190.12.99.194
@@ -684,6 +673,7 @@
 190.187.55.150
 190.196.248.3
 190.206.35.3
+190.211.128.197
 190.214.24.194
 190.4.187.143
 190.7.27.69
@@ -692,7 +682,6 @@
 190.95.76.212
 190.98.36.201
 190.99.117.10
-191.102.123.132
 191.103.252.116
 191.209.53.113
 191.223.54.151
@@ -702,8 +691,6 @@
 191.7.136.37
 191.8.80.207
 192.119.87.242
-192.154.227.193
-192.210.140.199
 192.210.236.38
 192.236.147.189
 192.236.147.67
@@ -712,7 +699,6 @@
 193.38.51.25
 193.95.254.50
 194.0.157.1
-194.169.88.56
 194.180.224.106
 194.180.224.113
 194.180.224.124
@@ -730,14 +716,17 @@
 196.218.53.68
 196.221.144.149
 197.155.66.202
+197.159.2.106
 197.254.106.78
 197.51.235.38
 198.24.75.52
 199.36.76.2
 199.83.200.194
+199.83.203.174
 199.83.203.85
 199.83.204.89
-199.83.206.58
+199.83.205.205
+1l04.timeisletitgo.ru
 2.180.33.118
 2.180.37.166
 2.185.150.180
@@ -754,19 +743,17 @@
 200.111.189.70
 200.180.159.138
 200.2.161.171
-200.207.64.90
 200.217.148.218
 200.222.50.26
+200.233.206.164
 200.30.132.50
 200.38.79.134
 200.6.167.42
 200.69.74.28
-200.85.168.202
 2000kumdo.com
 201.184.163.170
 201.184.241.123
 201.187.102.73
-201.202.55.118
 201.203.212.194
 201.203.27.37
 201.234.138.92
@@ -802,6 +789,7 @@
 203.80.171.149
 203.82.36.34
 203.83.174.227
+206.189.208.7
 208.113.130.13
 209.141.53.115
 209.45.49.177
@@ -812,13 +800,8 @@
 210.76.64.46
 211.106.11.193
 211.107.230.86
-211.137.225.120
-211.137.225.129
 211.137.225.146
-211.137.225.44
-211.137.225.56
-211.137.225.57
-211.137.225.76
+211.137.225.77
 211.179.143.199
 211.187.75.220
 211.192.64.222
@@ -827,12 +810,15 @@
 211.194.32.115
 211.195.27.69
 211.196.28.116
+211.197.212.57
+211.216.116.40
 211.223.166.51
 211.224.8.211
 211.225.152.102
 211.229.56.214
 211.46.69.192
 211.48.208.144
+211.57.175.216
 211.57.194.109
 211.57.89.183
 211.57.93.49
@@ -852,11 +838,9 @@
 213.202.255.4
 213.215.85.141
 213.241.10.110
-213.27.8.6
 213.57.78.231
 213.7.222.78
 216.15.112.251
-216.180.117.214
 216.183.54.169
 216.189.145.11
 216.36.12.98
@@ -867,7 +851,6 @@
 217.8.117.60
 217.8.117.76
 218.144.252.19
-218.154.126.150
 218.156.132.7
 218.156.26.85
 218.157.214.219
@@ -881,10 +864,11 @@
 218.35.55.121
 218.52.230.160
 218.72.196.220
-219.139.237.174
-219.155.159.138
+219.155.169.47
+219.155.173.125
 219.155.209.74
 219.68.1.148
+219.68.242.33
 219.68.245.63
 219.68.251.32
 219.70.63.196
@@ -897,10 +881,10 @@
 220.71.176.94
 220.82.140.17
 221.144.153.139
-221.144.53.126
 221.155.253.61
 221.155.30.60
 221.155.68.193
+221.158.124.81
 221.159.171.90
 221.160.177.130
 221.160.177.226
@@ -908,24 +892,22 @@
 221.167.18.122
 221.226.86.151
 222.105.26.35
-222.113.138.43
 222.116.70.13
 222.138.17.196
+222.138.181.140
 222.139.29.155
 222.140.199.55
 222.185.161.165
 222.185.199.202
 222.185.73.210
+222.187.159.223
 222.187.180.157
 222.187.191.224
 222.188.131.220
-222.188.222.71
-222.217.65.112
 222.242.158.161
 222.243.14.67
 222.74.186.134
 222.81.213.61
-223.154.40.213
 23.122.183.241
 23.228.143.58
 23.247.102.120
@@ -953,9 +935,9 @@
 27.206.66.103
 27.238.33.39
 27.41.175.86
-27.41.182.54
-27.41.222.65
+27.41.224.202
 27.76.91.206
+2xmy.timeisletitgo.ru
 3.zhzy999.net
 3.zhzy999.net3.zhzy999.net
 31.128.173.853.zhzy999.net
@@ -992,12 +974,13 @@
 35.141.217.189
 35.221.223.15
 36.105.62.139
-36.107.174.111
+36.108.228.213
 36.33.138.140
 36.34.150.235
 36.34.234.8
 36.35.160.146
 36.35.160.240
+36.66.105.159
 36.66.111.203
 36.66.133.125
 36.66.139.36
@@ -1006,6 +989,7 @@
 36.67.223.231
 36.67.42.193
 36.74.74.99
+36.89.133.67
 36.89.18.133
 36.91.89.187
 36.91.90.171
@@ -1021,18 +1005,20 @@
 37.34.228.1
 37.34.250.243
 37.49.226.162
-37.49.226.186
+37.49.226.209
 37.49.230.128
 37.54.14.36
 3mandatesmedia.com
+3q9h.timeisletitgo.ru
+3vc6.seeanu.ru
 402musicfest.com
 41.139.209.46
 41.165.130.43
 41.190.63.174
 41.190.70.238
 41.211.112.82
-41.219.185.171
 41.228.175.30
+41.32.132.218
 41.32.170.13
 41.39.182.198
 41.64.170.241
@@ -1040,15 +1026,14 @@
 41.79.234.90
 42.115.25.55
 42.115.86.142
-42.225.210.47
-42.225.217.216
-42.226.69.42
+42.227.186.34
+42.227.202.209
 42.228.192.219
-42.230.253.28
 42.234.108.186
-42.234.202.142
 42.234.247.85
-42.235.55.173
+42.234.86.212
+42.239.132.107
+42.239.168.235
 42.239.77.201
 42.61.99.155
 42.82.191.105
@@ -1061,11 +1046,8 @@
 45.133.9.21
 45.138.97.46
 45.139.236.14
-45.14.150.29
 45.14.151.249
 45.147.228.245
-45.148.122.113
-45.163.149.85
 45.221.78.166
 45.221.78.38
 45.229.22.195
@@ -1073,7 +1055,10 @@
 45.50.228.207
 45.63.61.189
 45.95.168.127
+45.95.168.251
+45.95.168.254
 45.95.168.97
+45.95.169.234
 46.100.251.72
 46.100.56.152
 46.107.48.22
@@ -1094,6 +1079,7 @@
 46.47.106.63
 46.6.1.167
 46.97.76.242
+47.14.99.185
 47.148.102.77
 47.187.120.184
 47.46.231.38
@@ -1117,19 +1103,17 @@
 49.68.213.49
 49.68.226.132
 49.68.235.19
+49.68.250.118
 49.68.54.141
-49.70.137.78
 49.70.234.20
-49.70.237.153
-49.81.252.24
 49.82.14.191
 49.82.249.71
 49.82.252.63
-49.82.255.155
 49.84.125.254
 49.84.93.106
 49.89.115.124
 49.89.139.161
+49.89.228.167
 49.89.231.89
 49.89.234.53
 49.89.64.24
@@ -1138,6 +1122,7 @@
 5.101.196.90
 5.101.213.234
 5.128.62.127
+5.185.85.122
 5.19.248.85
 5.198.241.29
 5.201.130.125
@@ -1153,7 +1138,8 @@
 50.3.177.103
 50.3.177.106
 50.78.15.50
-51.178.81.75
+51.255.170.237
+51.89.119.154
 5321msc.com
 58.120.159.133
 58.209.239.23
@@ -1167,30 +1153,27 @@
 58.243.190.127
 58.243.23.200
 58.40.122.158
-58.54.84.129
 59.0.224.88
 59.0.78.18
+59.1.81.1
 59.12.134.224
 59.174.151.114
 59.2.40.1
 59.22.144.136
-59.23.208.62
 59.3.94.190
 59.4.104.15
+59.55.253.105
 59.7.40.82
 60.186.83.82
-60.188.101.182
-61.168.50.156
 61.247.224.66
+61.52.144.240
 61.56.182.218
-61.58.55.226
 61.60.204.178
 61.70.110.59
 61.70.45.130
 61.82.215.186
 61.83.40.183
 62.103.77.120
-62.117.124.114
 62.122.102.236
 62.140.224.186
 62.201.230.43
@@ -1215,6 +1198,7 @@
 66.96.252.2
 67.8.138.101
 68.129.32.96
+68.134.186.196
 68.174.119.7
 68.204.73.133
 68.255.156.146
@@ -1230,7 +1214,6 @@
 70.142.195.165
 70.39.15.94
 71.11.83.76
-71.14.255.251
 71.171.111.138
 71.250.252.81
 71.79.146.82
@@ -1252,7 +1235,6 @@
 75.127.141.52
 75.3.198.176
 75.55.248.20
-76.108.23.131
 76.174.86.202
 76.243.189.77
 76.250.199.133
@@ -1266,16 +1248,17 @@
 77.121.98.150
 77.192.123.83
 77.27.54.214
-77.43.232.133
 77.46.163.158
 77.71.52.220
 77.79.191.32
 78.186.190.222
 78.186.49.146
 78.189.104.157
+78.189.173.59
 78.39.232.58
 78.45.143.85
 78.8.225.77
+78.85.18.163
 78.96.20.79
 786suncity.com
 79.11.228.219
@@ -1283,7 +1266,6 @@
 79.159.207.150
 79.179.199.159
 79.2.211.133
-79.7.170.58
 79.79.58.94
 79.8.70.162
 80.107.89.207
@@ -1291,6 +1273,7 @@
 80.19.101.218
 80.191.250.164
 80.210.20.94
+80.210.28.73
 80.211.102.87
 80.224.107.163
 80.235.214.123
@@ -1301,6 +1284,7 @@
 81.17.16.122
 81.184.88.173
 81.19.215.118
+81.196.213.134
 81.213.141.184
 81.213.166.175
 81.218.160.29
@@ -1343,19 +1327,19 @@
 84.20.68.26
 84.228.95.204
 84.241.16.78
-84.247.83.74
 84.31.23.33
 84.54.144.151
+85.100.127.218
 85.105.133.15
 85.105.146.79
 85.105.155.39
 85.105.165.236
 85.187.253.219
-85.217.170.105
 85.222.91.82
 85.238.105.94
 85.64.181.50
 85.9.131.122
+85.97.185.220
 85.99.247.39
 86.105.60.204
 86.107.163.176
@@ -1366,13 +1350,12 @@
 87.241.175.89
 87.66.219.63
 87.97.154.37
+87du.vip
 88.102.33.14
 88.156.169.98
 88.201.34.243
 88.218.16.37
 88.218.16.38
-88.218.17.149
-88.218.17.179
 88.220.80.210
 88.225.222.128
 88.248.121.238
@@ -1393,6 +1376,7 @@
 89.40.87.5
 91.134.252.221
 91.149.191.182
+91.177.139.132
 91.187.103.32
 91.187.119.26
 91.191.32.34
@@ -1416,7 +1400,6 @@
 92.45.198.60
 92.51.127.94
 92.55.124.64
-93.102.193.254
 93.116.166.51
 93.119.205.159
 93.119.236.72
@@ -1426,6 +1409,7 @@
 93.176.185.223
 93.185.10.131
 93.56.36.84
+93.70.125.94
 93.73.99.102
 93.77.52.138
 93.93.199.254
@@ -1440,7 +1424,6 @@
 94.230.152.192
 94.244.113.217
 94.244.25.21
-94.41.0.174
 94.53.120.109
 94.64.246.247
 95.132.129.250
@@ -1448,9 +1431,9 @@
 95.167.138.250
 95.167.71.245
 95.170.113.227
+95.170.113.52
 95.170.201.34
 95.210.1.42
-95.217.49.251
 95.231.116.118
 95.243.30.86
 95.86.56.174
@@ -1465,14 +1448,16 @@
 99.121.0.96
 99.50.211.58
 9983suncity.com
+Muanha.xyz
 ZEROTERWWGFBOT.hoesbigmadzero.tk
 a-reality.co.uk
+a.seeanu.ru
 a.xiazai163.com
 aaasolution.co.th
 accentlandscapes.com
 accessyouraudience.com
 acteon.com.ar
-activecost.com.au
+aelogica.com
 agiandsam.com
 agipasesores.com
 agsir.com
@@ -1490,10 +1475,9 @@ alohasoftware.net
 alphaconsumer.net
 am-concepts.ca
 amd.alibuf.com
+amedeoscognamiglio.329263.com
 amemarine.co.th
 americanrange.com
-anadolutatili.com
-anaekppystdy4initalymedicalconsultancy.duckdns.org
 andreabo1.myftp.biz
 andreelapeyre.com
 andremaraisbeleggings.co.za
@@ -1507,7 +1491,7 @@ apware.co.kr
 archiv.bg
 areac-agr.com
 aresorganics.com
-asadairtravel.com
+arowanafishforsale.com
 ascentive.com
 ashoakacharya.com
 askarindo.or.id
@@ -1536,7 +1520,7 @@ bd11.52lishi.com
 bd12.52lishi.com
 bd18.52lishi.com
 bd19.52lishi.com
-beachview.co.za
+beforeshithappens.com
 beibei.xx007.cc
 bepgroup.com.hk
 besserblok-ufa.ru
@@ -1553,19 +1537,23 @@ blankki.com
 blog.241optical.com
 blog.anytimeneeds.com
 blog.hanxe.com
+bolescy.com
 bolidar.dnset.com
 bondbuild.com.sg
+bonyamin.com
 bookmytripping.com
 bpo.correct.go.th
 brasstec.com.br
 brbs.customer.netspace.net.au
 brenleyquartzgh.com
 brewmethods.com
+britica.vn
 btlocum.pl
 bugansavings.com
 buydishtv.in
 byqkdy.com
 cameli.vn
+capath.vn
 caravella.com.br
 cassiagumrefined.com
 cassovia.sk
@@ -1581,7 +1569,6 @@ cf0.pw
 cfs5.tistory.com
 ch.rmu.ac.th
 changematterscounselling.com
-chantdownproster.com
 chanvribloc.com
 charm.bizfxr.com
 chauffeursontravel.com
@@ -1590,16 +1577,16 @@ chinhdropfile.myvnc.com
 chinhdropfile80.myvnc.com
 chipmarkets.com
 chj.m.dodo52.com
-cista-dobra-voda.com
+cinnamoncreations.com.au
 clearwaterriveroutfitting.com
 client.yaap.co.uk
 clinicamariademolina.com
-cloud.wmsinfo.com.br
 common-factor.nl
 compesat.com
 complan.hu
 complanbt.hu
 comtechadsl.com
+config.cqhbkjzx.com
 config.kuaisousou.top
 consultingcy.com
 corazondelcielo.mx
@@ -1607,7 +1594,7 @@ counciloflight.bravepages.com
 cqjcc.org
 crimebranch.in
 crittersbythebay.com
-crudenergyllc.com
+cryptoomarket.com
 csnserver.com
 csw.hu
 cvc.com.pl
@@ -1626,17 +1613,22 @@ dawaphoto.co.kr
 daynightgym.com
 de.gsearch.com.de
 deixameuskls.tripod.com
+demo10.onbm.ir
+demo13.dsdemosite.com
 denkagida.com.tr
 depgrup.com
 depot7.com
 derivativespro.in
+dev.apshaps.se
 dev.sebpo.net
+dev1.xicom.us
 dev5.mypagevn.com
 dezcom.com
 dfcf.91756.cn
 dfd.zhzy999.net
 dfzm.91756.cn
 dgecolesdepolice.bf
+dgnj.cn
 dhlservices.duckdns.org
 diazavendano.cl
 dichvuvesinhcongnghiep.top
@@ -1644,6 +1636,7 @@ dienmaycu.vn
 dieselmoreno.cl
 digilib.dianhusada.ac.id
 digiovanniconsultants.com
+digital-marketing-institute-delhi.empeeevents.com
 digitaldog.de
 discuzx.win
 ditec.com.my
@@ -1668,6 +1661,7 @@ down.ancamera.co.kr
 down.gogominer.com
 down.haote.com
 down.pcclear.com
+down.pdf.cqmjkjzx.com
 down.startools.co.kr
 down.tgjkbx.cn
 down.upzxt.com
@@ -1690,6 +1684,7 @@ dralpaslan.com
 dreamtrips.cheap
 drools-moved.46999.n3.nabble.com
 druzim.freewww.biz
+drwendyellis.com
 dsiun.com
 dtsay.xyz
 dudulm.com
@@ -1700,15 +1695,17 @@ dx1.qqtn.com
 dx2.qqtn.com
 dx30.siweidaoxiang.com
 dx60.siweidaoxiang.com
+dzapasigroup.usapglobal.org
 dzinestudio87.co.uk
-dzyzz.cn
 e.dangeana.com
+earningtipsbd.com
 easydown.workday360.cn
 ebook.w3wvg.com
 edicolanazionale.it
 emir-elbahr.com
 enc-tech.com
 entre-potes.mon-application.com
+eposar.com.ar
 er-bulisguvenligi.com
 ermekanik.com
 esolvent.pl
@@ -1722,6 +1719,7 @@ fastsoft.onlinedown.net
 fazi.pl
 fenoma.net
 fidiag.kymco.com
+fifa555easy.329263.com
 figuig.net
 fileco.jobkorea.co.kr
 filen3.utengine.co.kr
@@ -1733,21 +1731,22 @@ fitmanacademy.com
 fkd.derpcity.ru
 flex.ru
 flood-protection.org
-foodbooktv.com
 fordlamdong.com.vn
-foreveramericabrands.com
 foreverprecious.org
+foxfennecs.com
 frin.ng
 fte.m.dodo52.com
+ftpcnc-p2sp.pconline.com.cn
 ftpftpftp.com
 funletters.net
-funpartyrent.com
 futuregraphics.com.ar
 futurodelasciudades.org
 g.7230.com
 g0ogle.free.fr
+gainsdirectory.com
 galuhtea.com
 gamee.top
+garage.themebuffets.com
 garenanow.myvnc.com
 garenanow4.myvnc.com
 gargiulo.com.ar
@@ -1759,7 +1758,6 @@ germistonmiraclecentre.co.za
 ghislain.dartois.pagesperso-orange.fr
 ghwls44.gabia.io
 gimscompany.com
-glitchexotika.com
 glitzygal.net
 gnimelf.net
 go.xsuad.com
@@ -1769,9 +1767,9 @@ govhotel.us
 grafchekloder.rebatesrule.net
 granportale.com.br
 green100.cn
-greindustry.com
 gssgroups.com
 gx-10012947.file.myqcloud.com
+h1.iwakalong.ru
 habbotips.free.fr
 hagebakken.no
 halcat.com
@@ -1779,6 +1777,7 @@ hanaphoto.co.kr
 handrush.com
 hanoihub.vn
 hazel-azure.co.th
+hdxa.net
 healtina.com
 heavenif.co.za
 hediyegapsinternet.com
@@ -1817,7 +1816,6 @@ ini.egkj.com
 innovation4crisis.org
 instanttechnology.com.au
 intelicasa.ro
-intertradeassociates.com.au
 intoxicated-twilight.com
 iran-gold.com
 iremart.es
@@ -1826,12 +1824,13 @@ itd.m.dodo52.com
 itsnixielou.com
 ixlonbcc.com
 izu.co.jp
-jaincakes.xyz
 jamiekaylive.com
 jansen-heesch.nl
 janvierassocies.fr
+jaservicioscontables.casteviajes.com
 javatank.ru
 jcedu.org
+jessymart.flexyhub.com
 jjjexx.329263.com
 jmtc.91756.cn
 jointings.org
@@ -1848,6 +1847,7 @@ jvalert.com
 jyv.fi
 jzny.com.cn
 k.ludong.tv
+k3.etfiber.net
 kabiru.ru
 kachsurf.mylftv.com
 kamasu11.cafe24.com
@@ -1859,15 +1859,15 @@ kassohome.com.tr
 kazanturkiye20gb.com
 kbzsa.cn
 kdsp.co.kr
-keckarangdadap.pekalongankab.go.id
 kejpa.com
-kgfs3.329263.com
 khan-associates.net
 khunnapap.com
 kiaowadubai.com
 kiencuonghotel.vn
+kingdomcarecan.com
 kingsland.systemsolution.me
 kjbm9.mof.gov.cn
+kleinendeli.co.za
 knightsbridgeenergy.com.ng
 koppemotta.com.br
 koralli.if.ua
@@ -1884,7 +1884,6 @@ landmarktreks.com
 langyabbs.05yun.cn
 lcfurtado.com.br
 ld.mediaget.com
-leaksfly.com
 learnbuddy.com
 learningcomputing.org
 lebedyn.info
@@ -1895,8 +1894,8 @@ libya-info.com
 lifeapt.biz
 lists.ibiblio.org
 lists.mplayerhq.hu
+livetrack.in
 livetvsports.ml
-lodergord.com
 log.yundabao.cn
 lsyr.net
 lt02.datacomspecialists.net
@@ -1912,9 +1911,7 @@ makosoft.hu
 malin-akerman.net
 margopassadorestylist.com
 marksidfgs.ug
-marocaji.com
 matt-e.it
-mattayom31.go.th
 mazury4x4.pl
 mbgrm.com
 mediamatkat.fi
@@ -1941,12 +1938,14 @@ misterson.com
 mistydeblasiophotography.com
 mkk09.kr
 mkontakt.az
-mlbfreestream.gq
+mlbfreestream.ml
 mmc.ru.com
+mobiadnews.com
 mobilier-modern.ro
 mochandmade.us
 modcloudserver.eu
 moha-group.com
+mononet.lv
 moscow11.at
 mountveederwines.com
 moyo.co.kr
@@ -1956,7 +1955,6 @@ msecurity.ro
 mteng.mmj7.com
 mtfelektroteknik.com
 mueblesjcp.cl
-mutec.jp
 mv360.net
 mvb.kz
 mxpiqw.am.files.1drv.com
@@ -1983,7 +1981,7 @@ news.omumusic.net
 newsun-shop.com
 newxing.com
 nfbio.com
-nmal.info
+nofound.000webhostapp.com
 nprg.ru
 nst-corporation.com
 nwcsvcs.com
@@ -1997,18 +1995,17 @@ omega.az
 omsk-osma.ru
 omuzgor.tj
 onestin.ro
-onlink-aoiuvr.com
-onyourmarkmindsetgo.com
 openclient.sroinfo.com
 operasanpiox.bravepages.com
 opolis.io
+oralloy.com
 osdsoft.com
 osesama.jp
 osheoufhusheoghuesd.ru
+oskarnews.gazashare.com
 otanityre.in
 ouhfuosuoosrhfzr.su
 ovelcom.com
-ozemag.com
 ozkayalar.com
 p1.lingpao8.com
 p2.lingpao8.com
@@ -2026,6 +2023,7 @@ patch2.99ddd.com
 patch3.99ddd.com
 patrickchan-hk.net
 pawel-sikora.pl
+pcexperts.co.za
 pcginsure.com
 pcsoori.com
 pedidoslalacteo.com.ar
@@ -2034,7 +2032,6 @@ petromltd.com
 ph4s.ru
 phamchilong.com
 phudieusongma.com
-physiodelacomba.ch
 piapendet.com
 pink99.com
 pmguide.net
@@ -2043,6 +2040,7 @@ podrska.com.hr
 ponto50.com.br
 poolbook.ir
 ppl.ac.id
+privacytoolsstore.website
 probost.cz
 profitcoach.net
 prosoc.nl
@@ -2055,10 +2053,12 @@ qelie.com
 qfjys.com.img.800cdn.com
 qmsled.com
 qppl.angiang.gov.vn
+qualitygolfbags.com
 quartier-midi.be
 quehagoencartagena.com
 raacts.in
 raifix.com.br
+rangebroadcasting.com
 rapidex.co.rs
 rc.ixiaoyang.cn
 readytalk.github.io
@@ -2074,24 +2074,22 @@ res.uf1.cn
 ret.space
 rezaazizi.ir
 rinkaisystem-ht.com
-riskxai.com
 riyanenterprise.com
 rkverify.securestudies.com
 robertmcardle.com
 robotrade.com.vn
 rollingmill.in
 rollscar.pk
-ross-ocenka.ru
 rossogato.com
 ruisgood.ru
 rusch.nu
 s.51shijuan.com
 s.kk30.com
+s14b.91danji.com
+s14b.groundyun.cn
 sabiupd.compress.to
 saboorjaam.ir
 sabupda.vizvaz.com
-saglikliapp.live
-sahathaikasetpan.com
 salvation24.com
 salvationbd.com
 sandovalgraphics.com
@@ -2100,9 +2098,9 @@ saskklo.com
 scglobal.co.th
 schollaert.eu
 schoongezicht.org
+seeanu.ru
 seenext.com.pk
 sefp-boispro.fr
-seibee.biz
 selekture.com
 selfuseproperty.com
 selvikoyunciftligi.com
@@ -2112,6 +2110,7 @@ servicemhkd80.myvnc.com
 serviciosinfoware.cl
 sexybaccarat.329263.com
 sfoodfeedf.org
+sgm.pc6.com
 shacked.webdepot.co.il
 shahtoba.faqserv.com
 shaoxiaofei.cn
@@ -2149,35 +2148,33 @@ sriglobalit.com
 srvmanos.no-ip.info
 ss.cybersoft-vn.com
 sslv3.at
+staging.popclusive.asia
 starcountry.net
 static.ilclock.com
 static.topxgun.com
 stationaryhome.com
-stdykungeduationaldeveloper15investmenqg.duckdns.org
 stecit.nl
 steelbuildings.com
-stevewalker.com.au
 story-maker.jp
 stubbackup.ru
 suc9898.com
 suncity116.com
 support.clz.kr
-surecake.com
 sv.pvroe.com
 svkacademy.com
 svn.cc.jyu.fi
 sweaty.dk
 swwbia.com
-sylvaclouds.eu
 symanreni.mysecondarydns.com
 szxypt.com
 t.honker.info
+tandenblekenhoofddorp.nl
 taraward.com
 taxpos.com
 tcy.198424.com
-teacherlinx.com
 teardrop-productions.ro
 technoites.com
+tecnobella.cl
 tehrenberg.com
 telescopelms.com
 telsiai.info
@@ -2196,19 +2193,21 @@ theprestige.ro
 theptiendat.com
 therecruiter.io
 thesecuritysoftwarescannerindustrgreat.duckdns.org
+thevision.ro
 thornadops.com
 thosewebbs.com
 tianangdep.com
+tianmaouae.com
 tianzi8.cn
 tibinst.mefound.com
 tibok.lflink.com
 ticte.in
 timlinger.com
 tmhfashionhouse.co.za
+toe.polinema.ac.id
 tonghopgia.net
 tonydong.com
 tonyzone.com
-tovarentertainment.in
 tsd.jxwan.com
 tsredco.telangana.gov.in
 tulli.info
@@ -2217,6 +2216,7 @@ tuneup.ibk.me
 tup.com.cn
 tutuler.com
 uc-56.ru
+ufabet168168.329263.com
 ugc.wegame.com.cn
 ultimatelamborghiniexperience.com
 ultimatepointsstore.com
@@ -2225,7 +2225,6 @@ undantagforlag.se
 unicorpbrunei.com
 unilevercopabr.mbiz20.net
 uniquehall.net
-uniteddefence8forstdygorvermentsocialeyx.duckdns.org
 unokaoeojoejfghr.ru
 upd.m.dodo52.com
 update.iwang8.com
@@ -2246,7 +2245,8 @@ vfocus.net
 videoswebcammsn.free.fr
 vietducbio.com
 vigilar.com.br
-visagepk.com
+vip.recommendedtoyoo.com
+virustreatments.empeeevents.com
 visualdata.ru
 vitinhvnt.com
 vitromed.ro
@@ -2266,7 +2266,6 @@ webarte.com.br
 webq.wikaba.com
 webserverthai.com
 websound.ru
-webxposndytechnologyhardsoftware6buyers.duckdns.org
 welcometothefuture.com
 whgaty.com
 wiebe-sanitaer.de
@@ -2281,14 +2280,13 @@ writesofpassage.co.za
 wsg.com.sg
 wt8.siweidaoxiang.com
 wt9.siweidaoxiang.com
+wwealthllc.com
 www2.recepty5.com
 x2vn.com
 xia.vzboot.com
 xiaidown.com
-xiaoma-10021647.file.myqcloud.com
 xiegushi.cn
 xirfad.com
-xn--transfgran-mgbbb600b.ro
 xsdtx.xyz
 xsryx.xyz
 xtremeforumz.com
@@ -2296,6 +2294,8 @@ xuhss.com
 xxbdr.xyz
 xxwl.kuaiyunds.com
 xxxze.co.nu
+y-sani.com
+yc5.timeisletitgo.ru
 yeez.net
 yesky.51down.org.cn
 yesky.xzstatic.com
@@ -2311,7 +2311,6 @@ zd4b.lonlyfafner.ru
 zdy.17110.com
 zenkashow.com
 zentealounge.com.au
-zethla.com
 zeytinyagisabun.com
 zhetysu360.kz
 zhzy999.net
@@ -2320,6 +2319,8 @@ zmmore.com
 zoetermeerov.nl
 zoeydeutchweb.com
 zonefound.com.cn
+zskyjov.cz
 ztqsc.com.cn
 zumodelima.com
 zxcet.xyz
+zzv.seeanu.ru
diff --git a/urlhaus-filter-domains.txt b/urlhaus-filter-domains.txt
index 2bc9ab28..1c1bfb3f 100644
--- a/urlhaus-filter-domains.txt
+++ b/urlhaus-filter-domains.txt
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains Blocklist
-# Updated: Wed, 29 Apr 2020 12:09:39 UTC
+# Updated: Thu, 30 Apr 2020 00:09:24 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -480,6 +480,7 @@
 1001-territoires.fr
 1001newsng.com
 1001tur-tver.ru
+10022020newfolder1002002231-service1002.space
 100alternance.fr
 100kala.ir
 100percentforkids.org
@@ -1060,6 +1061,7 @@
 104.168.190.82
 104.168.191.89
 104.168.195.250
+104.168.198.194
 104.168.198.208
 104.168.198.26
 104.168.201.250
@@ -1091,6 +1093,7 @@
 104.168.98.206
 104.168.99.30
 104.174.110.58
+104.175.99.243
 104.181.22.218
 104.192.1.10
 104.192.1.27
@@ -1179,6 +1182,7 @@
 104.244.78.187
 104.244.79.123
 104.244.79.197
+104.244.79.235
 104.248.1.184
 104.248.10.33
 104.248.112.206
@@ -2253,6 +2257,7 @@
 110.155.49.79
 110.155.51.119
 110.155.51.155
+110.155.51.173
 110.155.52.194
 110.155.52.210
 110.155.52.78
@@ -2932,6 +2937,7 @@
 112.122.227.241
 112.122.61.207
 112.122.61.238
+112.122.61.250
 112.122.61.47
 112.123.109.118
 112.123.109.145
@@ -3259,6 +3265,7 @@
 113.221.12.124
 113.221.12.219
 113.221.13.79
+113.221.145.204
 113.221.146.133
 113.221.147.115
 113.221.48.208
@@ -3889,6 +3896,7 @@
 114.235.200.56
 114.235.202.162
 114.235.202.69
+114.235.202.95
 114.235.203.26
 114.235.208.166
 114.235.209.22
@@ -4159,6 +4167,7 @@
 114.239.35.124
 114.239.36.147
 114.239.36.91
+114.239.37.159
 114.239.39.210
 114.239.39.76
 114.239.41.70
@@ -4471,6 +4480,7 @@
 115.216.111.23
 115.216.115.122
 115.216.118.218
+115.216.210.105
 115.216.214.215
 115.216.24.55
 115.216.25.37
@@ -4830,6 +4840,7 @@
 115.49.75.98
 115.49.76.11
 115.49.76.124
+115.49.76.131
 115.49.76.156
 115.49.76.187
 115.49.76.190
@@ -4846,6 +4857,7 @@
 115.49.77.146
 115.49.77.237
 115.49.77.248
+115.49.77.55
 115.49.77.71
 115.49.78.111
 115.49.78.137
@@ -5037,6 +5049,7 @@
 115.53.31.10
 115.53.39.133
 115.53.55.137
+115.53.63.184
 115.53.85.87
 115.54.103.113
 115.54.106.146
@@ -5286,6 +5299,7 @@
 115.56.118.133
 115.56.119.128
 115.56.119.142
+115.56.119.6
 115.56.120.212
 115.56.121.32
 115.56.123.101
@@ -5494,6 +5508,7 @@
 115.59.118.119
 115.59.118.128
 115.59.118.173
+115.59.118.51
 115.59.12.21
 115.59.120.233
 115.59.120.252
@@ -5623,6 +5638,7 @@
 115.61.15.32
 115.61.15.57
 115.61.15.82
+115.61.2.125
 115.61.2.183
 115.61.2.219
 115.61.2.225
@@ -5750,6 +5766,7 @@
 115.63.58.122
 115.63.58.142
 115.63.58.225
+115.63.60.199
 115.63.66.114
 115.63.68.150
 115.63.69.168
@@ -6950,6 +6967,7 @@
 117.88.172.200
 117.88.23.24
 117.90.117.185
+117.90.128.14
 117.90.167.17
 117.90.167.39
 117.90.19.184
@@ -8350,6 +8368,7 @@
 123.10.2.75
 123.10.2.87
 123.10.20.105
+123.10.20.166
 123.10.20.210
 123.10.20.42
 123.10.20.54
@@ -8365,6 +8384,7 @@
 123.10.22.53
 123.10.222.107
 123.10.222.129
+123.10.229.210
 123.10.23.171
 123.10.23.194
 123.10.23.231
@@ -9400,6 +9420,7 @@
 123.9.80.58
 123.9.84.74
 123.9.86.66
+123.96.134.180
 123.96.229.149
 123.96.26.32
 123.96.36.221
@@ -9693,6 +9714,7 @@
 125.109.198.82
 125.109.73.39
 125.113.166.213
+125.113.66.85
 125.113.71.127
 125.113.72.214
 125.115.143.80
@@ -11116,6 +11138,7 @@
 14.113.229.118
 14.113.229.176
 14.113.229.225
+14.113.229.49
 14.113.231.17
 14.118.212.137
 14.118.213.162
@@ -13274,6 +13297,7 @@
 165.227.212.62
 165.227.213.164
 165.227.218.79
+165.227.220.189
 165.227.220.53
 165.227.221.72
 165.227.230.68
@@ -13387,6 +13411,7 @@
 167.172.201.10
 167.172.201.113
 167.172.201.141
+167.172.206.156
 167.172.208.31
 167.172.209.140
 167.172.209.209
@@ -16948,6 +16973,7 @@
 179.127.180.9
 179.14.150.9
 179.156.136.113
+179.156.192.195
 179.156.196.13
 179.162.177.249
 179.162.179.107
@@ -17288,6 +17314,7 @@
 180.118.87.87
 180.119.156.246
 180.119.170.61
+180.120.12.85
 180.120.139.106
 180.120.14.158
 180.120.15.189
@@ -17417,6 +17444,7 @@
 180.124.204.213
 180.124.211.86
 180.124.214.147
+180.124.214.4
 180.124.223.200
 180.124.225.192
 180.124.225.68
@@ -18417,6 +18445,7 @@
 182.121.129.43
 182.121.133.229
 182.121.135.221
+182.121.152.74
 182.121.153.224
 182.121.154.112
 182.121.155.194
@@ -18613,6 +18642,7 @@
 182.126.1.102
 182.126.1.22
 182.126.100.190
+182.126.101.85
 182.126.102.35
 182.126.102.66
 182.126.103.146
@@ -18707,6 +18737,7 @@
 182.126.212.59
 182.126.212.68
 182.126.213.115
+182.126.213.171
 182.126.213.190
 182.126.213.199
 182.126.213.245
@@ -18963,6 +18994,7 @@
 182.127.2.37
 182.127.2.64
 182.127.201.102
+182.127.201.42
 182.127.202.23
 182.127.205.85
 182.127.208.131
@@ -19772,6 +19804,7 @@
 185.163.47.142
 185.163.47.144
 185.163.47.188
+185.163.47.253
 185.164.32.132
 185.164.40.36
 185.164.72.110
@@ -20745,6 +20778,7 @@
 187.57.90.131
 187.59.210.139
 187.62.179.28
+187.63.19.112
 187.72.59.113
 187.73.21.30
 187.74.139.94
@@ -22568,6 +22602,7 @@
 199.83.207.199
 199.83.207.207
 199.83.207.225
+199.83.207.230
 199.83.207.249
 199.83.207.35
 199.83.207.47
@@ -22612,6 +22647,7 @@
 1jpg1host.net16.net
 1jxmt.com
 1kvk.com
+1l04.timeisletitgo.ru
 1liveradar.de
 1lo.lukow.pl
 1localexpert.com
@@ -22791,6 +22827,7 @@
 2.55.89.188
 2.55.97.245
 2.56.213.96
+2.56.240.32
 2.56.241.218
 2.56.242.138
 2.56.8.102
@@ -22872,6 +22909,7 @@
 200.222.50.26
 200.225.120.12
 200.232.175.43
+200.233.206.164
 200.24.248.158
 200.28.78.213
 200.30.132.50
@@ -23487,6 +23525,7 @@
 206.189.205.248
 206.189.206.108
 206.189.206.89
+206.189.208.7
 206.189.209.111
 206.189.21.146
 206.189.21.255
@@ -24827,6 +24866,7 @@
 219.155.168.139
 219.155.169.175
 219.155.169.194
+219.155.169.47
 219.155.170.113
 219.155.170.124
 219.155.170.165
@@ -24843,6 +24883,7 @@
 219.155.172.72
 219.155.172.74
 219.155.173.117
+219.155.173.125
 219.155.173.136
 219.155.173.247
 219.155.173.255
@@ -25670,6 +25711,7 @@
 222.138.180.237
 222.138.180.34
 222.138.181.136
+222.138.181.140
 222.138.181.198
 222.138.181.252
 222.138.181.53
@@ -27102,6 +27144,7 @@
 27.41.223.26
 27.41.224.135
 27.41.224.145
+27.41.224.202
 27.41.224.81
 27.41.225.253
 27.41.227.194
@@ -27226,6 +27269,7 @@
 2wheelrider.com
 2winresidency.com
 2x2print.com
+2xmy.timeisletitgo.ru
 2yb5.andichust.ru
 2yf32q.ch.files.1drv.com
 2yourwealth.com.au
@@ -28085,6 +28129,7 @@
 36.108.154.99
 36.108.155.17
 36.108.155.78
+36.108.228.213
 36.108.229.41
 36.108.230.249
 36.108.231.67
@@ -28656,6 +28701,7 @@
 37.49.226.19
 37.49.226.192
 37.49.226.204
+37.49.226.209
 37.49.226.21
 37.49.226.43
 37.49.226.5
@@ -28846,6 +28892,7 @@
 3ppuubb.com
 3prokladkaeu.com
 3pubeu.com
+3q9h.timeisletitgo.ru
 3rdperson.ml
 3rdsectorsupportafrica.org
 3rytghjhkss.cf
@@ -28868,6 +28915,7 @@
 3uso2927wiwofeppwi29.com
 3v5.net
 3v6bz7g2bncvrinwmaawz2t4.file.truckbennels.com
+3vc6.seeanu.ru
 3vdataguard.com
 3vventures.com
 3wereareyou.icu
@@ -29327,6 +29375,7 @@
 42.227.186.139
 42.227.186.173
 42.227.186.220
+42.227.186.34
 42.227.187.137
 42.227.187.158
 42.227.187.193
@@ -30112,6 +30161,7 @@
 42.234.85.68
 42.234.85.87
 42.234.86.155
+42.234.86.212
 42.234.86.22
 42.234.86.246
 42.234.86.64
@@ -30454,6 +30504,7 @@
 42.239.124.91
 42.239.126.247
 42.239.127.58
+42.239.132.107
 42.239.132.124
 42.239.132.158
 42.239.133.185
@@ -30537,6 +30588,7 @@
 42.239.167.248
 42.239.167.82
 42.239.168.103
+42.239.168.235
 42.239.169.101
 42.239.169.143
 42.239.169.235
@@ -31349,6 +31401,7 @@
 45.95.168.98
 45.95.169.232
 45.95.169.233
+45.95.169.234
 45.95.169.238
 45.95.55.110
 45.95.55.121
@@ -32819,6 +32872,7 @@
 49.89.227.51
 49.89.227.84
 49.89.228.15
+49.89.228.167
 49.89.228.192
 49.89.228.51
 49.89.230.122
@@ -33530,6 +33584,7 @@
 51.89.0.134
 51.89.100.108
 51.89.115.101
+51.89.119.154
 51.89.126.21
 51.89.139.104
 51.89.163.174
@@ -34067,6 +34122,7 @@
 59.53.136.43
 59.55.11.202
 59.55.24.37
+59.55.253.105
 59.55.4.163
 59.55.93.179
 59.62.84.56
@@ -35217,6 +35273,7 @@
 61.52.131.32
 61.52.138.171
 61.52.144.189
+61.52.144.240
 61.52.144.91
 61.52.145.44
 61.52.190.240
@@ -37316,6 +37373,7 @@
 81.19.215.61
 81.193.147.127
 81.193.196.46
+81.196.213.134
 81.198.87.93
 81.2.131.12
 81.2.240.140
@@ -37619,6 +37677,7 @@
 85.10.196.43
 85.100.112.218
 85.100.126.73
+85.100.127.218
 85.100.32.114
 85.100.41.71
 85.100.96.127
@@ -38522,6 +38581,7 @@
 92.38.47.207
 92.39.78.146
 92.41.181.235
+92.41.46.206
 92.44.62.174
 92.45.198.60
 92.45.198.74
@@ -39135,6 +39195,8 @@ FlorissantFire.com
 ForRealTraffic.com
 Heavensconcept.ng
 Mozilla.theworkpc.com
+Muanha.xyz
+NCERTSOLUTIONACADEMY.COM
 NeedCareers.com
 OpalAlert.com
 RENTITOUT.CO
@@ -39185,6 +39247,7 @@ a.pomf.su
 a.pomfe.co
 a.rokket.space
 a.safe.moe
+a.seeanu.ru
 a.teamworx.ph
 a.turnuvam.org
 a.uchi.moe
@@ -40006,6 +40069,7 @@ addpics.site
 addtomap.ru
 adducity.ga
 addvitashop.com
+ade.topepics.com
 adebeo.co.in
 adecityevents.com
 aded.co.in
@@ -40293,6 +40357,7 @@ aeletselschade.nl
 aelinks.com
 aellly.000webhostapp.com
 aelmas.5gbfree.com
+aelogica.com
 aemgrup.com.tr
 aemo-mecanique-usinage.fr
 aengineeringltd.com
@@ -41329,6 +41394,7 @@ alexandre-muhl.fr
 alexandrearchitecte.fr
 alexandrearealty.com
 alexandrecabello.com.br
+alexandredekerchove.com
 alexandrepaiva.com
 alexandrerivelli.com
 alexandria.run
@@ -43527,6 +43593,7 @@ ariacommunications.in
 ariadna.org.ua
 ariafm.gr
 arianasdelinewdorpplaza.com
+arianegerkens.com
 arianrayaneh.com
 arianshopping.com
 ariasms.ir
@@ -45995,6 +46062,7 @@ batch-photo-editor.com
 batchenangmuasieuben.com
 batdongsan3b.com
 batdongsanbamien24h.com
+batdongsanbentre.com.vn
 batdongsanhadong.info
 batdongsanhathanh.net
 batdongsanhuyphat68.com
@@ -46905,6 +46973,7 @@ betokont.com.tr
 beton-dubna.com
 betonbrother.com
 betonkeritesgyar.hu
+betopceo.com
 betprediksi.com
 betrachtungssicht.de
 betrogroup.com
@@ -48198,6 +48267,7 @@ blueboxsourcing.com
 blueboxxinterior.com
 bluebunni.com
 blueclutch.com
+bluecollarfinancial.net
 bluecrayonconsulting.com
 bluecrestpress.com
 bluecrystalband.com
@@ -48438,6 +48508,7 @@ boldog.hu
 boldreflectionsmn.com
 bolegreenhotel.com
 bolehprediksi.com
+bolescy.com
 bolesni.net
 bolhomes.stringbind.info
 bolidar.dnset.com
@@ -49056,6 +49127,7 @@ bristter.com
 britan.mx
 britanniasuperior.uk
 briteindonesia.com
+britica.vn
 british-rainbow.com
 britishvoices.co.uk
 brittanishantel.com
@@ -50158,6 +50230,7 @@ capacitacioncomercial.cl
 capamh.org
 capanoandassociates.com
 capasso.de
+capath.vn
 capaxinfiniti.ml
 capbangkok.com
 capebethel.org
@@ -51110,11 +51183,13 @@ ceramicasaosebastiao.com.br
 cercolorlaghi.com
 cerebro-coaching.fr
 cerenkent.com
+cerisiers.be
 ceritaislami.000webhostapp.com
 cermiamakmur.com
 ceronamtinclube.icu
 cerotex.webprojemiz.com
 cerovica.com
+cerradocredito.com.br
 cerrahibeyinpedi.com
 cerrajeria-sabbath.holy-animero.com
 cerrajeriajimenez.cl
@@ -51449,6 +51524,7 @@ cheappigeontraps.com
 cheapraccoontraps.com
 cheapseoprovider.com
 cheapsilkscreenprinting.com
+cheaptours.in.ua
 cheaptrainticket.cogbiz-infotech.com
 cheaptravel-spb.ru
 cheapwebvn.net
@@ -51525,6 +51601,7 @@ chepi.net
 cherdavis.com
 chergo.es
 cherinetiles.com
+cheriyilbuilders.com
 cherkassy.info
 cheron.co.uk
 cherrett.net
@@ -54171,6 +54248,7 @@ cryptomega.ga
 cryptomub.com
 cryptonias.top
 cryptoniaz.top
+cryptoomarket.com
 cryptorgasms.com
 cryptoseed.co.za
 cryptostruct.bunker.zone
@@ -55015,6 +55093,7 @@ dardash.info
 dareldjazair.com
 darelyateem.org
 darianinc.com
+daricci.de
 darice.in
 dario-mraz.from.hr
 dariojucker.edelegation.com
@@ -55909,6 +55988,7 @@ demo1.parsnet.space
 demo10.onbm.ir
 demo12.maybay.net
 demo13.abc-it.net.au
+demo13.dsdemosite.com
 demo15.versamall.com
 demo15.webindia.com
 demo19.keltron.org
@@ -56035,6 +56115,7 @@ dentsheaven.co.uk
 dentsov.ru
 denttrade.com.kg
 denuchoco.com
+denunciesoftwareilegal.org.br
 denverfs.org
 denverktrade.xyz
 deny.radio-denisa.com
@@ -56304,6 +56385,7 @@ dev.454mediahouse.com
 dev.abitotv.it
 dev.adrianapatsalou.com
 dev.ameekids.com
+dev.apshaps.se
 dev.artoonsolutions.com
 dev.ateamymm.ca
 dev.bassetlawscouts.org.uk
@@ -56885,6 +56967,7 @@ digistudy.vn
 digital-cloud.healthycheapfast.com
 digital-design.com.cn
 digital-life.pro
+digital-marketing-institute-delhi.empeeevents.com
 digital-vision.nl
 digital.audiobookjunkie.com
 digital.etnasoft.eu
@@ -58340,6 +58423,7 @@ drinkdirect.co.uk
 drinkfoodapp.com
 drinkgusto.sg
 drinklass.com.br
+drinkopolykopen.nl
 drischler.de
 drive.carlsongracieanaheim.com
 drive.deescreationstore.com
@@ -58711,6 +58795,7 @@ dunysaki.ru
 duoliprudential.com.watchdogdns.duckdns.org
 duomasters.com
 duongcaoky.com
+duongfpt.ga
 duongmanhtuan.com
 duoscript.com
 duotechgroup.com
@@ -58891,6 +58976,7 @@ dyvrullters.in
 dywanypers.pl
 dyyhfk120.com
 dzain.com.br
+dzapasigroup.usapglobal.org
 dzbo.dp.ua
 dzbooster.com
 dzcorlandyu.band
@@ -63848,6 +63934,7 @@ franchisorsuccess.com.au
 francini.dk
 francis-china.com
 franciscossc.pbworks.com
+francois-champion.com
 francois-rommens.fr
 francoise-vauzeilles.com
 francoisebon.fr
@@ -67237,6 +67324,7 @@ h.eurotrading.com.pl
 h.j990981.ru
 h.top4top.io
 h.valerana44.ru
+h1.iwakalong.ru
 h112321.s08.test-hf.su
 h13.doshimotai.ru
 h135460.s08.test-hf.su
@@ -72627,6 +72715,7 @@ jasclair.com
 jasclean.sk
 jascopump.com
 jaseminedenise.com
+jaservicioscontables.casteviajes.com
 jasesoi.com
 jaset.com.mx
 jashneadab.org
@@ -72924,6 +73013,7 @@ jessie-equitation.fr
 jessijonesstar.com
 jessikarkan.com
 jesswalsh.co.uk
+jessymart.flexyhub.com
 jester.com.au
 jet2.didev.id
 jetallied.com
@@ -74152,6 +74242,7 @@ kalyoncularyapi.com
 kam.vladistart.art
 kamadecor.ru
 kamagra-wolf.com
+kamagra.in.rs
 kamagra4uk.com
 kamajankowska.com
 kamakran.ru
@@ -75707,6 +75798,7 @@ koralli.if.ua
 koranpeduli.co.id
 korastation.com
 koratmobilya.xyz
+koravit.zaeteaw.net
 korayche2002.free.fr
 korbi-studio.com
 korbiel.info
@@ -83103,6 +83195,7 @@ monoclepetes.com
 monodoze.com
 monoit.eu
 monomind.co.kr
+mononet.lv
 monopeets.com
 monrottweiler.fr
 monset.it
@@ -83249,6 +83342,7 @@ morozan.it
 morrell-stinson.com
 morricone.kayakodev.com
 morrissan.com
+morruko.antesos.com
 morsengthaithai.com
 morshinnet.ru
 mortalityreview.net
@@ -84196,6 +84290,7 @@ mylistbuildingtraffic.com
 myloanbaazar.com
 mylocal.dk
 mylocal.no
+mylocalfoodie.com.au
 myloglogistica.com.br
 mylokipanel.cf
 mylokipanel.ga
@@ -87602,6 +87697,7 @@ oraclewednesday.org
 oraio.com.py
 oralcamp.com.br
 oralflora.jp
+oralloy.com
 oramos.com.ar
 oranbet.ml
 orange-county-loans.com
@@ -87802,6 +87898,7 @@ osim-heshbon.co.il
 osirisre.online
 osiyo555.com
 osk-hornet.pl
+oskarnews.gazashare.com
 osliving.com
 osmanager.com.br
 osmanisports.com
@@ -88068,6 +88165,7 @@ oyunw.com
 oz-dn.org
 oz-link.com
 oz-tekpersonelkiyafetleri.com
+oz.timeisletitgo.ru
 oz4eai75936b8d.com
 oz7p.dk
 oz9lla.dk
@@ -90937,6 +91035,7 @@ privacydesignstudio.com
 privacymails.space
 privacytools.life
 privacytools.site
+privacytoolsstore.website
 privat-cyprian.sk
 private-accounting.com
 private-dining.com.ua
@@ -91229,6 +91328,7 @@ proluxshop.ir
 prom-alp.kz
 prom-engineering.com
 promacsolutions.mx
+promassager.ga
 promdon.dn.ua
 promente.it
 promep.utrng.edu.mx
@@ -95318,6 +95418,7 @@ sageth.net
 sagiri.org
 saglikbakanligi20gbinternet.com
 saglikbakanligindanhediye20gb.com
+saglikgoalapp.site
 saglikliapp.live
 sagliklibedenim.com
 sagrathi.com
@@ -96536,6 +96637,7 @@ sedotwcdadilancar.com
 sedotwcsejakarta.com
 seductivestrands.com
 see.prblm.li
+seeanu.ru
 seecareer.com
 seednext.work
 seedopk.org
@@ -98012,6 +98114,7 @@ silverlineboatsales.com
 silverliningcoaching.com.au
 silverlinktechnologies.com
 silveroks.com.ua
+silverstargalaxy.com.silverstartv.website
 silverstoltsen.com
 silverswiss.com
 silvesterinmailand.com
@@ -98061,6 +98164,7 @@ simonsolutions.us
 simorghealborz.com
 simp-consulting.pl
 simpelway.dk.linux154.unoeuro-server.com
+simpl.pw
 simplatecplc.com
 simple-it.org
 simple-it.si
@@ -98940,6 +99044,7 @@ so-lonely.fr
 so-nettel.ml
 so.nevisconsultants.com
 so370.com
+so4.seeanu.ru
 so766.sohost.pl
 soa.com.pk
 soafinance.com
@@ -100173,6 +100278,7 @@ staging.overlogo.com
 staging.pashminadevelopers.com
 staging.phandeeyar.org
 staging.playhualien.com
+staging.popclusive.asia
 staging.presthemes.com
 staging.securenetworks.pk
 staging.semperkitchen.com
@@ -100502,6 +100608,7 @@ steinerurology.com.au
 steinoe.dk
 steinplatten-tirol.at
 stekols.ru
+stelamedien.de
 stelastraveldiary.com
 steldesign.com
 stella.pk
@@ -101294,6 +101401,7 @@ sunandsand.minnesotacowboy.com
 sunaner.com
 sunart-5.com
 sunblessvgp.com
+sunboom-gift.com
 sunchipaint.com.vn
 suncity116.com
 suncity727.com
@@ -101969,6 +102077,7 @@ t2.webtilia.com
 t2lisboa.lisbonlab.com
 t2tdesigns.com
 t3-thanglongcapital.top
+t37b.iwakalong.ru
 t3dgraphics.com
 t5forums.com
 t6226.com
@@ -102504,6 +102613,7 @@ taxpos.com
 taxready.in
 taxtell.ru
 taxtionfree.co.in
+taxukrebates.com
 tay.batt2u.com
 taybabuilders.com
 tayebsojib.com
@@ -108325,6 +108435,7 @@ vip-rocket.net
 vip-watch.store
 vip.lijinxi.com
 vip.maohuagong.com
+vip.recommendedtoyoo.com
 vip.zbfcxx.cn
 vip163.cf
 vip163.ga
@@ -108396,6 +108507,7 @@ virtualupload.org
 virtuoushairline.org
 virtuspartners.cl
 viruscheckmake.gq
+virustreatments.empeeevents.com
 visa.indonesia.nl
 visa.org.ua
 visaatlantis.com
@@ -111813,6 +111925,7 @@ ybtvmt.info
 ybuat49ounh.kaligodfrey.casa
 ybuzzfmdy.cf
 yc.satnam.ru
+yc5.timeisletitgo.ru
 ycg-tw.com
 ych.jp
 ychynt.com
@@ -113010,5 +113123,6 @@ zzii.net
 zzjph.com
 zzlong.xyz
 zzpit.dk
+zzv.seeanu.ru
 zzyin.cn
 zzz78.tk
diff --git a/urlhaus-filter-hosts-online.txt b/urlhaus-filter-hosts-online.txt
index 8cb56357..571ee546 100644
--- a/urlhaus-filter-hosts-online.txt
+++ b/urlhaus-filter-hosts-online.txt
@@ -1,16 +1,19 @@
 # Title: abuse.ch URLhaus Malicious Online Hosts Blocklist
-# Updated: Wed, 29 Apr 2020 12:09:39 UTC
+# Updated: Thu, 30 Apr 2020 00:09:24 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
 0.0.0.0 0400msc.com
 0.0.0.0 13pope.com
-0.0.0.0 150.co.il
+0.0.0.0 1l04.timeisletitgo.ru
 0.0.0.0 2000kumdo.com
 0.0.0.0 21robo.com
+0.0.0.0 2xmy.timeisletitgo.ru
 0.0.0.0 3.zhzy999.net
 0.0.0.0 3.zhzy999.net3.zhzy999.net
 0.0.0.0 3mandatesmedia.com
+0.0.0.0 3q9h.timeisletitgo.ru
+0.0.0.0 3vc6.seeanu.ru
 0.0.0.0 402musicfest.com
 0.0.0.0 420hempizone.co
 0.0.0.0 49parallel.ca
@@ -18,17 +21,20 @@
 0.0.0.0 786suncity.com
 0.0.0.0 8133msc.com
 0.0.0.0 8200msc.com
+0.0.0.0 87du.vip
 0.0.0.0 887sconline.com
 0.0.0.0 88mscco.com
 0.0.0.0 9983suncity.com
+0.0.0.0 Muanha.xyz
 0.0.0.0 ZEROTERWWGFBOT.hoesbigmadzero.tk
 0.0.0.0 a-reality.co.uk
+0.0.0.0 a.seeanu.ru
 0.0.0.0 a.xiazai163.com
 0.0.0.0 aaasolution.co.th
 0.0.0.0 accentlandscapes.com
 0.0.0.0 accessyouraudience.com
 0.0.0.0 acteon.com.ar
-0.0.0.0 activecost.com.au
+0.0.0.0 aelogica.com
 0.0.0.0 agiandsam.com
 0.0.0.0 agipasesores.com
 0.0.0.0 agsir.com
@@ -46,10 +52,9 @@
 0.0.0.0 alphaconsumer.net
 0.0.0.0 am-concepts.ca
 0.0.0.0 amd.alibuf.com
+0.0.0.0 amedeoscognamiglio.329263.com
 0.0.0.0 amemarine.co.th
 0.0.0.0 americanrange.com
-0.0.0.0 anadolutatili.com
-0.0.0.0 anaekppystdy4initalymedicalconsultancy.duckdns.org
 0.0.0.0 andreabo1.myftp.biz
 0.0.0.0 andreelapeyre.com
 0.0.0.0 andremaraisbeleggings.co.za
@@ -63,7 +68,7 @@
 0.0.0.0 archiv.bg
 0.0.0.0 areac-agr.com
 0.0.0.0 aresorganics.com
-0.0.0.0 asadairtravel.com
+0.0.0.0 arowanafishforsale.com
 0.0.0.0 ascentive.com
 0.0.0.0 ashoakacharya.com
 0.0.0.0 askarindo.or.id
@@ -92,7 +97,7 @@
 0.0.0.0 bd12.52lishi.com
 0.0.0.0 bd18.52lishi.com
 0.0.0.0 bd19.52lishi.com
-0.0.0.0 beachview.co.za
+0.0.0.0 beforeshithappens.com
 0.0.0.0 beibei.xx007.cc
 0.0.0.0 bepgroup.com.hk
 0.0.0.0 besserblok-ufa.ru
@@ -109,19 +114,23 @@
 0.0.0.0 blog.241optical.com
 0.0.0.0 blog.anytimeneeds.com
 0.0.0.0 blog.hanxe.com
+0.0.0.0 bolescy.com
 0.0.0.0 bolidar.dnset.com
 0.0.0.0 bondbuild.com.sg
+0.0.0.0 bonyamin.com
 0.0.0.0 bookmytripping.com
 0.0.0.0 bpo.correct.go.th
 0.0.0.0 brasstec.com.br
 0.0.0.0 brbs.customer.netspace.net.au
 0.0.0.0 brenleyquartzgh.com
 0.0.0.0 brewmethods.com
+0.0.0.0 britica.vn
 0.0.0.0 btlocum.pl
 0.0.0.0 bugansavings.com
 0.0.0.0 buydishtv.in
 0.0.0.0 byqkdy.com
 0.0.0.0 cameli.vn
+0.0.0.0 capath.vn
 0.0.0.0 caravella.com.br
 0.0.0.0 cassiagumrefined.com
 0.0.0.0 cassovia.sk
@@ -137,7 +146,6 @@
 0.0.0.0 cfs5.tistory.com
 0.0.0.0 ch.rmu.ac.th
 0.0.0.0 changematterscounselling.com
-0.0.0.0 chantdownproster.com
 0.0.0.0 chanvribloc.com
 0.0.0.0 charm.bizfxr.com
 0.0.0.0 chauffeursontravel.com
@@ -146,16 +154,16 @@
 0.0.0.0 chinhdropfile80.myvnc.com
 0.0.0.0 chipmarkets.com
 0.0.0.0 chj.m.dodo52.com
-0.0.0.0 cista-dobra-voda.com
+0.0.0.0 cinnamoncreations.com.au
 0.0.0.0 clearwaterriveroutfitting.com
 0.0.0.0 client.yaap.co.uk
 0.0.0.0 clinicamariademolina.com
-0.0.0.0 cloud.wmsinfo.com.br
 0.0.0.0 common-factor.nl
 0.0.0.0 compesat.com
 0.0.0.0 complan.hu
 0.0.0.0 complanbt.hu
 0.0.0.0 comtechadsl.com
+0.0.0.0 config.cqhbkjzx.com
 0.0.0.0 config.kuaisousou.top
 0.0.0.0 consultingcy.com
 0.0.0.0 corazondelcielo.mx
@@ -163,7 +171,7 @@
 0.0.0.0 cqjcc.org
 0.0.0.0 crimebranch.in
 0.0.0.0 crittersbythebay.com
-0.0.0.0 crudenergyllc.com
+0.0.0.0 cryptoomarket.com
 0.0.0.0 csnserver.com
 0.0.0.0 csw.hu
 0.0.0.0 cvc.com.pl
@@ -182,17 +190,22 @@
 0.0.0.0 daynightgym.com
 0.0.0.0 de.gsearch.com.de
 0.0.0.0 deixameuskls.tripod.com
+0.0.0.0 demo10.onbm.ir
+0.0.0.0 demo13.dsdemosite.com
 0.0.0.0 denkagida.com.tr
 0.0.0.0 depgrup.com
 0.0.0.0 depot7.com
 0.0.0.0 derivativespro.in
+0.0.0.0 dev.apshaps.se
 0.0.0.0 dev.sebpo.net
+0.0.0.0 dev1.xicom.us
 0.0.0.0 dev5.mypagevn.com
 0.0.0.0 dezcom.com
 0.0.0.0 dfcf.91756.cn
 0.0.0.0 dfd.zhzy999.net
 0.0.0.0 dfzm.91756.cn
 0.0.0.0 dgecolesdepolice.bf
+0.0.0.0 dgnj.cn
 0.0.0.0 dhlservices.duckdns.org
 0.0.0.0 diazavendano.cl
 0.0.0.0 dichvuvesinhcongnghiep.top
@@ -200,6 +213,7 @@
 0.0.0.0 dieselmoreno.cl
 0.0.0.0 digilib.dianhusada.ac.id
 0.0.0.0 digiovanniconsultants.com
+0.0.0.0 digital-marketing-institute-delhi.empeeevents.com
 0.0.0.0 digitaldog.de
 0.0.0.0 discuzx.win
 0.0.0.0 ditec.com.my
@@ -224,6 +238,7 @@
 0.0.0.0 down.gogominer.com
 0.0.0.0 down.haote.com
 0.0.0.0 down.pcclear.com
+0.0.0.0 down.pdf.cqmjkjzx.com
 0.0.0.0 down.startools.co.kr
 0.0.0.0 down.tgjkbx.cn
 0.0.0.0 down.upzxt.com
@@ -246,6 +261,7 @@
 0.0.0.0 dreamtrips.cheap
 0.0.0.0 drools-moved.46999.n3.nabble.com
 0.0.0.0 druzim.freewww.biz
+0.0.0.0 drwendyellis.com
 0.0.0.0 dsiun.com
 0.0.0.0 dtsay.xyz
 0.0.0.0 dudulm.com
@@ -256,15 +272,17 @@
 0.0.0.0 dx2.qqtn.com
 0.0.0.0 dx30.siweidaoxiang.com
 0.0.0.0 dx60.siweidaoxiang.com
+0.0.0.0 dzapasigroup.usapglobal.org
 0.0.0.0 dzinestudio87.co.uk
-0.0.0.0 dzyzz.cn
 0.0.0.0 e.dangeana.com
+0.0.0.0 earningtipsbd.com
 0.0.0.0 easydown.workday360.cn
 0.0.0.0 ebook.w3wvg.com
 0.0.0.0 edicolanazionale.it
 0.0.0.0 emir-elbahr.com
 0.0.0.0 enc-tech.com
 0.0.0.0 entre-potes.mon-application.com
+0.0.0.0 eposar.com.ar
 0.0.0.0 er-bulisguvenligi.com
 0.0.0.0 ermekanik.com
 0.0.0.0 esolvent.pl
@@ -278,6 +296,7 @@
 0.0.0.0 fazi.pl
 0.0.0.0 fenoma.net
 0.0.0.0 fidiag.kymco.com
+0.0.0.0 fifa555easy.329263.com
 0.0.0.0 figuig.net
 0.0.0.0 fileco.jobkorea.co.kr
 0.0.0.0 filen3.utengine.co.kr
@@ -289,21 +308,22 @@
 0.0.0.0 fkd.derpcity.ru
 0.0.0.0 flex.ru
 0.0.0.0 flood-protection.org
-0.0.0.0 foodbooktv.com
 0.0.0.0 fordlamdong.com.vn
-0.0.0.0 foreveramericabrands.com
 0.0.0.0 foreverprecious.org
+0.0.0.0 foxfennecs.com
 0.0.0.0 frin.ng
 0.0.0.0 fte.m.dodo52.com
+0.0.0.0 ftpcnc-p2sp.pconline.com.cn
 0.0.0.0 ftpftpftp.com
 0.0.0.0 funletters.net
-0.0.0.0 funpartyrent.com
 0.0.0.0 futuregraphics.com.ar
 0.0.0.0 futurodelasciudades.org
 0.0.0.0 g.7230.com
 0.0.0.0 g0ogle.free.fr
+0.0.0.0 gainsdirectory.com
 0.0.0.0 galuhtea.com
 0.0.0.0 gamee.top
+0.0.0.0 garage.themebuffets.com
 0.0.0.0 garenanow.myvnc.com
 0.0.0.0 garenanow4.myvnc.com
 0.0.0.0 gargiulo.com.ar
@@ -315,7 +335,6 @@
 0.0.0.0 ghislain.dartois.pagesperso-orange.fr
 0.0.0.0 ghwls44.gabia.io
 0.0.0.0 gimscompany.com
-0.0.0.0 glitchexotika.com
 0.0.0.0 glitzygal.net
 0.0.0.0 gnimelf.net
 0.0.0.0 go.xsuad.com
@@ -325,9 +344,9 @@
 0.0.0.0 grafchekloder.rebatesrule.net
 0.0.0.0 granportale.com.br
 0.0.0.0 green100.cn
-0.0.0.0 greindustry.com
 0.0.0.0 gssgroups.com
 0.0.0.0 gx-10012947.file.myqcloud.com
+0.0.0.0 h1.iwakalong.ru
 0.0.0.0 habbotips.free.fr
 0.0.0.0 hagebakken.no
 0.0.0.0 halcat.com
@@ -335,6 +354,7 @@
 0.0.0.0 handrush.com
 0.0.0.0 hanoihub.vn
 0.0.0.0 hazel-azure.co.th
+0.0.0.0 hdxa.net
 0.0.0.0 healtina.com
 0.0.0.0 heavenif.co.za
 0.0.0.0 hediyegapsinternet.com
@@ -373,7 +393,6 @@
 0.0.0.0 innovation4crisis.org
 0.0.0.0 instanttechnology.com.au
 0.0.0.0 intelicasa.ro
-0.0.0.0 intertradeassociates.com.au
 0.0.0.0 intoxicated-twilight.com
 0.0.0.0 iran-gold.com
 0.0.0.0 iremart.es
@@ -382,12 +401,13 @@
 0.0.0.0 itsnixielou.com
 0.0.0.0 ixlonbcc.com
 0.0.0.0 izu.co.jp
-0.0.0.0 jaincakes.xyz
 0.0.0.0 jamiekaylive.com
 0.0.0.0 jansen-heesch.nl
 0.0.0.0 janvierassocies.fr
+0.0.0.0 jaservicioscontables.casteviajes.com
 0.0.0.0 javatank.ru
 0.0.0.0 jcedu.org
+0.0.0.0 jessymart.flexyhub.com
 0.0.0.0 jjjexx.329263.com
 0.0.0.0 jmtc.91756.cn
 0.0.0.0 jointings.org
@@ -404,6 +424,7 @@
 0.0.0.0 jyv.fi
 0.0.0.0 jzny.com.cn
 0.0.0.0 k.ludong.tv
+0.0.0.0 k3.etfiber.net
 0.0.0.0 kabiru.ru
 0.0.0.0 kachsurf.mylftv.com
 0.0.0.0 kamasu11.cafe24.com
@@ -415,15 +436,15 @@
 0.0.0.0 kazanturkiye20gb.com
 0.0.0.0 kbzsa.cn
 0.0.0.0 kdsp.co.kr
-0.0.0.0 keckarangdadap.pekalongankab.go.id
 0.0.0.0 kejpa.com
-0.0.0.0 kgfs3.329263.com
 0.0.0.0 khan-associates.net
 0.0.0.0 khunnapap.com
 0.0.0.0 kiaowadubai.com
 0.0.0.0 kiencuonghotel.vn
+0.0.0.0 kingdomcarecan.com
 0.0.0.0 kingsland.systemsolution.me
 0.0.0.0 kjbm9.mof.gov.cn
+0.0.0.0 kleinendeli.co.za
 0.0.0.0 knightsbridgeenergy.com.ng
 0.0.0.0 koppemotta.com.br
 0.0.0.0 koralli.if.ua
@@ -440,7 +461,6 @@
 0.0.0.0 langyabbs.05yun.cn
 0.0.0.0 lcfurtado.com.br
 0.0.0.0 ld.mediaget.com
-0.0.0.0 leaksfly.com
 0.0.0.0 learnbuddy.com
 0.0.0.0 learningcomputing.org
 0.0.0.0 lebedyn.info
@@ -451,8 +471,8 @@
 0.0.0.0 lifeapt.biz
 0.0.0.0 lists.ibiblio.org
 0.0.0.0 lists.mplayerhq.hu
+0.0.0.0 livetrack.in
 0.0.0.0 livetvsports.ml
-0.0.0.0 lodergord.com
 0.0.0.0 log.yundabao.cn
 0.0.0.0 lsyr.net
 0.0.0.0 lt02.datacomspecialists.net
@@ -468,9 +488,7 @@
 0.0.0.0 malin-akerman.net
 0.0.0.0 margopassadorestylist.com
 0.0.0.0 marksidfgs.ug
-0.0.0.0 marocaji.com
 0.0.0.0 matt-e.it
-0.0.0.0 mattayom31.go.th
 0.0.0.0 mazury4x4.pl
 0.0.0.0 mbgrm.com
 0.0.0.0 mediamatkat.fi
@@ -497,12 +515,14 @@
 0.0.0.0 mistydeblasiophotography.com
 0.0.0.0 mkk09.kr
 0.0.0.0 mkontakt.az
-0.0.0.0 mlbfreestream.gq
+0.0.0.0 mlbfreestream.ml
 0.0.0.0 mmc.ru.com
+0.0.0.0 mobiadnews.com
 0.0.0.0 mobilier-modern.ro
 0.0.0.0 mochandmade.us
 0.0.0.0 modcloudserver.eu
 0.0.0.0 moha-group.com
+0.0.0.0 mononet.lv
 0.0.0.0 moscow11.at
 0.0.0.0 mountveederwines.com
 0.0.0.0 moyo.co.kr
@@ -512,7 +532,6 @@
 0.0.0.0 mteng.mmj7.com
 0.0.0.0 mtfelektroteknik.com
 0.0.0.0 mueblesjcp.cl
-0.0.0.0 mutec.jp
 0.0.0.0 mv360.net
 0.0.0.0 mvb.kz
 0.0.0.0 mxpiqw.am.files.1drv.com
@@ -539,7 +558,7 @@
 0.0.0.0 newsun-shop.com
 0.0.0.0 newxing.com
 0.0.0.0 nfbio.com
-0.0.0.0 nmal.info
+0.0.0.0 nofound.000webhostapp.com
 0.0.0.0 nprg.ru
 0.0.0.0 nst-corporation.com
 0.0.0.0 nwcsvcs.com
@@ -553,18 +572,17 @@
 0.0.0.0 omsk-osma.ru
 0.0.0.0 omuzgor.tj
 0.0.0.0 onestin.ro
-0.0.0.0 onlink-aoiuvr.com
-0.0.0.0 onyourmarkmindsetgo.com
 0.0.0.0 openclient.sroinfo.com
 0.0.0.0 operasanpiox.bravepages.com
 0.0.0.0 opolis.io
+0.0.0.0 oralloy.com
 0.0.0.0 osdsoft.com
 0.0.0.0 osesama.jp
 0.0.0.0 osheoufhusheoghuesd.ru
+0.0.0.0 oskarnews.gazashare.com
 0.0.0.0 otanityre.in
 0.0.0.0 ouhfuosuoosrhfzr.su
 0.0.0.0 ovelcom.com
-0.0.0.0 ozemag.com
 0.0.0.0 ozkayalar.com
 0.0.0.0 p1.lingpao8.com
 0.0.0.0 p2.lingpao8.com
@@ -582,6 +600,7 @@
 0.0.0.0 patch3.99ddd.com
 0.0.0.0 patrickchan-hk.net
 0.0.0.0 pawel-sikora.pl
+0.0.0.0 pcexperts.co.za
 0.0.0.0 pcginsure.com
 0.0.0.0 pcsoori.com
 0.0.0.0 pedidoslalacteo.com.ar
@@ -590,7 +609,6 @@
 0.0.0.0 ph4s.ru
 0.0.0.0 phamchilong.com
 0.0.0.0 phudieusongma.com
-0.0.0.0 physiodelacomba.ch
 0.0.0.0 piapendet.com
 0.0.0.0 pink99.com
 0.0.0.0 pmguide.net
@@ -599,6 +617,7 @@
 0.0.0.0 ponto50.com.br
 0.0.0.0 poolbook.ir
 0.0.0.0 ppl.ac.id
+0.0.0.0 privacytoolsstore.website
 0.0.0.0 probost.cz
 0.0.0.0 profitcoach.net
 0.0.0.0 prosoc.nl
@@ -611,10 +630,12 @@
 0.0.0.0 qfjys.com.img.800cdn.com
 0.0.0.0 qmsled.com
 0.0.0.0 qppl.angiang.gov.vn
+0.0.0.0 qualitygolfbags.com
 0.0.0.0 quartier-midi.be
 0.0.0.0 quehagoencartagena.com
 0.0.0.0 raacts.in
 0.0.0.0 raifix.com.br
+0.0.0.0 rangebroadcasting.com
 0.0.0.0 rapidex.co.rs
 0.0.0.0 rc.ixiaoyang.cn
 0.0.0.0 readytalk.github.io
@@ -630,24 +651,22 @@
 0.0.0.0 ret.space
 0.0.0.0 rezaazizi.ir
 0.0.0.0 rinkaisystem-ht.com
-0.0.0.0 riskxai.com
 0.0.0.0 riyanenterprise.com
 0.0.0.0 rkverify.securestudies.com
 0.0.0.0 robertmcardle.com
 0.0.0.0 robotrade.com.vn
 0.0.0.0 rollingmill.in
 0.0.0.0 rollscar.pk
-0.0.0.0 ross-ocenka.ru
 0.0.0.0 rossogato.com
 0.0.0.0 ruisgood.ru
 0.0.0.0 rusch.nu
 0.0.0.0 s.51shijuan.com
 0.0.0.0 s.kk30.com
+0.0.0.0 s14b.91danji.com
+0.0.0.0 s14b.groundyun.cn
 0.0.0.0 sabiupd.compress.to
 0.0.0.0 saboorjaam.ir
 0.0.0.0 sabupda.vizvaz.com
-0.0.0.0 saglikliapp.live
-0.0.0.0 sahathaikasetpan.com
 0.0.0.0 salvation24.com
 0.0.0.0 salvationbd.com
 0.0.0.0 sandovalgraphics.com
@@ -656,9 +675,9 @@
 0.0.0.0 scglobal.co.th
 0.0.0.0 schollaert.eu
 0.0.0.0 schoongezicht.org
+0.0.0.0 seeanu.ru
 0.0.0.0 seenext.com.pk
 0.0.0.0 sefp-boispro.fr
-0.0.0.0 seibee.biz
 0.0.0.0 selekture.com
 0.0.0.0 selfuseproperty.com
 0.0.0.0 selvikoyunciftligi.com
@@ -668,6 +687,7 @@
 0.0.0.0 serviciosinfoware.cl
 0.0.0.0 sexybaccarat.329263.com
 0.0.0.0 sfoodfeedf.org
+0.0.0.0 sgm.pc6.com
 0.0.0.0 shacked.webdepot.co.il
 0.0.0.0 shahtoba.faqserv.com
 0.0.0.0 shaoxiaofei.cn
@@ -705,35 +725,33 @@
 0.0.0.0 srvmanos.no-ip.info
 0.0.0.0 ss.cybersoft-vn.com
 0.0.0.0 sslv3.at
+0.0.0.0 staging.popclusive.asia
 0.0.0.0 starcountry.net
 0.0.0.0 static.ilclock.com
 0.0.0.0 static.topxgun.com
 0.0.0.0 stationaryhome.com
-0.0.0.0 stdykungeduationaldeveloper15investmenqg.duckdns.org
 0.0.0.0 stecit.nl
 0.0.0.0 steelbuildings.com
-0.0.0.0 stevewalker.com.au
 0.0.0.0 story-maker.jp
 0.0.0.0 stubbackup.ru
 0.0.0.0 suc9898.com
 0.0.0.0 suncity116.com
 0.0.0.0 support.clz.kr
-0.0.0.0 surecake.com
 0.0.0.0 sv.pvroe.com
 0.0.0.0 svkacademy.com
 0.0.0.0 svn.cc.jyu.fi
 0.0.0.0 sweaty.dk
 0.0.0.0 swwbia.com
-0.0.0.0 sylvaclouds.eu
 0.0.0.0 symanreni.mysecondarydns.com
 0.0.0.0 szxypt.com
 0.0.0.0 t.honker.info
+0.0.0.0 tandenblekenhoofddorp.nl
 0.0.0.0 taraward.com
 0.0.0.0 taxpos.com
 0.0.0.0 tcy.198424.com
-0.0.0.0 teacherlinx.com
 0.0.0.0 teardrop-productions.ro
 0.0.0.0 technoites.com
+0.0.0.0 tecnobella.cl
 0.0.0.0 tehrenberg.com
 0.0.0.0 telescopelms.com
 0.0.0.0 telsiai.info
@@ -752,19 +770,21 @@
 0.0.0.0 theptiendat.com
 0.0.0.0 therecruiter.io
 0.0.0.0 thesecuritysoftwarescannerindustrgreat.duckdns.org
+0.0.0.0 thevision.ro
 0.0.0.0 thornadops.com
 0.0.0.0 thosewebbs.com
 0.0.0.0 tianangdep.com
+0.0.0.0 tianmaouae.com
 0.0.0.0 tianzi8.cn
 0.0.0.0 tibinst.mefound.com
 0.0.0.0 tibok.lflink.com
 0.0.0.0 ticte.in
 0.0.0.0 timlinger.com
 0.0.0.0 tmhfashionhouse.co.za
+0.0.0.0 toe.polinema.ac.id
 0.0.0.0 tonghopgia.net
 0.0.0.0 tonydong.com
 0.0.0.0 tonyzone.com
-0.0.0.0 tovarentertainment.in
 0.0.0.0 tsd.jxwan.com
 0.0.0.0 tsredco.telangana.gov.in
 0.0.0.0 tulli.info
@@ -773,6 +793,7 @@
 0.0.0.0 tup.com.cn
 0.0.0.0 tutuler.com
 0.0.0.0 uc-56.ru
+0.0.0.0 ufabet168168.329263.com
 0.0.0.0 ugc.wegame.com.cn
 0.0.0.0 ultimatelamborghiniexperience.com
 0.0.0.0 ultimatepointsstore.com
@@ -781,7 +802,6 @@
 0.0.0.0 unicorpbrunei.com
 0.0.0.0 unilevercopabr.mbiz20.net
 0.0.0.0 uniquehall.net
-0.0.0.0 uniteddefence8forstdygorvermentsocialeyx.duckdns.org
 0.0.0.0 unokaoeojoejfghr.ru
 0.0.0.0 upd.m.dodo52.com
 0.0.0.0 update.iwang8.com
@@ -802,7 +822,8 @@
 0.0.0.0 videoswebcammsn.free.fr
 0.0.0.0 vietducbio.com
 0.0.0.0 vigilar.com.br
-0.0.0.0 visagepk.com
+0.0.0.0 vip.recommendedtoyoo.com
+0.0.0.0 virustreatments.empeeevents.com
 0.0.0.0 visualdata.ru
 0.0.0.0 vitinhvnt.com
 0.0.0.0 vitromed.ro
@@ -822,7 +843,6 @@
 0.0.0.0 webq.wikaba.com
 0.0.0.0 webserverthai.com
 0.0.0.0 websound.ru
-0.0.0.0 webxposndytechnologyhardsoftware6buyers.duckdns.org
 0.0.0.0 welcometothefuture.com
 0.0.0.0 whgaty.com
 0.0.0.0 wiebe-sanitaer.de
@@ -837,14 +857,13 @@
 0.0.0.0 wsg.com.sg
 0.0.0.0 wt8.siweidaoxiang.com
 0.0.0.0 wt9.siweidaoxiang.com
+0.0.0.0 wwealthllc.com
 0.0.0.0 www2.recepty5.com
 0.0.0.0 x2vn.com
 0.0.0.0 xia.vzboot.com
 0.0.0.0 xiaidown.com
-0.0.0.0 xiaoma-10021647.file.myqcloud.com
 0.0.0.0 xiegushi.cn
 0.0.0.0 xirfad.com
-0.0.0.0 xn--transfgran-mgbbb600b.ro
 0.0.0.0 xsdtx.xyz
 0.0.0.0 xsryx.xyz
 0.0.0.0 xtremeforumz.com
@@ -852,6 +871,8 @@
 0.0.0.0 xxbdr.xyz
 0.0.0.0 xxwl.kuaiyunds.com
 0.0.0.0 xxxze.co.nu
+0.0.0.0 y-sani.com
+0.0.0.0 yc5.timeisletitgo.ru
 0.0.0.0 yeez.net
 0.0.0.0 yesky.51down.org.cn
 0.0.0.0 yesky.xzstatic.com
@@ -867,7 +888,6 @@
 0.0.0.0 zdy.17110.com
 0.0.0.0 zenkashow.com
 0.0.0.0 zentealounge.com.au
-0.0.0.0 zethla.com
 0.0.0.0 zeytinyagisabun.com
 0.0.0.0 zhetysu360.kz
 0.0.0.0 zhzy999.net
@@ -876,6 +896,8 @@
 0.0.0.0 zoetermeerov.nl
 0.0.0.0 zoeydeutchweb.com
 0.0.0.0 zonefound.com.cn
+0.0.0.0 zskyjov.cz
 0.0.0.0 ztqsc.com.cn
 0.0.0.0 zumodelima.com
 0.0.0.0 zxcet.xyz
+0.0.0.0 zzv.seeanu.ru
diff --git a/urlhaus-filter-hosts.txt b/urlhaus-filter-hosts.txt
index 7be43566..c845489d 100644
--- a/urlhaus-filter-hosts.txt
+++ b/urlhaus-filter-hosts.txt
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Hosts Blocklist
-# Updated: Wed, 29 Apr 2020 12:09:39 UTC
+# Updated: Thu, 30 Apr 2020 00:09:24 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -97,6 +97,7 @@
 0.0.0.0 1001-territoires.fr
 0.0.0.0 1001newsng.com
 0.0.0.0 1001tur-tver.ru
+0.0.0.0 10022020newfolder1002002231-service1002.space
 0.0.0.0 100alternance.fr
 0.0.0.0 100kala.ir
 0.0.0.0 100percentforkids.org
@@ -300,6 +301,7 @@
 0.0.0.0 1jpg1host.net16.net
 0.0.0.0 1jxmt.com
 0.0.0.0 1kvk.com
+0.0.0.0 1l04.timeisletitgo.ru
 0.0.0.0 1liveradar.de
 0.0.0.0 1lo.lukow.pl
 0.0.0.0 1localexpert.com
@@ -620,6 +622,7 @@
 0.0.0.0 2wheelrider.com
 0.0.0.0 2winresidency.com
 0.0.0.0 2x2print.com
+0.0.0.0 2xmy.timeisletitgo.ru
 0.0.0.0 2yb5.andichust.ru
 0.0.0.0 2yf32q.ch.files.1drv.com
 0.0.0.0 2yourwealth.com.au
@@ -778,6 +781,7 @@
 0.0.0.0 3ppuubb.com
 0.0.0.0 3prokladkaeu.com
 0.0.0.0 3pubeu.com
+0.0.0.0 3q9h.timeisletitgo.ru
 0.0.0.0 3rdperson.ml
 0.0.0.0 3rdsectorsupportafrica.org
 0.0.0.0 3rytghjhkss.cf
@@ -800,6 +804,7 @@
 0.0.0.0 3uso2927wiwofeppwi29.com
 0.0.0.0 3v5.net
 0.0.0.0 3v6bz7g2bncvrinwmaawz2t4.file.truckbennels.com
+0.0.0.0 3vc6.seeanu.ru
 0.0.0.0 3vdataguard.com
 0.0.0.0 3vventures.com
 0.0.0.0 3wereareyou.icu
@@ -1356,6 +1361,8 @@
 0.0.0.0 ForRealTraffic.com
 0.0.0.0 Heavensconcept.ng
 0.0.0.0 Mozilla.theworkpc.com
+0.0.0.0 Muanha.xyz
+0.0.0.0 NCERTSOLUTIONACADEMY.COM
 0.0.0.0 NeedCareers.com
 0.0.0.0 OpalAlert.com
 0.0.0.0 RENTITOUT.CO
@@ -1406,6 +1413,7 @@
 0.0.0.0 a.pomfe.co
 0.0.0.0 a.rokket.space
 0.0.0.0 a.safe.moe
+0.0.0.0 a.seeanu.ru
 0.0.0.0 a.teamworx.ph
 0.0.0.0 a.turnuvam.org
 0.0.0.0 a.uchi.moe
@@ -2227,6 +2235,7 @@
 0.0.0.0 addtomap.ru
 0.0.0.0 adducity.ga
 0.0.0.0 addvitashop.com
+0.0.0.0 ade.topepics.com
 0.0.0.0 adebeo.co.in
 0.0.0.0 adecityevents.com
 0.0.0.0 aded.co.in
@@ -2514,6 +2523,7 @@
 0.0.0.0 aelinks.com
 0.0.0.0 aellly.000webhostapp.com
 0.0.0.0 aelmas.5gbfree.com
+0.0.0.0 aelogica.com
 0.0.0.0 aemgrup.com.tr
 0.0.0.0 aemo-mecanique-usinage.fr
 0.0.0.0 aengineeringltd.com
@@ -3550,6 +3560,7 @@
 0.0.0.0 alexandrearchitecte.fr
 0.0.0.0 alexandrearealty.com
 0.0.0.0 alexandrecabello.com.br
+0.0.0.0 alexandredekerchove.com
 0.0.0.0 alexandrepaiva.com
 0.0.0.0 alexandrerivelli.com
 0.0.0.0 alexandria.run
@@ -5748,6 +5759,7 @@
 0.0.0.0 ariadna.org.ua
 0.0.0.0 ariafm.gr
 0.0.0.0 arianasdelinewdorpplaza.com
+0.0.0.0 arianegerkens.com
 0.0.0.0 arianrayaneh.com
 0.0.0.0 arianshopping.com
 0.0.0.0 ariasms.ir
@@ -8216,6 +8228,7 @@
 0.0.0.0 batchenangmuasieuben.com
 0.0.0.0 batdongsan3b.com
 0.0.0.0 batdongsanbamien24h.com
+0.0.0.0 batdongsanbentre.com.vn
 0.0.0.0 batdongsanhadong.info
 0.0.0.0 batdongsanhathanh.net
 0.0.0.0 batdongsanhuyphat68.com
@@ -9126,6 +9139,7 @@
 0.0.0.0 beton-dubna.com
 0.0.0.0 betonbrother.com
 0.0.0.0 betonkeritesgyar.hu
+0.0.0.0 betopceo.com
 0.0.0.0 betprediksi.com
 0.0.0.0 betrachtungssicht.de
 0.0.0.0 betrogroup.com
@@ -10419,6 +10433,7 @@
 0.0.0.0 blueboxxinterior.com
 0.0.0.0 bluebunni.com
 0.0.0.0 blueclutch.com
+0.0.0.0 bluecollarfinancial.net
 0.0.0.0 bluecrayonconsulting.com
 0.0.0.0 bluecrestpress.com
 0.0.0.0 bluecrystalband.com
@@ -10659,6 +10674,7 @@
 0.0.0.0 boldreflectionsmn.com
 0.0.0.0 bolegreenhotel.com
 0.0.0.0 bolehprediksi.com
+0.0.0.0 bolescy.com
 0.0.0.0 bolesni.net
 0.0.0.0 bolhomes.stringbind.info
 0.0.0.0 bolidar.dnset.com
@@ -11277,6 +11293,7 @@
 0.0.0.0 britan.mx
 0.0.0.0 britanniasuperior.uk
 0.0.0.0 briteindonesia.com
+0.0.0.0 britica.vn
 0.0.0.0 british-rainbow.com
 0.0.0.0 britishvoices.co.uk
 0.0.0.0 brittanishantel.com
@@ -12379,6 +12396,7 @@
 0.0.0.0 capamh.org
 0.0.0.0 capanoandassociates.com
 0.0.0.0 capasso.de
+0.0.0.0 capath.vn
 0.0.0.0 capaxinfiniti.ml
 0.0.0.0 capbangkok.com
 0.0.0.0 capebethel.org
@@ -13331,11 +13349,13 @@
 0.0.0.0 cercolorlaghi.com
 0.0.0.0 cerebro-coaching.fr
 0.0.0.0 cerenkent.com
+0.0.0.0 cerisiers.be
 0.0.0.0 ceritaislami.000webhostapp.com
 0.0.0.0 cermiamakmur.com
 0.0.0.0 ceronamtinclube.icu
 0.0.0.0 cerotex.webprojemiz.com
 0.0.0.0 cerovica.com
+0.0.0.0 cerradocredito.com.br
 0.0.0.0 cerrahibeyinpedi.com
 0.0.0.0 cerrajeria-sabbath.holy-animero.com
 0.0.0.0 cerrajeriajimenez.cl
@@ -13670,6 +13690,7 @@
 0.0.0.0 cheapraccoontraps.com
 0.0.0.0 cheapseoprovider.com
 0.0.0.0 cheapsilkscreenprinting.com
+0.0.0.0 cheaptours.in.ua
 0.0.0.0 cheaptrainticket.cogbiz-infotech.com
 0.0.0.0 cheaptravel-spb.ru
 0.0.0.0 cheapwebvn.net
@@ -13746,6 +13767,7 @@
 0.0.0.0 cherdavis.com
 0.0.0.0 chergo.es
 0.0.0.0 cherinetiles.com
+0.0.0.0 cheriyilbuilders.com
 0.0.0.0 cherkassy.info
 0.0.0.0 cheron.co.uk
 0.0.0.0 cherrett.net
@@ -16392,6 +16414,7 @@
 0.0.0.0 cryptomub.com
 0.0.0.0 cryptonias.top
 0.0.0.0 cryptoniaz.top
+0.0.0.0 cryptoomarket.com
 0.0.0.0 cryptorgasms.com
 0.0.0.0 cryptoseed.co.za
 0.0.0.0 cryptostruct.bunker.zone
@@ -17236,6 +17259,7 @@
 0.0.0.0 dareldjazair.com
 0.0.0.0 darelyateem.org
 0.0.0.0 darianinc.com
+0.0.0.0 daricci.de
 0.0.0.0 darice.in
 0.0.0.0 dario-mraz.from.hr
 0.0.0.0 dariojucker.edelegation.com
@@ -18130,6 +18154,7 @@
 0.0.0.0 demo10.onbm.ir
 0.0.0.0 demo12.maybay.net
 0.0.0.0 demo13.abc-it.net.au
+0.0.0.0 demo13.dsdemosite.com
 0.0.0.0 demo15.versamall.com
 0.0.0.0 demo15.webindia.com
 0.0.0.0 demo19.keltron.org
@@ -18256,6 +18281,7 @@
 0.0.0.0 dentsov.ru
 0.0.0.0 denttrade.com.kg
 0.0.0.0 denuchoco.com
+0.0.0.0 denunciesoftwareilegal.org.br
 0.0.0.0 denverfs.org
 0.0.0.0 denverktrade.xyz
 0.0.0.0 deny.radio-denisa.com
@@ -18525,6 +18551,7 @@
 0.0.0.0 dev.abitotv.it
 0.0.0.0 dev.adrianapatsalou.com
 0.0.0.0 dev.ameekids.com
+0.0.0.0 dev.apshaps.se
 0.0.0.0 dev.artoonsolutions.com
 0.0.0.0 dev.ateamymm.ca
 0.0.0.0 dev.bassetlawscouts.org.uk
@@ -19106,6 +19133,7 @@
 0.0.0.0 digital-cloud.healthycheapfast.com
 0.0.0.0 digital-design.com.cn
 0.0.0.0 digital-life.pro
+0.0.0.0 digital-marketing-institute-delhi.empeeevents.com
 0.0.0.0 digital-vision.nl
 0.0.0.0 digital.audiobookjunkie.com
 0.0.0.0 digital.etnasoft.eu
@@ -20561,6 +20589,7 @@
 0.0.0.0 drinkfoodapp.com
 0.0.0.0 drinkgusto.sg
 0.0.0.0 drinklass.com.br
+0.0.0.0 drinkopolykopen.nl
 0.0.0.0 drischler.de
 0.0.0.0 drive.carlsongracieanaheim.com
 0.0.0.0 drive.deescreationstore.com
@@ -20932,6 +20961,7 @@
 0.0.0.0 duoliprudential.com.watchdogdns.duckdns.org
 0.0.0.0 duomasters.com
 0.0.0.0 duongcaoky.com
+0.0.0.0 duongfpt.ga
 0.0.0.0 duongmanhtuan.com
 0.0.0.0 duoscript.com
 0.0.0.0 duotechgroup.com
@@ -21112,6 +21142,7 @@
 0.0.0.0 dywanypers.pl
 0.0.0.0 dyyhfk120.com
 0.0.0.0 dzain.com.br
+0.0.0.0 dzapasigroup.usapglobal.org
 0.0.0.0 dzbo.dp.ua
 0.0.0.0 dzbooster.com
 0.0.0.0 dzcorlandyu.band
@@ -26069,6 +26100,7 @@
 0.0.0.0 francini.dk
 0.0.0.0 francis-china.com
 0.0.0.0 franciscossc.pbworks.com
+0.0.0.0 francois-champion.com
 0.0.0.0 francois-rommens.fr
 0.0.0.0 francoise-vauzeilles.com
 0.0.0.0 francoisebon.fr
@@ -29458,6 +29490,7 @@
 0.0.0.0 h.j990981.ru
 0.0.0.0 h.top4top.io
 0.0.0.0 h.valerana44.ru
+0.0.0.0 h1.iwakalong.ru
 0.0.0.0 h112321.s08.test-hf.su
 0.0.0.0 h13.doshimotai.ru
 0.0.0.0 h135460.s08.test-hf.su
@@ -34848,6 +34881,7 @@
 0.0.0.0 jasclean.sk
 0.0.0.0 jascopump.com
 0.0.0.0 jaseminedenise.com
+0.0.0.0 jaservicioscontables.casteviajes.com
 0.0.0.0 jasesoi.com
 0.0.0.0 jaset.com.mx
 0.0.0.0 jashneadab.org
@@ -35145,6 +35179,7 @@
 0.0.0.0 jessijonesstar.com
 0.0.0.0 jessikarkan.com
 0.0.0.0 jesswalsh.co.uk
+0.0.0.0 jessymart.flexyhub.com
 0.0.0.0 jester.com.au
 0.0.0.0 jet2.didev.id
 0.0.0.0 jetallied.com
@@ -36373,6 +36408,7 @@
 0.0.0.0 kam.vladistart.art
 0.0.0.0 kamadecor.ru
 0.0.0.0 kamagra-wolf.com
+0.0.0.0 kamagra.in.rs
 0.0.0.0 kamagra4uk.com
 0.0.0.0 kamajankowska.com
 0.0.0.0 kamakran.ru
@@ -37928,6 +37964,7 @@
 0.0.0.0 koranpeduli.co.id
 0.0.0.0 korastation.com
 0.0.0.0 koratmobilya.xyz
+0.0.0.0 koravit.zaeteaw.net
 0.0.0.0 korayche2002.free.fr
 0.0.0.0 korbi-studio.com
 0.0.0.0 korbiel.info
@@ -45324,6 +45361,7 @@
 0.0.0.0 monodoze.com
 0.0.0.0 monoit.eu
 0.0.0.0 monomind.co.kr
+0.0.0.0 mononet.lv
 0.0.0.0 monopeets.com
 0.0.0.0 monrottweiler.fr
 0.0.0.0 monset.it
@@ -45470,6 +45508,7 @@
 0.0.0.0 morrell-stinson.com
 0.0.0.0 morricone.kayakodev.com
 0.0.0.0 morrissan.com
+0.0.0.0 morruko.antesos.com
 0.0.0.0 morsengthaithai.com
 0.0.0.0 morshinnet.ru
 0.0.0.0 mortalityreview.net
@@ -46417,6 +46456,7 @@
 0.0.0.0 myloanbaazar.com
 0.0.0.0 mylocal.dk
 0.0.0.0 mylocal.no
+0.0.0.0 mylocalfoodie.com.au
 0.0.0.0 myloglogistica.com.br
 0.0.0.0 mylokipanel.cf
 0.0.0.0 mylokipanel.ga
@@ -49823,6 +49863,7 @@
 0.0.0.0 oraio.com.py
 0.0.0.0 oralcamp.com.br
 0.0.0.0 oralflora.jp
+0.0.0.0 oralloy.com
 0.0.0.0 oramos.com.ar
 0.0.0.0 oranbet.ml
 0.0.0.0 orange-county-loans.com
@@ -50023,6 +50064,7 @@
 0.0.0.0 osirisre.online
 0.0.0.0 osiyo555.com
 0.0.0.0 osk-hornet.pl
+0.0.0.0 oskarnews.gazashare.com
 0.0.0.0 osliving.com
 0.0.0.0 osmanager.com.br
 0.0.0.0 osmanisports.com
@@ -50289,6 +50331,7 @@
 0.0.0.0 oz-dn.org
 0.0.0.0 oz-link.com
 0.0.0.0 oz-tekpersonelkiyafetleri.com
+0.0.0.0 oz.timeisletitgo.ru
 0.0.0.0 oz4eai75936b8d.com
 0.0.0.0 oz7p.dk
 0.0.0.0 oz9lla.dk
@@ -53158,6 +53201,7 @@
 0.0.0.0 privacymails.space
 0.0.0.0 privacytools.life
 0.0.0.0 privacytools.site
+0.0.0.0 privacytoolsstore.website
 0.0.0.0 privat-cyprian.sk
 0.0.0.0 private-accounting.com
 0.0.0.0 private-dining.com.ua
@@ -53450,6 +53494,7 @@
 0.0.0.0 prom-alp.kz
 0.0.0.0 prom-engineering.com
 0.0.0.0 promacsolutions.mx
+0.0.0.0 promassager.ga
 0.0.0.0 promdon.dn.ua
 0.0.0.0 promente.it
 0.0.0.0 promep.utrng.edu.mx
@@ -57539,6 +57584,7 @@
 0.0.0.0 sagiri.org
 0.0.0.0 saglikbakanligi20gbinternet.com
 0.0.0.0 saglikbakanligindanhediye20gb.com
+0.0.0.0 saglikgoalapp.site
 0.0.0.0 saglikliapp.live
 0.0.0.0 sagliklibedenim.com
 0.0.0.0 sagrathi.com
@@ -58757,6 +58803,7 @@
 0.0.0.0 sedotwcsejakarta.com
 0.0.0.0 seductivestrands.com
 0.0.0.0 see.prblm.li
+0.0.0.0 seeanu.ru
 0.0.0.0 seecareer.com
 0.0.0.0 seednext.work
 0.0.0.0 seedopk.org
@@ -60233,6 +60280,7 @@
 0.0.0.0 silverliningcoaching.com.au
 0.0.0.0 silverlinktechnologies.com
 0.0.0.0 silveroks.com.ua
+0.0.0.0 silverstargalaxy.com.silverstartv.website
 0.0.0.0 silverstoltsen.com
 0.0.0.0 silverswiss.com
 0.0.0.0 silvesterinmailand.com
@@ -60282,6 +60330,7 @@
 0.0.0.0 simorghealborz.com
 0.0.0.0 simp-consulting.pl
 0.0.0.0 simpelway.dk.linux154.unoeuro-server.com
+0.0.0.0 simpl.pw
 0.0.0.0 simplatecplc.com
 0.0.0.0 simple-it.org
 0.0.0.0 simple-it.si
@@ -61161,6 +61210,7 @@
 0.0.0.0 so-nettel.ml
 0.0.0.0 so.nevisconsultants.com
 0.0.0.0 so370.com
+0.0.0.0 so4.seeanu.ru
 0.0.0.0 so766.sohost.pl
 0.0.0.0 soa.com.pk
 0.0.0.0 soafinance.com
@@ -62394,6 +62444,7 @@
 0.0.0.0 staging.pashminadevelopers.com
 0.0.0.0 staging.phandeeyar.org
 0.0.0.0 staging.playhualien.com
+0.0.0.0 staging.popclusive.asia
 0.0.0.0 staging.presthemes.com
 0.0.0.0 staging.securenetworks.pk
 0.0.0.0 staging.semperkitchen.com
@@ -62720,6 +62771,7 @@
 0.0.0.0 steinoe.dk
 0.0.0.0 steinplatten-tirol.at
 0.0.0.0 stekols.ru
+0.0.0.0 stelamedien.de
 0.0.0.0 stelastraveldiary.com
 0.0.0.0 steldesign.com
 0.0.0.0 stella.pk
@@ -63512,6 +63564,7 @@
 0.0.0.0 sunaner.com
 0.0.0.0 sunart-5.com
 0.0.0.0 sunblessvgp.com
+0.0.0.0 sunboom-gift.com
 0.0.0.0 sunchipaint.com.vn
 0.0.0.0 suncity116.com
 0.0.0.0 suncity727.com
@@ -64187,6 +64240,7 @@
 0.0.0.0 t2lisboa.lisbonlab.com
 0.0.0.0 t2tdesigns.com
 0.0.0.0 t3-thanglongcapital.top
+0.0.0.0 t37b.iwakalong.ru
 0.0.0.0 t3dgraphics.com
 0.0.0.0 t5forums.com
 0.0.0.0 t6226.com
@@ -64722,6 +64776,7 @@
 0.0.0.0 taxready.in
 0.0.0.0 taxtell.ru
 0.0.0.0 taxtionfree.co.in
+0.0.0.0 taxukrebates.com
 0.0.0.0 tay.batt2u.com
 0.0.0.0 taybabuilders.com
 0.0.0.0 tayebsojib.com
@@ -70543,6 +70598,7 @@
 0.0.0.0 vip-watch.store
 0.0.0.0 vip.lijinxi.com
 0.0.0.0 vip.maohuagong.com
+0.0.0.0 vip.recommendedtoyoo.com
 0.0.0.0 vip.zbfcxx.cn
 0.0.0.0 vip163.cf
 0.0.0.0 vip163.ga
@@ -70614,6 +70670,7 @@
 0.0.0.0 virtuoushairline.org
 0.0.0.0 virtuspartners.cl
 0.0.0.0 viruscheckmake.gq
+0.0.0.0 virustreatments.empeeevents.com
 0.0.0.0 visa.indonesia.nl
 0.0.0.0 visa.org.ua
 0.0.0.0 visaatlantis.com
@@ -74031,6 +74088,7 @@
 0.0.0.0 ybuat49ounh.kaligodfrey.casa
 0.0.0.0 ybuzzfmdy.cf
 0.0.0.0 yc.satnam.ru
+0.0.0.0 yc5.timeisletitgo.ru
 0.0.0.0 ycg-tw.com
 0.0.0.0 ych.jp
 0.0.0.0 ychynt.com
@@ -75228,5 +75286,6 @@
 0.0.0.0 zzjph.com
 0.0.0.0 zzlong.xyz
 0.0.0.0 zzpit.dk
+0.0.0.0 zzv.seeanu.ru
 0.0.0.0 zzyin.cn
 0.0.0.0 zzz78.tk
diff --git a/urlhaus-filter-online.txt b/urlhaus-filter-online.txt
index 995cb164..778e8af8 100644
--- a/urlhaus-filter-online.txt
+++ b/urlhaus-filter-online.txt
@@ -1,5 +1,5 @@
 ! Title: abuse.ch URLhaus Online Malicious URL Blocklist
-! Updated: Wed, 29 Apr 2020 12:09:39 UTC
+! Updated: Thu, 30 Apr 2020 00:09:24 UTC
 ! Expires: 1 day (update frequency)
 ! Repo: https://gitlab.com/curben/urlhaus-filter
 ! License: https://creativecommons.org/publicdomain/zero/1.0/
@@ -15,11 +15,13 @@
 1.246.222.134
 1.246.222.14
 1.246.222.153
+1.246.222.165
 1.246.222.174
 1.246.222.20
 1.246.222.228
 1.246.222.232
 1.246.222.234
+1.246.222.237
 1.246.222.245
 1.246.222.249
 1.246.222.36
@@ -27,7 +29,6 @@
 1.246.222.4
 1.246.222.41
 1.246.222.43
-1.246.222.44
 1.246.222.49
 1.246.222.62
 1.246.222.63
@@ -44,7 +45,6 @@
 1.246.223.146
 1.246.223.15
 1.246.223.18
-1.246.223.223
 1.246.223.3
 1.246.223.30
 1.246.223.32
@@ -84,8 +84,8 @@
 103.237.173.218
 103.240.249.121
 103.245.199.222
+103.247.217.147
 103.254.205.135
-103.255.235.219
 103.31.47.214
 103.49.56.38
 103.51.249.64
@@ -96,6 +96,9 @@
 103.92.25.95
 104.148.124.120
 104.152.156.22
+104.168.169.137
+104.168.198.194
+104.175.99.243
 104.192.108.19
 104.33.52.85
 106.104.115.213
@@ -112,29 +115,27 @@
 106.248.202.245
 107.158.154.88
 107.158.154.99
-108.174.197.76
 108.190.31.236
 108.214.240.100
 108.220.3.201
 108.237.60.93
 108.77.246.129
-108.95.162.21
 109.104.197.153
-109.107.249.137
 109.124.90.229
 109.167.200.82
 109.167.226.84
 109.185.173.21
 109.185.229.159
+109.185.26.178
 109.233.196.232
-109.248.58.238
 109.86.85.253
 109.88.185.119
 109.96.57.246
+110.155.51.173
 110.179.30.218
-110.18.194.234
 110.182.107.42
 110.182.213.91
+110.34.28.113
 110.34.3.142
 110.35.239.25
 110.42.10.141
@@ -146,6 +147,7 @@
 111.185.126.63
 111.185.192.249
 111.185.227.170
+111.185.231.198
 111.185.235.13
 111.185.48.248
 111.38.25.106
@@ -163,24 +165,14 @@
 111.38.30.47
 111.38.9.115
 111.40.79.79
-111.42.102.131
-111.42.102.136
-111.42.102.89
-111.42.103.28
-111.42.103.37
 111.42.103.45
-111.42.103.93
+111.42.103.55
 111.42.67.73
-111.43.223.108
-111.43.223.114
-111.43.223.151
-111.43.223.182
-111.43.223.201
-111.43.223.79
-111.43.223.86
+111.43.223.17
 111.61.52.53
 111.90.187.162
 111.93.169.90
+112.122.61.250
 112.123.109.200
 112.123.61.18
 112.156.36.178
@@ -190,8 +182,8 @@
 112.167.14.237
 112.167.148.70
 112.167.218.221
-112.170.165.71
 112.170.23.21
+112.184.231.90
 112.184.88.60
 112.185.140.99
 112.185.94.183
@@ -209,9 +201,9 @@
 112.78.45.158
 113.11.95.254
 113.218.234.32
+113.221.145.204
 113.221.50.64
 113.240.186.132
-113.245.189.4
 113.254.169.251
 113.75.14.148
 114.168.158.117
@@ -227,37 +219,39 @@
 114.234.104.158
 114.234.150.187
 114.234.69.205
-114.235.202.162
+114.235.202.95
 114.235.246.18
 114.236.152.230
 114.239.112.118
 114.239.128.231
 114.239.242.70
 114.239.25.119
+114.239.37.159
 114.239.46.132
 114.239.79.212
 114.79.172.42
 115.207.177.5
 115.209.252.115
-115.216.214.215
+115.213.176.80
+115.216.210.105
 115.48.151.80
 115.49.46.254
 115.49.74.215
-115.50.229.168
+115.49.76.131
 115.51.125.66
-115.52.126.127
+115.53.63.184
 115.54.175.125
 115.55.9.181
 115.58.100.249
 115.58.98.171
+115.59.118.51
 115.59.15.145
 115.59.77.58
+115.61.2.125
+115.63.60.199
 115.77.186.182
 115.85.65.211
-116.114.95.108
-116.114.95.123
-116.114.95.232
-116.114.95.234
+116.114.95.50
 116.177.178.206
 116.206.164.46
 117.123.171.105
@@ -267,8 +261,10 @@
 117.63.51.128
 117.86.24.209
 117.87.44.106
+117.90.128.14
 117.90.89.95
 117.93.176.207
+117.93.216.98
 117.95.173.64
 117.95.194.127
 117.95.226.223
@@ -286,10 +282,8 @@
 118.46.7.246
 118.99.179.164
 118.99.239.217
-119.125.131.57
 119.194.91.157
 119.2.48.159
-119.203.9.192
 119.206.2.248
 119.212.101.8
 119.77.165.204
@@ -312,14 +306,14 @@
 120.69.89.50
 121.122.87.76
 121.135.146.40
-121.136.137.7
 121.140.141.73
-121.148.122.219
 121.148.72.160
 121.150.77.164
 121.154.107.249
 121.155.233.13
 121.155.233.159
+121.159.208.28
+121.162.174.59
 121.163.48.30
 121.176.31.174
 121.177.37.127
@@ -342,14 +336,13 @@
 121.233.24.190
 121.233.68.89
 121.86.113.254
-122.227.125.161
 122.234.175.245
+122.241.24.146
 123.0.198.186
 123.0.209.88
 123.10.148.8
 123.10.155.32
-123.10.51.103
-123.11.73.248
+123.10.229.210
 123.122.232.190
 123.13.5.90
 123.148.140.145
@@ -357,9 +350,9 @@
 123.194.60.238
 123.241.112.94
 123.51.152.54
-124.119.138.199
-124.230.99.203
+123.96.134.180
 124.67.89.70
+125.121.152.251
 125.130.59.163
 125.136.182.124
 125.136.238.170
@@ -381,6 +374,8 @@
 139.99.113.2
 13pope.com
 14.102.71.10
+14.113.229.49
+14.141.175.107
 14.161.4.53
 14.33.86.236
 14.34.165.243
@@ -392,13 +387,11 @@
 14.48.245.16
 14.48.41.82
 14.49.212.151
-14.50.235.236
 14.54.95.158
 14.55.136.146
 14.55.144.142
 141.0.178.134
 141.226.28.195
-141.226.94.115
 142.11.194.209
 142.11.195.135
 142.11.206.45
@@ -406,8 +399,6 @@
 144.136.155.166
 145.255.26.115
 146.71.79.230
-147.75.67.253
-150.co.il
 151.232.56.134
 151.236.38.234
 152.249.225.24
@@ -419,13 +410,12 @@
 162.212.112.240
 162.212.113.149
 162.212.113.70
-162.212.114.137
-162.212.114.50
 162.212.115.102
 162.250.126.186
 163.13.182.105
 163.22.51.1
 163.47.145.202
+165.227.220.189
 165.227.220.53
 165.73.60.72
 167.114.85.125
@@ -449,17 +439,15 @@
 174.2.176.60
 174.48.14.129
 175.10.145.138
-175.10.73.252
 175.11.193.122
 175.200.153.48
 175.202.162.120
+175.208.203.123
 175.210.50.4
 175.211.16.150
 175.212.31.241
-175.212.52.9
 175.213.134.89
 175.215.226.31
-175.4.192.21
 176.108.58.123
 176.113.161.101
 176.113.161.104
@@ -474,17 +462,20 @@
 176.113.161.133
 176.113.161.40
 176.113.161.41
+176.113.161.45
 176.113.161.47
 176.113.161.51
 176.113.161.52
+176.113.161.57
 176.113.161.65
+176.113.161.66
 176.113.161.67
 176.113.161.68
 176.113.161.71
-176.113.161.72
+176.113.161.76
 176.113.161.84
 176.113.161.86
-176.113.161.89
+176.113.161.87
 176.113.161.91
 176.113.161.92
 176.113.161.93
@@ -514,7 +505,6 @@
 178.134.248.74
 178.134.61.94
 178.136.195.90
-178.151.143.2
 178.165.122.141
 178.169.165.90
 178.19.183.14
@@ -522,14 +512,12 @@
 178.212.54.200
 178.214.73.181
 178.22.117.102
-178.233.234.188
 178.242.54.236
 178.34.183.30
 178.48.235.59
 179.108.246.34
 179.111.8.164
 179.127.180.9
-179.156.196.13
 179.60.84.7
 179.99.210.161
 180.104.183.200
@@ -544,12 +532,14 @@
 180.117.89.28
 180.117.91.251
 180.118.100.106
+180.120.12.85
 180.123.208.212
 180.123.29.68
 180.123.59.159
 180.124.126.199
 180.124.151.219
 180.124.174.33
+180.124.214.4
 180.124.6.47
 180.176.105.41
 180.176.110.243
@@ -584,22 +574,23 @@
 181.49.241.50
 182.113.226.230
 182.113.55.206
-182.116.107.161
-182.117.101.153
-182.119.102.175
+182.121.152.74
 182.124.218.35
+182.126.101.85
+182.126.213.171
 182.126.238.159
+182.127.201.42
 182.160.101.51
 182.160.125.229
 182.160.98.250
 182.171.202.23
 182.222.195.145
-182.222.195.192
 182.233.0.252
 183.100.109.156
 183.105.206.26
 183.106.201.118
-183.156.0.180
+183.107.57.170
+183.130.71.167
 183.221.125.206
 183.4.28.24
 183.4.30.251
@@ -608,7 +599,6 @@
 185.12.78.161
 185.136.193.70
 185.138.123.179
-185.172.110.208
 185.172.110.216
 185.172.110.224
 185.172.110.232
@@ -616,6 +606,7 @@
 185.172.110.243
 185.172.110.250
 185.181.10.234
+185.212.129.54
 185.227.64.59
 185.244.39.123
 185.34.16.231
@@ -626,7 +617,6 @@
 185.94.33.22
 186.120.84.242
 186.122.73.201
-186.179.243.112
 186.188.241.98
 186.225.120.173
 186.227.145.138
@@ -635,7 +625,6 @@
 186.251.253.134
 186.34.4.40
 186.42.255.230
-186.73.188.132
 187.12.10.98
 187.136.250.27
 187.142.7.199
@@ -644,9 +633,11 @@
 187.33.71.68
 187.36.134.227
 187.44.167.14
+187.63.19.112
 187.72.59.113
 187.73.21.30
 187.76.62.90
+188.133.189.193
 188.138.200.32
 188.138.203.128
 188.142.181.9
@@ -657,7 +648,6 @@
 188.170.177.98
 188.237.212.202
 188.242.242.144
-188.243.5.75
 188.36.121.184
 188.83.202.25
 189.126.70.222
@@ -667,7 +657,6 @@
 190.0.42.106
 190.109.189.120
 190.109.189.204
-190.110.161.252
 190.119.207.58
 190.12.4.98
 190.12.99.194
@@ -685,6 +674,7 @@
 190.187.55.150
 190.196.248.3
 190.206.35.3
+190.211.128.197
 190.214.24.194
 190.4.187.143
 190.7.27.69
@@ -693,7 +683,6 @@
 190.95.76.212
 190.98.36.201
 190.99.117.10
-191.102.123.132
 191.103.252.116
 191.209.53.113
 191.223.54.151
@@ -703,8 +692,6 @@
 191.7.136.37
 191.8.80.207
 192.119.87.242
-192.154.227.193
-192.210.140.199
 192.210.236.38
 192.236.147.189
 192.236.147.67
@@ -713,7 +700,6 @@
 193.38.51.25
 193.95.254.50
 194.0.157.1
-194.169.88.56
 194.180.224.106
 194.180.224.113
 194.180.224.124
@@ -731,14 +717,17 @@
 196.218.53.68
 196.221.144.149
 197.155.66.202
+197.159.2.106
 197.254.106.78
 197.51.235.38
 198.24.75.52
 199.36.76.2
 199.83.200.194
+199.83.203.174
 199.83.203.85
 199.83.204.89
-199.83.206.58
+199.83.205.205
+1l04.timeisletitgo.ru
 2.180.33.118
 2.180.37.166
 2.185.150.180
@@ -756,19 +745,17 @@
 200.111.189.70
 200.180.159.138
 200.2.161.171
-200.207.64.90
 200.217.148.218
 200.222.50.26
+200.233.206.164
 200.30.132.50
 200.38.79.134
 200.6.167.42
 200.69.74.28
-200.85.168.202
 2000kumdo.com
 201.184.163.170
 201.184.241.123
 201.187.102.73
-201.202.55.118
 201.203.212.194
 201.203.27.37
 201.234.138.92
@@ -804,6 +791,7 @@
 203.80.171.149
 203.82.36.34
 203.83.174.227
+206.189.208.7
 208.113.130.13
 209.141.53.115
 209.45.49.177
@@ -814,13 +802,8 @@
 210.76.64.46
 211.106.11.193
 211.107.230.86
-211.137.225.120
-211.137.225.129
 211.137.225.146
-211.137.225.44
-211.137.225.56
-211.137.225.57
-211.137.225.76
+211.137.225.77
 211.179.143.199
 211.187.75.220
 211.192.64.222
@@ -829,12 +812,15 @@
 211.194.32.115
 211.195.27.69
 211.196.28.116
+211.197.212.57
+211.216.116.40
 211.223.166.51
 211.224.8.211
 211.225.152.102
 211.229.56.214
 211.46.69.192
 211.48.208.144
+211.57.175.216
 211.57.194.109
 211.57.89.183
 211.57.93.49
@@ -854,11 +840,9 @@
 213.202.255.4
 213.215.85.141
 213.241.10.110
-213.27.8.6
 213.57.78.231
 213.7.222.78
 216.15.112.251
-216.180.117.214
 216.183.54.169
 216.189.145.11
 216.36.12.98
@@ -869,7 +853,6 @@
 217.8.117.60
 217.8.117.76
 218.144.252.19
-218.154.126.150
 218.156.132.7
 218.156.26.85
 218.157.214.219
@@ -883,10 +866,11 @@
 218.35.55.121
 218.52.230.160
 218.72.196.220
-219.139.237.174
-219.155.159.138
+219.155.169.47
+219.155.173.125
 219.155.209.74
 219.68.1.148
+219.68.242.33
 219.68.245.63
 219.68.251.32
 219.70.63.196
@@ -899,10 +883,10 @@
 220.71.176.94
 220.82.140.17
 221.144.153.139
-221.144.53.126
 221.155.253.61
 221.155.30.60
 221.155.68.193
+221.158.124.81
 221.159.171.90
 221.160.177.130
 221.160.177.226
@@ -910,24 +894,22 @@
 221.167.18.122
 221.226.86.151
 222.105.26.35
-222.113.138.43
 222.116.70.13
 222.138.17.196
+222.138.181.140
 222.139.29.155
 222.140.199.55
 222.185.161.165
 222.185.199.202
 222.185.73.210
+222.187.159.223
 222.187.180.157
 222.187.191.224
 222.188.131.220
-222.188.222.71
-222.217.65.112
 222.242.158.161
 222.243.14.67
 222.74.186.134
 222.81.213.61
-223.154.40.213
 23.122.183.241
 23.228.143.58
 23.247.102.120
@@ -955,9 +937,9 @@
 27.206.66.103
 27.238.33.39
 27.41.175.86
-27.41.182.54
-27.41.222.65
+27.41.224.202
 27.76.91.206
+2xmy.timeisletitgo.ru
 3.zhzy999.net
 3.zhzy999.net3.zhzy999.net
 31.128.173.853.zhzy999.net
@@ -994,12 +976,13 @@
 35.141.217.189
 35.221.223.15
 36.105.62.139
-36.107.174.111
+36.108.228.213
 36.33.138.140
 36.34.150.235
 36.34.234.8
 36.35.160.146
 36.35.160.240
+36.66.105.159
 36.66.111.203
 36.66.133.125
 36.66.139.36
@@ -1008,6 +991,7 @@
 36.67.223.231
 36.67.42.193
 36.74.74.99
+36.89.133.67
 36.89.18.133
 36.91.89.187
 36.91.90.171
@@ -1023,18 +1007,20 @@
 37.34.228.1
 37.34.250.243
 37.49.226.162
-37.49.226.186
+37.49.226.209
 37.49.230.128
 37.54.14.36
 3mandatesmedia.com
+3q9h.timeisletitgo.ru
+3vc6.seeanu.ru
 402musicfest.com
 41.139.209.46
 41.165.130.43
 41.190.63.174
 41.190.70.238
 41.211.112.82
-41.219.185.171
 41.228.175.30
+41.32.132.218
 41.32.170.13
 41.39.182.198
 41.64.170.241
@@ -1042,15 +1028,14 @@
 41.79.234.90
 42.115.25.55
 42.115.86.142
-42.225.210.47
-42.225.217.216
-42.226.69.42
+42.227.186.34
+42.227.202.209
 42.228.192.219
-42.230.253.28
 42.234.108.186
-42.234.202.142
 42.234.247.85
-42.235.55.173
+42.234.86.212
+42.239.132.107
+42.239.168.235
 42.239.77.201
 42.61.99.155
 42.82.191.105
@@ -1063,11 +1048,8 @@
 45.133.9.21
 45.138.97.46
 45.139.236.14
-45.14.150.29
 45.14.151.249
 45.147.228.245
-45.148.122.113
-45.163.149.85
 45.221.78.166
 45.221.78.38
 45.229.22.195
@@ -1075,7 +1057,10 @@
 45.50.228.207
 45.63.61.189
 45.95.168.127
+45.95.168.251
+45.95.168.254
 45.95.168.97
+45.95.169.234
 46.100.251.72
 46.100.56.152
 46.107.48.22
@@ -1096,6 +1081,7 @@
 46.47.106.63
 46.6.1.167
 46.97.76.242
+47.14.99.185
 47.148.102.77
 47.187.120.184
 47.46.231.38
@@ -1119,19 +1105,17 @@
 49.68.213.49
 49.68.226.132
 49.68.235.19
+49.68.250.118
 49.68.54.141
-49.70.137.78
 49.70.234.20
-49.70.237.153
-49.81.252.24
 49.82.14.191
 49.82.249.71
 49.82.252.63
-49.82.255.155
 49.84.125.254
 49.84.93.106
 49.89.115.124
 49.89.139.161
+49.89.228.167
 49.89.231.89
 49.89.234.53
 49.89.64.24
@@ -1140,6 +1124,7 @@
 5.101.196.90
 5.101.213.234
 5.128.62.127
+5.185.85.122
 5.19.248.85
 5.198.241.29
 5.201.130.125
@@ -1155,7 +1140,8 @@
 50.3.177.103
 50.3.177.106
 50.78.15.50
-51.178.81.75
+51.255.170.237
+51.89.119.154
 5321msc.com
 58.120.159.133
 58.209.239.23
@@ -1169,30 +1155,27 @@
 58.243.190.127
 58.243.23.200
 58.40.122.158
-58.54.84.129
 59.0.224.88
 59.0.78.18
+59.1.81.1
 59.12.134.224
 59.174.151.114
 59.2.40.1
 59.22.144.136
-59.23.208.62
 59.3.94.190
 59.4.104.15
+59.55.253.105
 59.7.40.82
 60.186.83.82
-60.188.101.182
-61.168.50.156
 61.247.224.66
+61.52.144.240
 61.56.182.218
-61.58.55.226
 61.60.204.178
 61.70.110.59
 61.70.45.130
 61.82.215.186
 61.83.40.183
 62.103.77.120
-62.117.124.114
 62.122.102.236
 62.140.224.186
 62.201.230.43
@@ -1217,6 +1200,7 @@
 66.96.252.2
 67.8.138.101
 68.129.32.96
+68.134.186.196
 68.174.119.7
 68.204.73.133
 68.255.156.146
@@ -1232,7 +1216,6 @@
 70.142.195.165
 70.39.15.94
 71.11.83.76
-71.14.255.251
 71.171.111.138
 71.250.252.81
 71.79.146.82
@@ -1254,7 +1237,6 @@
 75.127.141.52
 75.3.198.176
 75.55.248.20
-76.108.23.131
 76.174.86.202
 76.243.189.77
 76.250.199.133
@@ -1268,16 +1250,17 @@
 77.121.98.150
 77.192.123.83
 77.27.54.214
-77.43.232.133
 77.46.163.158
 77.71.52.220
 77.79.191.32
 78.186.190.222
 78.186.49.146
 78.189.104.157
+78.189.173.59
 78.39.232.58
 78.45.143.85
 78.8.225.77
+78.85.18.163
 78.96.20.79
 786suncity.com
 79.11.228.219
@@ -1285,7 +1268,6 @@
 79.159.207.150
 79.179.199.159
 79.2.211.133
-79.7.170.58
 79.79.58.94
 79.8.70.162
 80.107.89.207
@@ -1293,6 +1275,7 @@
 80.19.101.218
 80.191.250.164
 80.210.20.94
+80.210.28.73
 80.211.102.87
 80.224.107.163
 80.235.214.123
@@ -1303,6 +1286,7 @@
 81.17.16.122
 81.184.88.173
 81.19.215.118
+81.196.213.134
 81.213.141.184
 81.213.166.175
 81.218.160.29
@@ -1345,19 +1329,19 @@
 84.20.68.26
 84.228.95.204
 84.241.16.78
-84.247.83.74
 84.31.23.33
 84.54.144.151
+85.100.127.218
 85.105.133.15
 85.105.146.79
 85.105.155.39
 85.105.165.236
 85.187.253.219
-85.217.170.105
 85.222.91.82
 85.238.105.94
 85.64.181.50
 85.9.131.122
+85.97.185.220
 85.99.247.39
 86.105.60.204
 86.107.163.176
@@ -1368,13 +1352,12 @@
 87.241.175.89
 87.66.219.63
 87.97.154.37
+87du.vip
 88.102.33.14
 88.156.169.98
 88.201.34.243
 88.218.16.37
 88.218.16.38
-88.218.17.149
-88.218.17.179
 88.220.80.210
 88.225.222.128
 88.248.121.238
@@ -1395,6 +1378,7 @@
 89.40.87.5
 91.134.252.221
 91.149.191.182
+91.177.139.132
 91.187.103.32
 91.187.119.26
 91.191.32.34
@@ -1418,7 +1402,6 @@
 92.45.198.60
 92.51.127.94
 92.55.124.64
-93.102.193.254
 93.116.166.51
 93.119.205.159
 93.119.236.72
@@ -1428,6 +1411,7 @@
 93.176.185.223
 93.185.10.131
 93.56.36.84
+93.70.125.94
 93.73.99.102
 93.77.52.138
 93.93.199.254
@@ -1442,7 +1426,6 @@
 94.230.152.192
 94.244.113.217
 94.244.25.21
-94.41.0.174
 94.53.120.109
 94.64.246.247
 95.132.129.250
@@ -1450,9 +1433,9 @@
 95.167.138.250
 95.167.71.245
 95.170.113.227
+95.170.113.52
 95.170.201.34
 95.210.1.42
-95.217.49.251
 95.231.116.118
 95.243.30.86
 95.86.56.174
@@ -1467,14 +1450,16 @@
 99.121.0.96
 99.50.211.58
 9983suncity.com
+Muanha.xyz
 ZEROTERWWGFBOT.hoesbigmadzero.tk
 a-reality.co.uk
+a.seeanu.ru
 a.xiazai163.com
 aaasolution.co.th
 accentlandscapes.com
 accessyouraudience.com
 acteon.com.ar
-activecost.com.au
+aelogica.com
 agiandsam.com
 agipasesores.com
 agsir.com
@@ -1500,10 +1485,9 @@ alohasoftware.net
 alphaconsumer.net
 am-concepts.ca
 amd.alibuf.com
+amedeoscognamiglio.329263.com
 amemarine.co.th
 americanrange.com
-anadolutatili.com
-anaekppystdy4initalymedicalconsultancy.duckdns.org
 andreabo1.myftp.biz
 andreelapeyre.com
 andremaraisbeleggings.co.za
@@ -1517,7 +1501,7 @@ apware.co.kr
 archiv.bg
 areac-agr.com
 aresorganics.com
-asadairtravel.com
+arowanafishforsale.com
 ascentive.com
 ashoakacharya.com
 askarindo.or.id
@@ -1546,7 +1530,7 @@ bd11.52lishi.com
 bd12.52lishi.com
 bd18.52lishi.com
 bd19.52lishi.com
-beachview.co.za
+beforeshithappens.com
 beibei.xx007.cc
 bepgroup.com.hk
 besserblok-ufa.ru
@@ -1565,19 +1549,23 @@ blankki.com
 blog.241optical.com
 blog.anytimeneeds.com
 blog.hanxe.com
+bolescy.com
 bolidar.dnset.com
 bondbuild.com.sg
+bonyamin.com
 bookmytripping.com
 bpo.correct.go.th
 brasstec.com.br
 brbs.customer.netspace.net.au
 brenleyquartzgh.com
 brewmethods.com
+britica.vn
 btlocum.pl
 bugansavings.com
 buydishtv.in
 byqkdy.com
 cameli.vn
+capath.vn
 caravella.com.br
 cassiagumrefined.com
 cassovia.sk
@@ -1596,7 +1584,6 @@ cf0.pw
 cfs5.tistory.com
 ch.rmu.ac.th
 changematterscounselling.com
-chantdownproster.com
 chanvribloc.com
 charm.bizfxr.com
 chauffeursontravel.com
@@ -1605,11 +1592,10 @@ chinhdropfile.myvnc.com
 chinhdropfile80.myvnc.com
 chipmarkets.com
 chj.m.dodo52.com
-cista-dobra-voda.com
+cinnamoncreations.com.au
 clearwaterriveroutfitting.com
 client.yaap.co.uk
 clinicamariademolina.com
-cloud.wmsinfo.com.br
 codeload.github.com/MeteorAdminz/hidden-tear/zip/master
 codeload.github.com/Visgean/Zeus/zip/translation
 codeload.github.com/beefproject/beef/zip/beef-0.4.6.1
@@ -1619,6 +1605,7 @@ compesat.com
 complan.hu
 complanbt.hu
 comtechadsl.com
+config.cqhbkjzx.com
 config.kuaisousou.top
 consultingcy.com
 corazondelcielo.mx
@@ -1626,7 +1613,7 @@ counciloflight.bravepages.com
 cqjcc.org
 crimebranch.in
 crittersbythebay.com
-crudenergyllc.com
+cryptoomarket.com
 csnserver.com
 csw.hu
 cvc.com.pl
@@ -1645,17 +1632,22 @@ dawaphoto.co.kr
 daynightgym.com
 de.gsearch.com.de
 deixameuskls.tripod.com
+demo10.onbm.ir
+demo13.dsdemosite.com
 denkagida.com.tr
 depgrup.com
 depot7.com
 derivativespro.in
+dev.apshaps.se
 dev.sebpo.net
+dev1.xicom.us
 dev5.mypagevn.com
 dezcom.com
 dfcf.91756.cn
 dfd.zhzy999.net
 dfzm.91756.cn
 dgecolesdepolice.bf
+dgnj.cn
 dhlservices.duckdns.org
 diazavendano.cl
 dichvuvesinhcongnghiep.top
@@ -1663,6 +1655,7 @@ dienmaycu.vn
 dieselmoreno.cl
 digilib.dianhusada.ac.id
 digiovanniconsultants.com
+digital-marketing-institute-delhi.empeeevents.com
 digitaldog.de
 discuzx.win
 ditec.com.my
@@ -1690,6 +1683,7 @@ down.ancamera.co.kr
 down.gogominer.com
 down.haote.com
 down.pcclear.com
+down.pdf.cqmjkjzx.com
 down.startools.co.kr
 down.tgjkbx.cn
 down.upzxt.com
@@ -1706,12 +1700,10 @@ download.pdf00.cn
 download.skycn.com
 download.ttz3.cn
 download.ware.ru
-download.xp666.com/xzqswf/AppConSer.exe
 download.xp666.com/xzqswf/DTPageSet.exe
 download.xp666.com/xzqswf/SerModel.exe
 download.xp666.com/xzqswf/WebConSer.exe
 download.xp666.com/xzqswf/WebConneSer.exe
-download.xp666.com/xzqswf/iniser.exe
 download.xp666.com/xzqswf/setpagetools.exe
 download.zjsyawqj.cn
 download301.wanmei.com
@@ -1724,7 +1716,9 @@ drive.google.com/u/0/uc?id=17MK_rc41hpFJXpVYtF8tkeWaczBfoDTK&export=download
 drive.google.com/u/0/uc?id=1I0-c_3_PA4CFUVxQuWatIce-YMim6K1F&export=download
 drive.google.com/u/0/uc?id=1lf5uj0OZtEz0Da4uloCglElnO0cqqaJ7&export=download
 drive.google.com/u/0/uc?id=1rFX0WSnjWfD_S-CsbnECFidz0FIpqaYm&export=download
+drive.google.com/uc?export=download&id=1Q2PX2OM5w6WFMrF_5lIhxBuqpcaxfjtr
 drive.google.com/uc?export=download&id=1mlGx7wgPzE4ZBxo-LJs6FOkb1G8e1Jsi
+drive.google.com/uc?id=1-3kFaMujRY9yLfLp1Lt1nhK9_KO30wAu&export=download
 drive.google.com/uc?id=1-ChWS7gPh0DGbxuL6tu2KyWbrUuhfErV&export=download
 drive.google.com/uc?id=10QV8bkFLXt4TVcts3XL6yCCrWcFBfwY_&export=download
 drive.google.com/uc?id=112jsUltb4w2BnM8N8AKG-q63YaBnYGzc&export=download
@@ -1733,22 +1727,36 @@ drive.google.com/uc?id=12IDCXkN27CT4vCwYlW7w1jT8p8oRpsM5&export=download
 drive.google.com/uc?id=12PFLEzNygHG9rBtWTs7Odc_-Fj36ZELd&export=download
 drive.google.com/uc?id=13Wy2LH4JTb8qi8ueMTc-U0Tb8mh1X9yy&export=download
 drive.google.com/uc?id=13qNBvJQi4QsxZj1LKO3vyFFIKqwYyU4L&export=download
+drive.google.com/uc?id=13rTqmEw0lHEDa_wXQSw0KI24xn1nDFQB&export=download
 drive.google.com/uc?id=14y_4HYfQwhCvzMaVfNnEDj7IR9Nuxm1K&export=download
 drive.google.com/uc?id=15UTvz9E9kgBqPQh87xLaZzbp3rOP3g2t&export=download
+drive.google.com/uc?id=15mI9KSEuwl_wsS8S3LJwb2FcIHbSbm08&export=download
+drive.google.com/uc?id=16j2VaMco6eeK2r7WysV9DpxKGmOHLKRl&export=download
 drive.google.com/uc?id=16tp0IOdfmnfufmuoz5IIBWl9O4NyS_hX&export=download
+drive.google.com/uc?id=171sjKm4dE3BDRjMPH_KiL9VW6Q_Hrw9K&export=download
+drive.google.com/uc?id=17HM5rH8-k-9i5xdKZro7QprMFDmH50S8&export=download
 drive.google.com/uc?id=18zj7g3KQJ7bDXszqBS8rLt_2Wip66bVR&export=download
 drive.google.com/uc?id=19vU1VkPmiJ58uyP_UeeuhGAB5sB4bxAp&export=download
+drive.google.com/uc?id=1AuxC_ZGdjxVqDVqZyFJM0fBv6WqnxJtm&export=download
+drive.google.com/uc?id=1BdR4L1TYa3K2GnSa75ADdBppHZBa7-ed&export=download
+drive.google.com/uc?id=1CMACUq33RYMigRwzqUOw3PMy0Jqj5rfC&export=download
 drive.google.com/uc?id=1D3NjICn2RJXxpMYKNJ7KF-n7MYnObw7F&export=download
+drive.google.com/uc?id=1E3fBq0KE5bRJQWhXpOcRJfH4koP2u2Yt&export=download
+drive.google.com/uc?id=1F7lZWTsnxJpLeNPWHxjHYrxtq0bb3sKn&export=download
+drive.google.com/uc?id=1FMh4uRMRHBQeb620WgaFHXtJRb3SQCde&export=download
 drive.google.com/uc?id=1H8B2uqA_OhfEqZ3rsMitf215JCc3Uccy&export=download
 drive.google.com/uc?id=1I-m-Zdvb1MI-EE99NWHEPjL8qWaX7E0U&export=download
+drive.google.com/uc?id=1J0OilLtgVEjK-pZs3nr6JqXhwV4XpL_Z&export=download
 drive.google.com/uc?id=1Jd-fg_69lzQii2dHdah9bVcU9EFddRHU&export=download
 drive.google.com/uc?id=1JmECsHqy6HjTxpjASVw-SNz0zKfNr2WJ&export=download
 drive.google.com/uc?id=1JqHbzSyi5e_xgTFAOmsM9Q9C3p1kEobk&export=download
 drive.google.com/uc?id=1KETGDx1w0kDxMz5IczKJyZgWld9e5c1z&export=download
 drive.google.com/uc?id=1KLvNsXJIRxAcGQE6EIK_cTXsk-lfFS05&export=download
+drive.google.com/uc?id=1KNQ3yXeap3r--mdyimno8MAA6dCCVVJ9&export=download
 drive.google.com/uc?id=1KftUycky_tXa8SVzMcOK2X3uANZN1V0t&export=download
 drive.google.com/uc?id=1KqpMGwV_KEsl41W2fcb6bm2ZtkULFc2h&export=download
 drive.google.com/uc?id=1KrS8y_CyFXY9BpqaUeWhQ_hYhWyjhK4N&export=download
+drive.google.com/uc?id=1LhafSS6su5DEIN9yyNuQG59h1CvunBvB&export=download
 drive.google.com/uc?id=1MHQ9tNqy3Q0LO-AO6MYt7HjN5erwG0uT&export=download
 drive.google.com/uc?id=1MV5sWw5SnUpR0B3qEodOdVPKyJN_yb3F&export=download
 drive.google.com/uc?id=1Mt0n18Ygg8LjNYMZAL2-rhnac1akjwRV&export=download
@@ -1756,27 +1764,40 @@ drive.google.com/uc?id=1NOPb1NP8ib0cPEdQiBuHrAHIRH0NQPAP&export=download
 drive.google.com/uc?id=1NyLAPTN0d_IwcxoFajkcAS7dlV6c07Ci&export=download
 drive.google.com/uc?id=1O44s2zNgE0bPE8yvvDnVypSQZfSXfS4x&export=download
 drive.google.com/uc?id=1OHb68dx3La1WrT-TKn0amLvVd48wXBY6&export=download
+drive.google.com/uc?id=1Ojo9zZHAdSQo5itSQipXmKZsXMv2wI_F&export=download
 drive.google.com/uc?id=1PFfg0PGxwJDGUcspg0TFqKth5qr4jTjq&export=download
 drive.google.com/uc?id=1QkHocPnhNf3RjYarO_EApYNZODKb3Xhf&export=download
 drive.google.com/uc?id=1RBWxvlXqiYIHkJ2hd1JGx_p5wrmjKrhv&export=download
 drive.google.com/uc?id=1RUJwADhp6K0AzbersMvzoisVyZU7iBZN&export=download
 drive.google.com/uc?id=1S8cPTRhyQzVK7zMuIiRazfn0JDdDawjy&export=download
+drive.google.com/uc?id=1Sfzt17of6fhHwrLcjvvBbz7_oFNQkBz_&export=download
 drive.google.com/uc?id=1TPi_ktVkdrRCy3pqxJMltZcNTmsdlHvJ&export=download
+drive.google.com/uc?id=1UM7LLwZG_6JrCMimZKCPchKpaHX-OqEw&export=download
+drive.google.com/uc?id=1V33RvQYtik_05G8L7j1ZOh2bFRSED1jO&export=download
 drive.google.com/uc?id=1VDUxzMBBpukfU3kMdBmPYfYWG3Z89MM_&export=download
+drive.google.com/uc?id=1WGF1tFV-45XAnPsCiM_-Qa1jVcvmu2L0&export=download
+drive.google.com/uc?id=1WTH7IEtiZxJDXTT08KXqmwWPg06JHKny&export=download
 drive.google.com/uc?id=1Wc7guj9eHqpGNlncefZREXWZNH0aWUsx&export=download
 drive.google.com/uc?id=1Wfn51WwJjih0AVzq_5aGraRrFBRi9IVZ&export=download
 drive.google.com/uc?id=1WrCjviMqwu9VxhiYZ4faDp16H_UvjbvA&export=download
+drive.google.com/uc?id=1X09LDaOz_IjMg7N-pP8BF_Tnnm8QnExR&export=download
 drive.google.com/uc?id=1XclZGNQcpOS9_-Gp-kZ0p7Nzn7LQMwPx&export=download
+drive.google.com/uc?id=1XlTPt0V8Bjg7dEnzwwpkb2hoEE2H8tM_&export=download
+drive.google.com/uc?id=1XqaFobWVywSXdXFrLJLqg5noCKYosbxw&export=download
 drive.google.com/uc?id=1Y0dcICAr-DK7p1kuP8r1QKd5jfCkbVvc&export=download
 drive.google.com/uc?id=1YgSHo_ejaRcEGzhVTgWmWu11HI9abPZh&export=download
 drive.google.com/uc?id=1YtqKuIO8Zm8l1pu5lsEREeuSJNFCxHTf&export=download
 drive.google.com/uc?id=1ZLSUfV4_JuwmjeYprs6ddeCIT_-m_-k9&export=download
+drive.google.com/uc?id=1Zq2cIRaaNM7TRVbn9UmdCzzv8XJDx0uH&export=download
 drive.google.com/uc?id=1ZsGTNlGoFFC-Tgft7aEAND_S4wS5Yxmz&export=download
+drive.google.com/uc?id=1_3nQMmF63589FwDZg4aiGfsKF47kdXb9&export=download
 drive.google.com/uc?id=1_J9KF7cYxbo08SxySiDW_A5SpNjH8Y3E&export=download
 drive.google.com/uc?id=1_NJaUwl89anjer5NcClT2VXJ4WBkM7HN&export=download
+drive.google.com/uc?id=1aUVdetSgECiOL-VvMzdQlw3JEQU9ejht&export=download
 drive.google.com/uc?id=1b-9llLol3vmCcpCI53tbCtW9ez5U6GKL&export=download
 drive.google.com/uc?id=1bB21XsLvOqVr7HeebwTxaKNbdSy_PHXW&export=download
 drive.google.com/uc?id=1c10EoOChw7ScLuCVP3mXaoNyrOVjFNKe&export=download
+drive.google.com/uc?id=1cHcVxXjycwGrlloXfwfwyuBYb8AbYhDK&export=download
 drive.google.com/uc?id=1ccLiEtHnCmWGsVia8uZyQZcZyWxZbwwE&export=download
 drive.google.com/uc?id=1cn5ISDc2CQeyenvhyQxd2IHPIMBqleRG&export=download
 drive.google.com/uc?id=1dIfbX6Le_594WZUuWY3eYsNL12_-jRVP&export=download
@@ -1784,6 +1805,10 @@ drive.google.com/uc?id=1e18RJ3xLqJPL5A_FTe1PtFDORun5h_Jl&export=download
 drive.google.com/uc?id=1eOzacxbxvlB9F9nInX3fdP8sjjlthi3W&export=download
 drive.google.com/uc?id=1eRTPmoUTpVVU19aONDr-yo0-RNkG5l07&export=download
 drive.google.com/uc?id=1eh3cqzgCx2RPJmKMJ9qJwZVYDf5oKI6R&export=download
+drive.google.com/uc?id=1emlap-VVjPLvplwk1BlUfZPCZmwDnIcR&export=download
+drive.google.com/uc?id=1f1d3rde5hbGpubc2ovPffFUpgVfegqj9&export=download
+drive.google.com/uc?id=1f5wJV8kPvxOtLgLmu5Uut92pY4v2n6hE&export=download
+drive.google.com/uc?id=1f74a7W00t2B8bNTNUyavEwZeV-VRE5o4&export=download
 drive.google.com/uc?id=1fiziqiVBMyQmOBhCOdMq6s0AYH0NF5Mc&export=download
 drive.google.com/uc?id=1g9XNPOOFQzRhz0TQmswKWxcYZQHGBABy&export=download
 drive.google.com/uc?id=1gffJIOE8_1uAePD4tLyTYwcAaOLuac0G&export=download
@@ -1800,20 +1825,30 @@ drive.google.com/uc?id=1lXDqsyZ6McKbLWRdrcSiJJ707fxjZmlT&export=download
 drive.google.com/uc?id=1mD5PFNaCbC3L0u1RJ613ABNqooz9YOYK&export=download
 drive.google.com/uc?id=1nAmpLZotYqyFBUcLOlyv5GGKQYzHXZ04&export=download
 drive.google.com/uc?id=1nMAOa5vbNOLS-dZxyxl1IwvuclszEWx1&export=download
+drive.google.com/uc?id=1nNZne0SRFV72I_YtZQR_tlIolJNFJOYL&export=download
+drive.google.com/uc?id=1nUx01QN68doArMSY5zofVlVQUJwHSEb3&export=download
 drive.google.com/uc?id=1oE5CyxxObqvNcnC3CM_Emm2Hd_m8ec7m&export=download
 drive.google.com/uc?id=1pEr7rbgoq6CYiJprApUJOinw3Yppj6oe&export=download
+drive.google.com/uc?id=1qJT-8-sjc1r9MophWSpa3fKeYy-Cmjbq&export=download
+drive.google.com/uc?id=1rRnkMBmRZq569nRYv0xiJt7Ne2sdpaYN&export=download
 drive.google.com/uc?id=1rdZ9utaKBTR0rI9pGcCVFw0GcT9Ubzo7&export=download
 drive.google.com/uc?id=1ri7pvJwMlx53joETQgQ7W7_w6bHFhLds&export=download
+drive.google.com/uc?id=1slNk15jy2OOsxF2I_CatbBIryT8DcJgL&export=download
 drive.google.com/uc?id=1snrBLsfs9VWR5AQicvJlMUn_9o3FFve0&export=download
 drive.google.com/uc?id=1t8YRAHKM74KcWjsWzzdw-UiwMNoqimmq&export=download
 drive.google.com/uc?id=1tTF4lz9irAfRDJUJxPT8DdbXLWesiHyE&export=download
 drive.google.com/uc?id=1tUSojcvJXngze9cnRE5biBLCUbEQosQp&export=download
+drive.google.com/uc?id=1uLm8t4iW_mvS3Ak9csJZdIflRw-XEd30&export=download
+drive.google.com/uc?id=1vhqTMqaZLqYLyuLVIuwBVI5hrpWhweM4&export=download
+drive.google.com/uc?id=1w3oR4guf6JzS2Dx2n3JxVsq6OHOaQyn8&export=download
 drive.google.com/uc?id=1wEGCbnP8C-BA48mwsW4CbincuNurDsbV&export=download
+drive.google.com/uc?id=1wc4G7ZYZTplMHtG2IkWU57fskmLHy1tf&export=download
 drive.google.com/uc?id=1zLQBgYxBZpj1A34ub4EUnahIFX2a4Ytp&export=download
 drive.google.com/uc?id=1zOAa0crJJyjs3DTQk_M_ZqG9gStxV2FG&export=download
 drive.google.com/uc?id=1zpS--8sfyN8bSD4ghtmaXu3yzha6apH6&export=download
 drools-moved.46999.n3.nabble.com
 druzim.freewww.biz
+drwendyellis.com
 dsiun.com
 dtsay.xyz
 dudulm.com
@@ -1824,15 +1859,17 @@ dx1.qqtn.com
 dx2.qqtn.com
 dx30.siweidaoxiang.com
 dx60.siweidaoxiang.com
+dzapasigroup.usapglobal.org
 dzinestudio87.co.uk
-dzyzz.cn
 e.dangeana.com
+earningtipsbd.com
 easydown.workday360.cn
 ebook.w3wvg.com
 edicolanazionale.it
 emir-elbahr.com
 enc-tech.com
 entre-potes.mon-application.com
+eposar.com.ar
 er-bulisguvenligi.com
 ermekanik.com
 esolvent.pl
@@ -1846,6 +1883,7 @@ fastsoft.onlinedown.net
 fazi.pl
 fenoma.net
 fidiag.kymco.com
+fifa555easy.329263.com
 figuig.net
 fileco.jobkorea.co.kr
 filen3.utengine.co.kr
@@ -1862,10 +1900,9 @@ fitmanacademy.com
 fkd.derpcity.ru
 flex.ru
 flood-protection.org
-foodbooktv.com
 fordlamdong.com.vn
-foreveramericabrands.com
 foreverprecious.org
+foxfennecs.com
 frin.ng
 fs12n1.sendspace.com/dlpro/7d6620756eb6d96cdd79d5222a950d65/5e40884d/rdul3d/g.exe
 fs12n2.sendspace.com/dlpro/b9c5235bb3049bbfc7d25856210dd47e/5e418c45/rdul3d/g.exe
@@ -1876,15 +1913,17 @@ fs13n2.sendspace.com/dlpro/1e8c1cd8c02d5526e29b58a15ed1682f/5d768242/ckbps9/rjFN
 fs13n2.sendspace.com/dlpro/420c91b4b59cab211b713393caa97633/5d7425ed/ckbps9/rjfnc6mcj6oaux0.exe
 fs13n4.sendspace.com/dlpro/785e938a0412e80983385f128036ddb0/5d7425ef/ckbps9/rjfnc6mcj6oaux0.exe
 fte.m.dodo52.com
+ftpcnc-p2sp.pconline.com.cn
 ftpftpftp.com
 funletters.net
-funpartyrent.com
 futuregraphics.com.ar
 futurodelasciudades.org
 g.7230.com
 g0ogle.free.fr
+gainsdirectory.com
 galuhtea.com
 gamee.top
+garage.themebuffets.com
 garenanow.myvnc.com
 garenanow4.myvnc.com
 gargiulo.com.ar
@@ -1897,7 +1936,6 @@ ghislain.dartois.pagesperso-orange.fr
 ghwls44.gabia.io
 gimscompany.com
 gist.githubusercontent.com/Zibri/19f9838ffd12349bb2c6c3afddc9388f/raw/01977fd3c7e036c3a38f062f626fd189ba1e1aa3/UEFIVAR.EXE
-glitchexotika.com
 glitzygal.net
 gnimelf.net
 go.xsuad.com
@@ -1908,9 +1946,9 @@ govhotel.us
 grafchekloder.rebatesrule.net
 granportale.com.br
 green100.cn
-greindustry.com
 gssgroups.com
 gx-10012947.file.myqcloud.com
+h1.iwakalong.ru
 habbotips.free.fr
 hagebakken.no
 halcat.com
@@ -1918,6 +1956,7 @@ hanaphoto.co.kr
 handrush.com
 hanoihub.vn
 hazel-azure.co.th
+hdxa.net
 healtina.com
 heavenif.co.za
 hediyegapsinternet.com
@@ -1954,13 +1993,14 @@ in-sect.com
 inapadvance.com
 incrediblepixels.com
 incredicole.com
+indonesias.me:9998/64.exe
+indonesias.me:9998/c64.exe
 ineyes360.com
 ini.egkj.com
 innovation4crisis.org
 instanttechnology.com.au
 intelicasa.ro
 interbus.cz/templates/jsn_dome_free/js/payments/2c.jpg
-intertradeassociates.com.au
 intoxicated-twilight.com
 iran-gold.com
 iremart.es
@@ -1969,12 +2009,13 @@ itd.m.dodo52.com
 itsnixielou.com
 ixlonbcc.com
 izu.co.jp
-jaincakes.xyz
 jamiekaylive.com
 jansen-heesch.nl
 janvierassocies.fr
+jaservicioscontables.casteviajes.com
 javatank.ru
 jcedu.org
+jessymart.flexyhub.com
 jjjexx.329263.com
 jmtc.91756.cn
 jointings.org
@@ -1991,6 +2032,7 @@ jvalert.com
 jyv.fi
 jzny.com.cn
 k.ludong.tv
+k3.etfiber.net
 kabiru.ru
 kachsurf.mylftv.com
 kamasu11.cafe24.com
@@ -2002,9 +2044,7 @@ kassohome.com.tr
 kazanturkiye20gb.com
 kbzsa.cn
 kdsp.co.kr
-keckarangdadap.pekalongankab.go.id
 kejpa.com
-kgfs3.329263.com
 khan-associates.net
 khunnapap.com
 kiaowadubai.com
@@ -2014,8 +2054,10 @@ kimyen.net/upload/CTCTanthu.exe
 kimyen.net/upload/VLMPLogin.exe
 kimyen.net/upload/VLTKBacdau.exe
 kimyen.net/upload/VLTKNhatRac.exe
+kingdomcarecan.com
 kingsland.systemsolution.me
 kjbm9.mof.gov.cn
+kleinendeli.co.za
 knightsbridgeenergy.com.ng
 koppemotta.com.br
 koralli.if.ua
@@ -2033,7 +2075,6 @@ landmarktreks.com
 langyabbs.05yun.cn
 lcfurtado.com.br
 ld.mediaget.com
-leaksfly.com
 learnbuddy.com
 learningcomputing.org
 lebedyn.info
@@ -2044,8 +2085,8 @@ libya-info.com
 lifeapt.biz
 lists.ibiblio.org
 lists.mplayerhq.hu
+livetrack.in
 livetvsports.ml
-lodergord.com
 log.yundabao.cn
 lsyr.net
 lt02.datacomspecialists.net
@@ -2061,9 +2102,7 @@ makosoft.hu
 malin-akerman.net
 margopassadorestylist.com
 marksidfgs.ug
-marocaji.com
 matt-e.it
-mattayom31.go.th
 mazury4x4.pl
 mbgrm.com
 mediamatkat.fi
@@ -2090,12 +2129,14 @@ misterson.com
 mistydeblasiophotography.com
 mkk09.kr
 mkontakt.az
-mlbfreestream.gq
+mlbfreestream.ml
 mmc.ru.com
+mobiadnews.com
 mobilier-modern.ro
 mochandmade.us
 modcloudserver.eu
 moha-group.com
+mononet.lv
 moscow11.at
 mountveederwines.com
 moyo.co.kr
@@ -2105,7 +2146,6 @@ msecurity.ro
 mteng.mmj7.com
 mtfelektroteknik.com
 mueblesjcp.cl
-mutec.jp
 mv360.net
 mvb.kz
 mxpiqw.am.files.1drv.com
@@ -2133,7 +2173,7 @@ news.omumusic.net
 newsun-shop.com
 newxing.com
 nfbio.com
-nmal.info
+nofound.000webhostapp.com
 note.youdao.com/yws/api/personal/file/WEB3a243b322cf83ca7cae587a92916bac7?method=download&inline=true&shareKey=649ac0bb5d5b13d15cbf50b2609e193a
 nprg.ru
 nst-corporation.com
@@ -2168,7 +2208,6 @@ onedrive.live.com/download?cid=01F191D863B4D5A4&resid=1F191D863B4D5A4%21157&auth
 onedrive.live.com/download?cid=01F191D863B4D5A4&resid=1F191D863B4D5A4%21158&authkey=AMsoii5Nr6PomHc
 onedrive.live.com/download?cid=0489C74DE4FACB30&resid=489C74DE4FACB30!109&authkey=AJo32arrzl_VWDQ
 onedrive.live.com/download?cid=052BCF630286E980&resid=52BCF630286E980!110&authkey=ANzSd8lJ7P0rj0Q
-onedrive.live.com/download?cid=052BCF630286E980&resid=52BCF630286E980!113&authkey=AH3RaTLEdBMNuaY
 onedrive.live.com/download?cid=052BCF630286E980&resid=52BCF630286E980%21110&authkey=ANzSd8lJ7P0rj0Q
 onedrive.live.com/download?cid=052BCF630286E980&resid=52BCF630286E980%21113&authkey=AH3RaTLEdBMNuaY
 onedrive.live.com/download?cid=052BCF630286E980&resid=52BCF630286E980%21114&authkey=AHzbIscDx0-2gfk
@@ -2182,7 +2221,6 @@ onedrive.live.com/download?cid=0F48D15360733D06&resid=F48D15360733D06!106&authke
 onedrive.live.com/download?cid=0F48D15360733D06&resid=F48D15360733D06%21106&authkey=AChi3rQkGbcN-KA
 onedrive.live.com/download?cid=0F51D04C9D556964&resid=F51D04C9D556964!114&authkey=ADFDjmcsu3yb9zI
 onedrive.live.com/download?cid=0F51D04C9D556964&resid=F51D04C9D556964%21114&authkey=ADFDjmcsu3yb9zI
-onedrive.live.com/download?cid=1164EA2B0783A793&resid=1164EA2B0783A793!128&authkey=AOoJuE9Aw_IzFkA
 onedrive.live.com/download?cid=1164EA2B0783A793&resid=1164EA2B0783A793%21128&authkey=AOoJuE9Aw_IzFkA
 onedrive.live.com/download?cid=165468846F076EE7&resid=165468846F076EE7%21118&authkey=ANTAsh3IG98aQTE
 onedrive.live.com/download?cid=174A158B69387A7E&resid=174A158B69387A7E!348&authkey=AHnjOxA4uFoxa54
@@ -2204,6 +2242,7 @@ onedrive.live.com/download?cid=2F4D6884E933CB1A&resid=2F4D6884E933CB1A!121&authk
 onedrive.live.com/download?cid=2F947402293C14C1&resid=2F947402293C14C1!119&authkey=APMAkX2CQB9rImU
 onedrive.live.com/download?cid=2F947402293C14C1&resid=2F947402293C14C1%21118&authkey=ACrL2Iiem-ZJer8
 onedrive.live.com/download?cid=2F947402293C14C1&resid=2F947402293C14C1%21119&authkey=APMAkX2CQB9rImU
+onedrive.live.com/download?cid=3112E77688F09693&resid=3112E77688F09693%21320&authkey=AOOUjzuf408Dclw
 onedrive.live.com/download?cid=3112E77688F09693&resid=3112E77688F09693%21321&authkey=ALmpxnBTSBzAUnA
 onedrive.live.com/download?cid=3892A0364CB5DA65&resid=3892A0364CB5DA65!153&authkey=AJS0JKOEQkqjRZE
 onedrive.live.com/download?cid=3892A0364CB5DA65&resid=3892A0364CB5DA65%21152&authkey=AM09Sv26NjxZyn0
@@ -2226,7 +2265,6 @@ onedrive.live.com/download?cid=4B676EA3FF139B93&resid=4B676EA3FF139B93!133&authk
 onedrive.live.com/download?cid=4D4D07581D39B63D&resid=4D4D07581D39B63D!117&authkey=AEZ-8b0NVZTY-T0
 onedrive.live.com/download?cid=4D4D07581D39B63D&resid=4D4D07581D39B63D%21117&authkey=AEZ-8b0NVZTY-T0
 onedrive.live.com/download?cid=4D4D07581D39B63D&resid=4D4D07581D39B63D%21123&authkey=AC38OTZFAR811Jo
-onedrive.live.com/download?cid=4DF11EDA676A355F&resid=4DF11EDA676A355F!130&authkey=!AKd6uxvLjTLVpxU
 onedrive.live.com/download?cid=4E45A2988ED9335B&resid=4E45A2988ED9335B%21108&authkey=ANbjpQXG-iwr4G8
 onedrive.live.com/download?cid=505BE76830F4DC4C&resid=505BE76830F4DC4C!395&authkey=ALWvuB_YHtOgJXw
 onedrive.live.com/download?cid=505BE76830F4DC4C&resid=505BE76830F4DC4C!398&authkey=ABAA_TJd7OHh4So
@@ -2273,7 +2311,6 @@ onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21158&aut
 onedrive.live.com/download?cid=6CD2E7E257C16E46&resid=6CD2E7E257C16E46%21173&authkey=AK5nXNLF4pJAieU
 onedrive.live.com/download?cid=6F5470AD540C86C8&resid=6F5470AD540C86C8!111&authkey=AOUy4UoQ0R3reTs
 onedrive.live.com/download?cid=6F5470AD540C86C8&resid=6F5470AD540C86C8%21111&authkey=AOUy4UoQ0R3reTs
-onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!184&authkey=ACrLgQEORQqW7bE
 onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!185&authkey=AMm2Fsxi2l-Wa9A
 onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!188&authkey=AJY07OLs2lCFJ_o
 onedrive.live.com/download?cid=72EF66C14DF86B76&resid=72EF66C14DF86B76!190&authkey=AJ-3yQm7eZZ9zmE
@@ -2296,7 +2333,6 @@ onedrive.live.com/download?cid=7A5E689DD1DC641F&resid=7A5E689DD1DC641F!119&authk
 onedrive.live.com/download?cid=7A5E689DD1DC641F&resid=7A5E689DD1DC641F!120&authkey=AJj7uEqJvobgFUM
 onedrive.live.com/download?cid=7A5E689DD1DC641F&resid=7A5E689DD1DC641F%21119&authkey=AOzJAi26IzpRqto
 onedrive.live.com/download?cid=7A5E689DD1DC641F&resid=7A5E689DD1DC641F%21120&authkey=AJj7uEqJvobgFUM
-onedrive.live.com/download?cid=7C41DDCFA01AEFF7&resid=7C41DDCFA01AEFF7!5295&authkey=AASCEQJ1MDoDEuo
 onedrive.live.com/download?cid=7C41DDCFA01AEFF7&resid=7C41DDCFA01AEFF7!5296&authkey=ANk3vz5syaF6BNY
 onedrive.live.com/download?cid=7C41DDCFA01AEFF7&resid=7C41DDCFA01AEFF7!5298&authkey=ALbZYIzuqCZFv9s
 onedrive.live.com/download?cid=7C41DDCFA01AEFF7&resid=7C41DDCFA01AEFF7%215295&authkey=AASCEQJ1MDoDEuo
@@ -2317,7 +2353,6 @@ onedrive.live.com/download?cid=9DFCA91D2F466A8D&resid=9DFCA91D2F466A8D!155&authk
 onedrive.live.com/download?cid=A023FE2D1AC611F2&resid=A023FE2D1AC611F2%21497&authkey=ANnphl-4y7qaOUw
 onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B!5043&authkey=AL47wfT9IIirTIM
 onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B!5044&authkey=ACIto9T1ngdHUsw
-onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B!5047&authkey=ABGpmXhJe7B2pEQ
 onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B%215044&authkey=ACIto9T1ngdHUsw
 onedrive.live.com/download?cid=A32AEA2B4355716B&resid=A32AEA2B4355716B%215047&authkey=ABGpmXhJe7B2pEQ
 onedrive.live.com/download?cid=A6DD95780C6C7E21&resid=A6DD95780C6C7E21%216053&authkey=AGFh0AHsTJ7rRkI
@@ -2326,7 +2361,6 @@ onedrive.live.com/download?cid=AE80108520D75992&resid=AE80108520D75992%21113&aut
 onedrive.live.com/download?cid=B03EE17D51411308&resid=B03EE17D51411308!2152&authkey=ABuTaAC83l5UTKs
 onedrive.live.com/download?cid=B03EE17D51411308&resid=B03EE17D51411308%212152&authkey=ABuTaAC83l5UTKs
 onedrive.live.com/download?cid=B24535E108E4D261&resid=B24535E108E4D261!135&authkey=ANFVTJtGpOuMnJc
-onedrive.live.com/download?cid=B3B98222C3EF96E0&resid=B3B98222C3EF96E0!166&authkey=AM6Hz6Klyos92OY
 onedrive.live.com/download?cid=B3B98222C3EF96E0&resid=B3B98222C3EF96E0!167&authkey=AIHUj_YRTDivvYU
 onedrive.live.com/download?cid=B3B98222C3EF96E0&resid=B3B98222C3EF96E0%21166&authkey=AM6Hz6Klyos92OY
 onedrive.live.com/download?cid=B3B98222C3EF96E0&resid=B3B98222C3EF96E0%21167&authkey=AIHUj_YRTDivvYU
@@ -2339,14 +2373,13 @@ onedrive.live.com/download?cid=B8BA73DB68DA7C0B&resid=B8BA73DB68DA7C0B%217521&au
 onedrive.live.com/download?cid=BEAF30DA1F621C9B&resid=BEAF30DA1F621C9B!246&authkey=AFyrcHdutALpu90
 onedrive.live.com/download?cid=BEAF30DA1F621C9B&resid=BEAF30DA1F621C9B%21246&authkey=AFyrcHdutALpu90
 onedrive.live.com/download?cid=C359B1A8BABC6019&resid=C359B1A8BABC6019!1251&authkey=ACt34EIZpzJUGfA
+onedrive.live.com/download?cid=C359B1A8BABC6019&resid=C359B1A8BABC6019%211251&authkey=ACt34EIZpzJUGfA
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1338&authkey=AJNgAmbOsWs75_c
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1340&authkey=AL1Ay3FbTUde6D8
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1342&authkey=ACPr_HTn2jtAXfU
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1343&authkey=ABODYSRxU9L2xxU
-onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1344&authkey=AOzErPpD6MnoKwY
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1345&authkey=AEVvyhOnxHtcDh0
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1346&authkey=AChrNF5VLoV1GF4
-onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E!1347&authkey=AL-ZGe-TTVr921s
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211337&authkey=AFNVu1FsUCZHT5E
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211338&authkey=AJNgAmbOsWs75_c
 onedrive.live.com/download?cid=C3D8AD85BA2ADD4E&resid=C3D8AD85BA2ADD4E%211340&authkey=AL1Ay3FbTUde6D8
@@ -2366,7 +2399,6 @@ onedrive.live.com/download?cid=CF0C6D1A4C15233D&resid=CF0C6D1A4C15233D%21742&aut
 onedrive.live.com/download?cid=CF0C6D1A4C15233D&resid=CF0C6D1A4C15233D%21744&authkey=ADaK4Zftd0YHHHs
 onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85!872&authkey=AP9HcHZTYWO8ZUo
 onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85!874&authkey=ALKzCbXZ-dSCGuM
-onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85!875&authkey=AKa55YbDhQNOC6c
 onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85%21872&authkey=AP9HcHZTYWO8ZUo
 onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85%21874&authkey=ALKzCbXZ-dSCGuM
 onedrive.live.com/download?cid=D06D60404544FB85&resid=D06D60404544FB85%21875&authkey=AKa55YbDhQNOC6c
@@ -2398,11 +2430,9 @@ onedrive.live.com/download?cid=EAE9B5435CFAEBAA&resid=EAE9B5435CFAEBAA!232&authk
 onedrive.live.com/download?cid=EAE9B5435CFAEBAA&resid=EAE9B5435CFAEBAA%21232&authkey=AAuY9sGJCcGPZX8
 onedrive.live.com/download?cid=EFDF2C8D834A1928&resid=EFDF2C8D834A1928!202&authkey=AH1gjQ8j29DArW4
 onedrive.live.com/download?cid=EFDF2C8D834A1928&resid=EFDF2C8D834A1928!203&authkey=AF8Xr99mRQP8Um8
-onedrive.live.com/download?cid=EFDF2C8D834A1928&resid=EFDF2C8D834A1928!204&authkey=AD0NbZlscbg-0sA
 onedrive.live.com/download?cid=EFDF2C8D834A1928&resid=EFDF2C8D834A1928%21202&authkey=AH1gjQ8j29DArW4
 onedrive.live.com/download?cid=EFDF2C8D834A1928&resid=EFDF2C8D834A1928%21203&authkey=AF8Xr99mRQP8Um8
 onedrive.live.com/download?cid=EFDF2C8D834A1928&resid=EFDF2C8D834A1928%21204&authkey=AD0NbZlscbg-0sA
-onedrive.live.com/download?cid=F293CEBB54E5EA71&resid=F293CEBB54E5EA71!195&authkey=AB6tMixR6iRg3d0
 onedrive.live.com/download?cid=F79E41C0E32D3314&resid=F79E41C0E32D3314%211182&authkey=AIQTPtbeRyvLGQk&em=2%22
 onedrive.live.com/download?cid=F7AE097903082806&resid=F7AE097903082806!1368&authkey=ANphh1fIjHVZv6c
 onedrive.live.com/download?cid=F7AE097903082806&resid=F7AE097903082806%211368&authkey=ANphh1fIjHVZv6c
@@ -2413,22 +2443,20 @@ onedrive.live.com/download?cid=FD50774E5CE0E314&resid=FD50774E5CE0E314%21778&aut
 onedrive.live.com/download?cid=FE8464CFA794DA31&resid=FE8464CFA794DA31!377&authkey=AAu9JE4OqfFRyD4
 onedrive.live.com/download?cid=FEDBE7305E742A3E&resid=FEDBE7305E742A3E!149&authkey=AHdtniVa1oS_iBw
 onedrive.live.com/download?cid=FEDBE7305E742A3E&resid=FEDBE7305E742A3E%21149&authkey=AHdtniVa1oS_iBw
-onedrive.live.com/download?cid=FF1D187273DFBF73&resid=FF1D187273DFBF73!693&authkey=AGcpKHnEWFTE_Yc
 onedrive.live.com/download?cid=FF1D187273DFBF73&resid=FF1D187273DFBF73%21693&authkey=AGcpKHnEWFTE_Yc
 onedrive.live.com/download?cid=FF1D187273DFBF73&resid=FF1D187273DFBF73%21694&authkey=AA5jQZJSp0eSr1s
 onestin.ro
-onlink-aoiuvr.com
-onyourmarkmindsetgo.com
 openclient.sroinfo.com
 operasanpiox.bravepages.com
 opolis.io
+oralloy.com
 osdsoft.com
 osesama.jp
 osheoufhusheoghuesd.ru
+oskarnews.gazashare.com
 otanityre.in
 ouhfuosuoosrhfzr.su
 ovelcom.com
-ozemag.com
 ozkayalar.com
 p1.lingpao8.com
 p2.lingpao8.com
@@ -2449,12 +2477,12 @@ pastebin.com/raw/65SFhVdG
 pastebin.com/raw/7i3JCmtU
 pastebin.com/raw/A9VteC51
 pastebin.com/raw/ACLM60KU
+pastebin.com/raw/Amm2ja7E
 pastebin.com/raw/Bf0NQ9Ld
 pastebin.com/raw/Cn0JKKY3
 pastebin.com/raw/DCe3VjwA
 pastebin.com/raw/DawJ5x7m
 pastebin.com/raw/EUHHeGa1
-pastebin.com/raw/JA5a3MWP
 pastebin.com/raw/KFCvJMhW
 pastebin.com/raw/NbtLVnaN
 pastebin.com/raw/PUncVV2C
@@ -2479,6 +2507,7 @@ patch2.99ddd.com
 patch3.99ddd.com
 patrickchan-hk.net
 pawel-sikora.pl
+pcexperts.co.za
 pcginsure.com
 pcsoori.com
 pedidoslalacteo.com.ar
@@ -2487,7 +2516,6 @@ petromltd.com
 ph4s.ru
 phamchilong.com
 phudieusongma.com
-physiodelacomba.ch
 piapendet.com
 pink99.com
 pmguide.net
@@ -2496,6 +2524,7 @@ podrska.com.hr
 ponto50.com.br
 poolbook.ir
 ppl.ac.id
+privacytoolsstore.website
 probost.cz
 profitcoach.net
 prosoc.nl
@@ -2508,10 +2537,12 @@ qelie.com
 qfjys.com.img.800cdn.com
 qmsled.com
 qppl.angiang.gov.vn
+qualitygolfbags.com
 quartier-midi.be
 quehagoencartagena.com
 raacts.in
 raifix.com.br
+rangebroadcasting.com
 rapidex.co.rs
 raw.githubusercontent.com/BeRo1985/berotinypascal/e34bd4164f4b7c27e7cf667dffd9274d33d6dfbe/bin/btpc.exe
 raw.githubusercontent.com/SecWiki/windows-kernel-exploits/master/MS15-076/Binary/Trebuchet.exe
@@ -2539,24 +2570,22 @@ res.yeshen.com/player/launch/2017/09/12/da5f9a1c23034353852750488feeaf36.exe
 ret.space
 rezaazizi.ir
 rinkaisystem-ht.com
-riskxai.com
 riyanenterprise.com
 rkverify.securestudies.com
 robertmcardle.com
 robotrade.com.vn
 rollingmill.in
 rollscar.pk
-ross-ocenka.ru
 rossogato.com
 ruisgood.ru
 rusch.nu
 s.51shijuan.com
 s.kk30.com
+s14b.91danji.com
+s14b.groundyun.cn
 sabiupd.compress.to
 saboorjaam.ir
 sabupda.vizvaz.com
-saglikliapp.live
-sahathaikasetpan.com
 salvation24.com
 salvationbd.com
 sandovalgraphics.com
@@ -2565,9 +2594,9 @@ saskklo.com
 scglobal.co.th
 schollaert.eu
 schoongezicht.org
+seeanu.ru
 seenext.com.pk
 sefp-boispro.fr
-seibee.biz
 selekture.com
 selfuseproperty.com
 selvikoyunciftligi.com
@@ -2578,6 +2607,7 @@ servicemhkd80.myvnc.com
 serviciosinfoware.cl
 sexybaccarat.329263.com
 sfoodfeedf.org
+sgm.pc6.com
 shacked.webdepot.co.il
 shahtoba.faqserv.com
 shaoxiaofei.cn
@@ -2618,16 +2648,15 @@ sriglobalit.com
 srvmanos.no-ip.info
 ss.cybersoft-vn.com
 sslv3.at
+staging.popclusive.asia
 starcountry.net
 static.3001.net/upload/20140812/14078161556897.rar
 static.ilclock.com
 static.topxgun.com
 stationaryhome.com
 stats.gov.cn/tjsj/tjzd/gjtjzd/201909/P020190909619147287331.doc
-stdykungeduationaldeveloper15investmenqg.duckdns.org
 stecit.nl
 steelbuildings.com
-stevewalker.com.au
 storage.googleapis.com/wzukusers/user-34654398/documents/5c6ca94027662Tilxa4P/base.txt
 storage.googleapis.com/wzukusers/user-34654398/documents/5c6cbd811626fvoj29vW/base64.txt
 storage.googleapis.com/wzukusers/user-34654398/documents/5c6cd19c87f44r9fOMiT/Base64Jef.txt
@@ -2643,22 +2672,21 @@ stubbackup.ru
 suc9898.com
 suncity116.com
 support.clz.kr
-surecake.com
 sv.pvroe.com
 svkacademy.com
 svn.cc.jyu.fi
 sweaty.dk
 swwbia.com
-sylvaclouds.eu
 symanreni.mysecondarydns.com
 szxypt.com
 t.honker.info
+tandenblekenhoofddorp.nl
 taraward.com
 taxpos.com
 tcy.198424.com
-teacherlinx.com
 teardrop-productions.ro
 technoites.com
+tecnobella.cl
 tehrenberg.com
 telescopelms.com
 telsiai.info
@@ -2677,9 +2705,11 @@ theprestige.ro
 theptiendat.com
 therecruiter.io
 thesecuritysoftwarescannerindustrgreat.duckdns.org
+thevision.ro
 thornadops.com
 thosewebbs.com
 tianangdep.com
+tianmaouae.com
 tianzi8.cn
 tibinst.mefound.com
 tibok.lflink.com
@@ -2690,10 +2720,10 @@ tldrbox.top/11.exe
 tldrbox.top/2
 tldrbox.top/3
 tmhfashionhouse.co.za
+toe.polinema.ac.id
 tonghopgia.net
 tonydong.com
 tonyzone.com
-tovarentertainment.in
 tsd.jxwan.com
 tsredco.telangana.gov.in
 tulli.info
@@ -2702,6 +2732,7 @@ tuneup.ibk.me
 tup.com.cn
 tutuler.com
 uc-56.ru
+ufabet168168.329263.com
 ugc.wegame.com.cn
 ultimatelamborghiniexperience.com
 ultimatepointsstore.com
@@ -2710,7 +2741,6 @@ undantagforlag.se
 unicorpbrunei.com
 unilevercopabr.mbiz20.net
 uniquehall.net
-uniteddefence8forstdygorvermentsocialeyx.duckdns.org
 unokaoeojoejfghr.ru
 upd.m.dodo52.com
 update.iwang8.com
@@ -2731,7 +2761,8 @@ vfocus.net
 videoswebcammsn.free.fr
 vietducbio.com
 vigilar.com.br
-visagepk.com
+vip.recommendedtoyoo.com
+virustreatments.empeeevents.com
 visualdata.ru
 vitinhvnt.com
 vitromed.ro
@@ -2753,7 +2784,6 @@ webarte.com.br
 webq.wikaba.com
 webserverthai.com
 websound.ru
-webxposndytechnologyhardsoftware6buyers.duckdns.org
 welcometothefuture.com
 whgaty.com
 wiebe-sanitaer.de
@@ -2769,14 +2799,13 @@ writesofpassage.co.za
 wsg.com.sg
 wt8.siweidaoxiang.com
 wt9.siweidaoxiang.com
+wwealthllc.com
 www2.recepty5.com
 x2vn.com
 xia.vzboot.com
 xiaidown.com
-xiaoma-10021647.file.myqcloud.com
 xiegushi.cn
 xirfad.com
-xn--transfgran-mgbbb600b.ro
 xsdtx.xyz
 xsryx.xyz
 xtremeforumz.com
@@ -2784,6 +2813,8 @@ xuhss.com
 xxbdr.xyz
 xxwl.kuaiyunds.com
 xxxze.co.nu
+y-sani.com
+yc5.timeisletitgo.ru
 yeez.net
 yesky.51down.org.cn
 yesky.xzstatic.com
@@ -2799,7 +2830,6 @@ zd4b.lonlyfafner.ru
 zdy.17110.com
 zenkashow.com
 zentealounge.com.au
-zethla.com
 zeytinyagisabun.com
 zhetysu360.kz
 zhzy999.net
@@ -2808,6 +2838,8 @@ zmmore.com
 zoetermeerov.nl
 zoeydeutchweb.com
 zonefound.com.cn
+zskyjov.cz
 ztqsc.com.cn
 zumodelima.com
 zxcet.xyz
+zzv.seeanu.ru
diff --git a/urlhaus-filter-unbound-online.conf b/urlhaus-filter-unbound-online.conf
index 6f9373df..9e4d1b68 100644
--- a/urlhaus-filter-unbound-online.conf
+++ b/urlhaus-filter-unbound-online.conf
@@ -1,16 +1,19 @@
 # Title: abuse.ch URLhaus Malicious Domains Unbound Blocklist
-# Updated: Wed, 29 Apr 2020 12:09:39 UTC
+# Updated: Thu, 30 Apr 2020 00:09:24 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
 local-zone: "0400msc.com" always_nxdomain
 local-zone: "13pope.com" always_nxdomain
-local-zone: "150.co.il" always_nxdomain
+local-zone: "1l04.timeisletitgo.ru" always_nxdomain
 local-zone: "2000kumdo.com" always_nxdomain
 local-zone: "21robo.com" always_nxdomain
+local-zone: "2xmy.timeisletitgo.ru" always_nxdomain
 local-zone: "3.zhzy999.net" always_nxdomain
 local-zone: "3.zhzy999.net3.zhzy999.net" always_nxdomain
 local-zone: "3mandatesmedia.com" always_nxdomain
+local-zone: "3q9h.timeisletitgo.ru" always_nxdomain
+local-zone: "3vc6.seeanu.ru" always_nxdomain
 local-zone: "402musicfest.com" always_nxdomain
 local-zone: "420hempizone.co" always_nxdomain
 local-zone: "49parallel.ca" always_nxdomain
@@ -18,17 +21,20 @@ local-zone: "5321msc.com" always_nxdomain
 local-zone: "786suncity.com" always_nxdomain
 local-zone: "8133msc.com" always_nxdomain
 local-zone: "8200msc.com" always_nxdomain
+local-zone: "87du.vip" always_nxdomain
 local-zone: "887sconline.com" always_nxdomain
 local-zone: "88mscco.com" always_nxdomain
 local-zone: "9983suncity.com" always_nxdomain
+local-zone: "Muanha.xyz" always_nxdomain
 local-zone: "ZEROTERWWGFBOT.hoesbigmadzero.tk" always_nxdomain
 local-zone: "a-reality.co.uk" always_nxdomain
+local-zone: "a.seeanu.ru" always_nxdomain
 local-zone: "a.xiazai163.com" always_nxdomain
 local-zone: "aaasolution.co.th" always_nxdomain
 local-zone: "accentlandscapes.com" always_nxdomain
 local-zone: "accessyouraudience.com" always_nxdomain
 local-zone: "acteon.com.ar" always_nxdomain
-local-zone: "activecost.com.au" always_nxdomain
+local-zone: "aelogica.com" always_nxdomain
 local-zone: "agiandsam.com" always_nxdomain
 local-zone: "agipasesores.com" always_nxdomain
 local-zone: "agsir.com" always_nxdomain
@@ -46,10 +52,9 @@ local-zone: "alohasoftware.net" always_nxdomain
 local-zone: "alphaconsumer.net" always_nxdomain
 local-zone: "am-concepts.ca" always_nxdomain
 local-zone: "amd.alibuf.com" always_nxdomain
+local-zone: "amedeoscognamiglio.329263.com" always_nxdomain
 local-zone: "amemarine.co.th" always_nxdomain
 local-zone: "americanrange.com" always_nxdomain
-local-zone: "anadolutatili.com" always_nxdomain
-local-zone: "anaekppystdy4initalymedicalconsultancy.duckdns.org" always_nxdomain
 local-zone: "andreabo1.myftp.biz" always_nxdomain
 local-zone: "andreelapeyre.com" always_nxdomain
 local-zone: "andremaraisbeleggings.co.za" always_nxdomain
@@ -63,7 +68,7 @@ local-zone: "apware.co.kr" always_nxdomain
 local-zone: "archiv.bg" always_nxdomain
 local-zone: "areac-agr.com" always_nxdomain
 local-zone: "aresorganics.com" always_nxdomain
-local-zone: "asadairtravel.com" always_nxdomain
+local-zone: "arowanafishforsale.com" always_nxdomain
 local-zone: "ascentive.com" always_nxdomain
 local-zone: "ashoakacharya.com" always_nxdomain
 local-zone: "askarindo.or.id" always_nxdomain
@@ -92,7 +97,7 @@ local-zone: "bd11.52lishi.com" always_nxdomain
 local-zone: "bd12.52lishi.com" always_nxdomain
 local-zone: "bd18.52lishi.com" always_nxdomain
 local-zone: "bd19.52lishi.com" always_nxdomain
-local-zone: "beachview.co.za" always_nxdomain
+local-zone: "beforeshithappens.com" always_nxdomain
 local-zone: "beibei.xx007.cc" always_nxdomain
 local-zone: "bepgroup.com.hk" always_nxdomain
 local-zone: "besserblok-ufa.ru" always_nxdomain
@@ -109,19 +114,23 @@ local-zone: "blankki.com" always_nxdomain
 local-zone: "blog.241optical.com" always_nxdomain
 local-zone: "blog.anytimeneeds.com" always_nxdomain
 local-zone: "blog.hanxe.com" always_nxdomain
+local-zone: "bolescy.com" always_nxdomain
 local-zone: "bolidar.dnset.com" always_nxdomain
 local-zone: "bondbuild.com.sg" always_nxdomain
+local-zone: "bonyamin.com" always_nxdomain
 local-zone: "bookmytripping.com" always_nxdomain
 local-zone: "bpo.correct.go.th" always_nxdomain
 local-zone: "brasstec.com.br" always_nxdomain
 local-zone: "brbs.customer.netspace.net.au" always_nxdomain
 local-zone: "brenleyquartzgh.com" always_nxdomain
 local-zone: "brewmethods.com" always_nxdomain
+local-zone: "britica.vn" always_nxdomain
 local-zone: "btlocum.pl" always_nxdomain
 local-zone: "bugansavings.com" always_nxdomain
 local-zone: "buydishtv.in" always_nxdomain
 local-zone: "byqkdy.com" always_nxdomain
 local-zone: "cameli.vn" always_nxdomain
+local-zone: "capath.vn" always_nxdomain
 local-zone: "caravella.com.br" always_nxdomain
 local-zone: "cassiagumrefined.com" always_nxdomain
 local-zone: "cassovia.sk" always_nxdomain
@@ -137,7 +146,6 @@ local-zone: "cf0.pw" always_nxdomain
 local-zone: "cfs5.tistory.com" always_nxdomain
 local-zone: "ch.rmu.ac.th" always_nxdomain
 local-zone: "changematterscounselling.com" always_nxdomain
-local-zone: "chantdownproster.com" always_nxdomain
 local-zone: "chanvribloc.com" always_nxdomain
 local-zone: "charm.bizfxr.com" always_nxdomain
 local-zone: "chauffeursontravel.com" always_nxdomain
@@ -146,16 +154,16 @@ local-zone: "chinhdropfile.myvnc.com" always_nxdomain
 local-zone: "chinhdropfile80.myvnc.com" always_nxdomain
 local-zone: "chipmarkets.com" always_nxdomain
 local-zone: "chj.m.dodo52.com" always_nxdomain
-local-zone: "cista-dobra-voda.com" always_nxdomain
+local-zone: "cinnamoncreations.com.au" always_nxdomain
 local-zone: "clearwaterriveroutfitting.com" always_nxdomain
 local-zone: "client.yaap.co.uk" always_nxdomain
 local-zone: "clinicamariademolina.com" always_nxdomain
-local-zone: "cloud.wmsinfo.com.br" always_nxdomain
 local-zone: "common-factor.nl" always_nxdomain
 local-zone: "compesat.com" always_nxdomain
 local-zone: "complan.hu" always_nxdomain
 local-zone: "complanbt.hu" always_nxdomain
 local-zone: "comtechadsl.com" always_nxdomain
+local-zone: "config.cqhbkjzx.com" always_nxdomain
 local-zone: "config.kuaisousou.top" always_nxdomain
 local-zone: "consultingcy.com" always_nxdomain
 local-zone: "corazondelcielo.mx" always_nxdomain
@@ -163,7 +171,7 @@ local-zone: "counciloflight.bravepages.com" always_nxdomain
 local-zone: "cqjcc.org" always_nxdomain
 local-zone: "crimebranch.in" always_nxdomain
 local-zone: "crittersbythebay.com" always_nxdomain
-local-zone: "crudenergyllc.com" always_nxdomain
+local-zone: "cryptoomarket.com" always_nxdomain
 local-zone: "csnserver.com" always_nxdomain
 local-zone: "csw.hu" always_nxdomain
 local-zone: "cvc.com.pl" always_nxdomain
@@ -182,17 +190,22 @@ local-zone: "dawaphoto.co.kr" always_nxdomain
 local-zone: "daynightgym.com" always_nxdomain
 local-zone: "de.gsearch.com.de" always_nxdomain
 local-zone: "deixameuskls.tripod.com" always_nxdomain
+local-zone: "demo10.onbm.ir" always_nxdomain
+local-zone: "demo13.dsdemosite.com" always_nxdomain
 local-zone: "denkagida.com.tr" always_nxdomain
 local-zone: "depgrup.com" always_nxdomain
 local-zone: "depot7.com" always_nxdomain
 local-zone: "derivativespro.in" always_nxdomain
+local-zone: "dev.apshaps.se" always_nxdomain
 local-zone: "dev.sebpo.net" always_nxdomain
+local-zone: "dev1.xicom.us" always_nxdomain
 local-zone: "dev5.mypagevn.com" always_nxdomain
 local-zone: "dezcom.com" always_nxdomain
 local-zone: "dfcf.91756.cn" always_nxdomain
 local-zone: "dfd.zhzy999.net" always_nxdomain
 local-zone: "dfzm.91756.cn" always_nxdomain
 local-zone: "dgecolesdepolice.bf" always_nxdomain
+local-zone: "dgnj.cn" always_nxdomain
 local-zone: "dhlservices.duckdns.org" always_nxdomain
 local-zone: "diazavendano.cl" always_nxdomain
 local-zone: "dichvuvesinhcongnghiep.top" always_nxdomain
@@ -200,6 +213,7 @@ local-zone: "dienmaycu.vn" always_nxdomain
 local-zone: "dieselmoreno.cl" always_nxdomain
 local-zone: "digilib.dianhusada.ac.id" always_nxdomain
 local-zone: "digiovanniconsultants.com" always_nxdomain
+local-zone: "digital-marketing-institute-delhi.empeeevents.com" always_nxdomain
 local-zone: "digitaldog.de" always_nxdomain
 local-zone: "discuzx.win" always_nxdomain
 local-zone: "ditec.com.my" always_nxdomain
@@ -224,6 +238,7 @@ local-zone: "down.ancamera.co.kr" always_nxdomain
 local-zone: "down.gogominer.com" always_nxdomain
 local-zone: "down.haote.com" always_nxdomain
 local-zone: "down.pcclear.com" always_nxdomain
+local-zone: "down.pdf.cqmjkjzx.com" always_nxdomain
 local-zone: "down.startools.co.kr" always_nxdomain
 local-zone: "down.tgjkbx.cn" always_nxdomain
 local-zone: "down.upzxt.com" always_nxdomain
@@ -246,6 +261,7 @@ local-zone: "dralpaslan.com" always_nxdomain
 local-zone: "dreamtrips.cheap" always_nxdomain
 local-zone: "drools-moved.46999.n3.nabble.com" always_nxdomain
 local-zone: "druzim.freewww.biz" always_nxdomain
+local-zone: "drwendyellis.com" always_nxdomain
 local-zone: "dsiun.com" always_nxdomain
 local-zone: "dtsay.xyz" always_nxdomain
 local-zone: "dudulm.com" always_nxdomain
@@ -256,15 +272,17 @@ local-zone: "dx1.qqtn.com" always_nxdomain
 local-zone: "dx2.qqtn.com" always_nxdomain
 local-zone: "dx30.siweidaoxiang.com" always_nxdomain
 local-zone: "dx60.siweidaoxiang.com" always_nxdomain
+local-zone: "dzapasigroup.usapglobal.org" always_nxdomain
 local-zone: "dzinestudio87.co.uk" always_nxdomain
-local-zone: "dzyzz.cn" always_nxdomain
 local-zone: "e.dangeana.com" always_nxdomain
+local-zone: "earningtipsbd.com" always_nxdomain
 local-zone: "easydown.workday360.cn" always_nxdomain
 local-zone: "ebook.w3wvg.com" always_nxdomain
 local-zone: "edicolanazionale.it" always_nxdomain
 local-zone: "emir-elbahr.com" always_nxdomain
 local-zone: "enc-tech.com" always_nxdomain
 local-zone: "entre-potes.mon-application.com" always_nxdomain
+local-zone: "eposar.com.ar" always_nxdomain
 local-zone: "er-bulisguvenligi.com" always_nxdomain
 local-zone: "ermekanik.com" always_nxdomain
 local-zone: "esolvent.pl" always_nxdomain
@@ -278,6 +296,7 @@ local-zone: "fastsoft.onlinedown.net" always_nxdomain
 local-zone: "fazi.pl" always_nxdomain
 local-zone: "fenoma.net" always_nxdomain
 local-zone: "fidiag.kymco.com" always_nxdomain
+local-zone: "fifa555easy.329263.com" always_nxdomain
 local-zone: "figuig.net" always_nxdomain
 local-zone: "fileco.jobkorea.co.kr" always_nxdomain
 local-zone: "filen3.utengine.co.kr" always_nxdomain
@@ -289,21 +308,22 @@ local-zone: "fitmanacademy.com" always_nxdomain
 local-zone: "fkd.derpcity.ru" always_nxdomain
 local-zone: "flex.ru" always_nxdomain
 local-zone: "flood-protection.org" always_nxdomain
-local-zone: "foodbooktv.com" always_nxdomain
 local-zone: "fordlamdong.com.vn" always_nxdomain
-local-zone: "foreveramericabrands.com" always_nxdomain
 local-zone: "foreverprecious.org" always_nxdomain
+local-zone: "foxfennecs.com" always_nxdomain
 local-zone: "frin.ng" always_nxdomain
 local-zone: "fte.m.dodo52.com" always_nxdomain
+local-zone: "ftpcnc-p2sp.pconline.com.cn" always_nxdomain
 local-zone: "ftpftpftp.com" always_nxdomain
 local-zone: "funletters.net" always_nxdomain
-local-zone: "funpartyrent.com" always_nxdomain
 local-zone: "futuregraphics.com.ar" always_nxdomain
 local-zone: "futurodelasciudades.org" always_nxdomain
 local-zone: "g.7230.com" always_nxdomain
 local-zone: "g0ogle.free.fr" always_nxdomain
+local-zone: "gainsdirectory.com" always_nxdomain
 local-zone: "galuhtea.com" always_nxdomain
 local-zone: "gamee.top" always_nxdomain
+local-zone: "garage.themebuffets.com" always_nxdomain
 local-zone: "garenanow.myvnc.com" always_nxdomain
 local-zone: "garenanow4.myvnc.com" always_nxdomain
 local-zone: "gargiulo.com.ar" always_nxdomain
@@ -315,7 +335,6 @@ local-zone: "germistonmiraclecentre.co.za" always_nxdomain
 local-zone: "ghislain.dartois.pagesperso-orange.fr" always_nxdomain
 local-zone: "ghwls44.gabia.io" always_nxdomain
 local-zone: "gimscompany.com" always_nxdomain
-local-zone: "glitchexotika.com" always_nxdomain
 local-zone: "glitzygal.net" always_nxdomain
 local-zone: "gnimelf.net" always_nxdomain
 local-zone: "go.xsuad.com" always_nxdomain
@@ -325,9 +344,9 @@ local-zone: "govhotel.us" always_nxdomain
 local-zone: "grafchekloder.rebatesrule.net" always_nxdomain
 local-zone: "granportale.com.br" always_nxdomain
 local-zone: "green100.cn" always_nxdomain
-local-zone: "greindustry.com" always_nxdomain
 local-zone: "gssgroups.com" always_nxdomain
 local-zone: "gx-10012947.file.myqcloud.com" always_nxdomain
+local-zone: "h1.iwakalong.ru" always_nxdomain
 local-zone: "habbotips.free.fr" always_nxdomain
 local-zone: "hagebakken.no" always_nxdomain
 local-zone: "halcat.com" always_nxdomain
@@ -335,6 +354,7 @@ local-zone: "hanaphoto.co.kr" always_nxdomain
 local-zone: "handrush.com" always_nxdomain
 local-zone: "hanoihub.vn" always_nxdomain
 local-zone: "hazel-azure.co.th" always_nxdomain
+local-zone: "hdxa.net" always_nxdomain
 local-zone: "healtina.com" always_nxdomain
 local-zone: "heavenif.co.za" always_nxdomain
 local-zone: "hediyegapsinternet.com" always_nxdomain
@@ -373,7 +393,6 @@ local-zone: "ini.egkj.com" always_nxdomain
 local-zone: "innovation4crisis.org" always_nxdomain
 local-zone: "instanttechnology.com.au" always_nxdomain
 local-zone: "intelicasa.ro" always_nxdomain
-local-zone: "intertradeassociates.com.au" always_nxdomain
 local-zone: "intoxicated-twilight.com" always_nxdomain
 local-zone: "iran-gold.com" always_nxdomain
 local-zone: "iremart.es" always_nxdomain
@@ -382,12 +401,13 @@ local-zone: "itd.m.dodo52.com" always_nxdomain
 local-zone: "itsnixielou.com" always_nxdomain
 local-zone: "ixlonbcc.com" always_nxdomain
 local-zone: "izu.co.jp" always_nxdomain
-local-zone: "jaincakes.xyz" always_nxdomain
 local-zone: "jamiekaylive.com" always_nxdomain
 local-zone: "jansen-heesch.nl" always_nxdomain
 local-zone: "janvierassocies.fr" always_nxdomain
+local-zone: "jaservicioscontables.casteviajes.com" always_nxdomain
 local-zone: "javatank.ru" always_nxdomain
 local-zone: "jcedu.org" always_nxdomain
+local-zone: "jessymart.flexyhub.com" always_nxdomain
 local-zone: "jjjexx.329263.com" always_nxdomain
 local-zone: "jmtc.91756.cn" always_nxdomain
 local-zone: "jointings.org" always_nxdomain
@@ -404,6 +424,7 @@ local-zone: "jvalert.com" always_nxdomain
 local-zone: "jyv.fi" always_nxdomain
 local-zone: "jzny.com.cn" always_nxdomain
 local-zone: "k.ludong.tv" always_nxdomain
+local-zone: "k3.etfiber.net" always_nxdomain
 local-zone: "kabiru.ru" always_nxdomain
 local-zone: "kachsurf.mylftv.com" always_nxdomain
 local-zone: "kamasu11.cafe24.com" always_nxdomain
@@ -415,15 +436,15 @@ local-zone: "kassohome.com.tr" always_nxdomain
 local-zone: "kazanturkiye20gb.com" always_nxdomain
 local-zone: "kbzsa.cn" always_nxdomain
 local-zone: "kdsp.co.kr" always_nxdomain
-local-zone: "keckarangdadap.pekalongankab.go.id" always_nxdomain
 local-zone: "kejpa.com" always_nxdomain
-local-zone: "kgfs3.329263.com" always_nxdomain
 local-zone: "khan-associates.net" always_nxdomain
 local-zone: "khunnapap.com" always_nxdomain
 local-zone: "kiaowadubai.com" always_nxdomain
 local-zone: "kiencuonghotel.vn" always_nxdomain
+local-zone: "kingdomcarecan.com" always_nxdomain
 local-zone: "kingsland.systemsolution.me" always_nxdomain
 local-zone: "kjbm9.mof.gov.cn" always_nxdomain
+local-zone: "kleinendeli.co.za" always_nxdomain
 local-zone: "knightsbridgeenergy.com.ng" always_nxdomain
 local-zone: "koppemotta.com.br" always_nxdomain
 local-zone: "koralli.if.ua" always_nxdomain
@@ -440,7 +461,6 @@ local-zone: "landmarktreks.com" always_nxdomain
 local-zone: "langyabbs.05yun.cn" always_nxdomain
 local-zone: "lcfurtado.com.br" always_nxdomain
 local-zone: "ld.mediaget.com" always_nxdomain
-local-zone: "leaksfly.com" always_nxdomain
 local-zone: "learnbuddy.com" always_nxdomain
 local-zone: "learningcomputing.org" always_nxdomain
 local-zone: "lebedyn.info" always_nxdomain
@@ -451,8 +471,8 @@ local-zone: "libya-info.com" always_nxdomain
 local-zone: "lifeapt.biz" always_nxdomain
 local-zone: "lists.ibiblio.org" always_nxdomain
 local-zone: "lists.mplayerhq.hu" always_nxdomain
+local-zone: "livetrack.in" always_nxdomain
 local-zone: "livetvsports.ml" always_nxdomain
-local-zone: "lodergord.com" always_nxdomain
 local-zone: "log.yundabao.cn" always_nxdomain
 local-zone: "lsyr.net" always_nxdomain
 local-zone: "lt02.datacomspecialists.net" always_nxdomain
@@ -468,9 +488,7 @@ local-zone: "makosoft.hu" always_nxdomain
 local-zone: "malin-akerman.net" always_nxdomain
 local-zone: "margopassadorestylist.com" always_nxdomain
 local-zone: "marksidfgs.ug" always_nxdomain
-local-zone: "marocaji.com" always_nxdomain
 local-zone: "matt-e.it" always_nxdomain
-local-zone: "mattayom31.go.th" always_nxdomain
 local-zone: "mazury4x4.pl" always_nxdomain
 local-zone: "mbgrm.com" always_nxdomain
 local-zone: "mediamatkat.fi" always_nxdomain
@@ -497,12 +515,14 @@ local-zone: "misterson.com" always_nxdomain
 local-zone: "mistydeblasiophotography.com" always_nxdomain
 local-zone: "mkk09.kr" always_nxdomain
 local-zone: "mkontakt.az" always_nxdomain
-local-zone: "mlbfreestream.gq" always_nxdomain
+local-zone: "mlbfreestream.ml" always_nxdomain
 local-zone: "mmc.ru.com" always_nxdomain
+local-zone: "mobiadnews.com" always_nxdomain
 local-zone: "mobilier-modern.ro" always_nxdomain
 local-zone: "mochandmade.us" always_nxdomain
 local-zone: "modcloudserver.eu" always_nxdomain
 local-zone: "moha-group.com" always_nxdomain
+local-zone: "mononet.lv" always_nxdomain
 local-zone: "moscow11.at" always_nxdomain
 local-zone: "mountveederwines.com" always_nxdomain
 local-zone: "moyo.co.kr" always_nxdomain
@@ -512,7 +532,6 @@ local-zone: "msecurity.ro" always_nxdomain
 local-zone: "mteng.mmj7.com" always_nxdomain
 local-zone: "mtfelektroteknik.com" always_nxdomain
 local-zone: "mueblesjcp.cl" always_nxdomain
-local-zone: "mutec.jp" always_nxdomain
 local-zone: "mv360.net" always_nxdomain
 local-zone: "mvb.kz" always_nxdomain
 local-zone: "mxpiqw.am.files.1drv.com" always_nxdomain
@@ -539,7 +558,7 @@ local-zone: "news.omumusic.net" always_nxdomain
 local-zone: "newsun-shop.com" always_nxdomain
 local-zone: "newxing.com" always_nxdomain
 local-zone: "nfbio.com" always_nxdomain
-local-zone: "nmal.info" always_nxdomain
+local-zone: "nofound.000webhostapp.com" always_nxdomain
 local-zone: "nprg.ru" always_nxdomain
 local-zone: "nst-corporation.com" always_nxdomain
 local-zone: "nwcsvcs.com" always_nxdomain
@@ -553,18 +572,17 @@ local-zone: "omega.az" always_nxdomain
 local-zone: "omsk-osma.ru" always_nxdomain
 local-zone: "omuzgor.tj" always_nxdomain
 local-zone: "onestin.ro" always_nxdomain
-local-zone: "onlink-aoiuvr.com" always_nxdomain
-local-zone: "onyourmarkmindsetgo.com" always_nxdomain
 local-zone: "openclient.sroinfo.com" always_nxdomain
 local-zone: "operasanpiox.bravepages.com" always_nxdomain
 local-zone: "opolis.io" always_nxdomain
+local-zone: "oralloy.com" always_nxdomain
 local-zone: "osdsoft.com" always_nxdomain
 local-zone: "osesama.jp" always_nxdomain
 local-zone: "osheoufhusheoghuesd.ru" always_nxdomain
+local-zone: "oskarnews.gazashare.com" always_nxdomain
 local-zone: "otanityre.in" always_nxdomain
 local-zone: "ouhfuosuoosrhfzr.su" always_nxdomain
 local-zone: "ovelcom.com" always_nxdomain
-local-zone: "ozemag.com" always_nxdomain
 local-zone: "ozkayalar.com" always_nxdomain
 local-zone: "p1.lingpao8.com" always_nxdomain
 local-zone: "p2.lingpao8.com" always_nxdomain
@@ -582,6 +600,7 @@ local-zone: "patch2.99ddd.com" always_nxdomain
 local-zone: "patch3.99ddd.com" always_nxdomain
 local-zone: "patrickchan-hk.net" always_nxdomain
 local-zone: "pawel-sikora.pl" always_nxdomain
+local-zone: "pcexperts.co.za" always_nxdomain
 local-zone: "pcginsure.com" always_nxdomain
 local-zone: "pcsoori.com" always_nxdomain
 local-zone: "pedidoslalacteo.com.ar" always_nxdomain
@@ -590,7 +609,6 @@ local-zone: "petromltd.com" always_nxdomain
 local-zone: "ph4s.ru" always_nxdomain
 local-zone: "phamchilong.com" always_nxdomain
 local-zone: "phudieusongma.com" always_nxdomain
-local-zone: "physiodelacomba.ch" always_nxdomain
 local-zone: "piapendet.com" always_nxdomain
 local-zone: "pink99.com" always_nxdomain
 local-zone: "pmguide.net" always_nxdomain
@@ -599,6 +617,7 @@ local-zone: "podrska.com.hr" always_nxdomain
 local-zone: "ponto50.com.br" always_nxdomain
 local-zone: "poolbook.ir" always_nxdomain
 local-zone: "ppl.ac.id" always_nxdomain
+local-zone: "privacytoolsstore.website" always_nxdomain
 local-zone: "probost.cz" always_nxdomain
 local-zone: "profitcoach.net" always_nxdomain
 local-zone: "prosoc.nl" always_nxdomain
@@ -611,10 +630,12 @@ local-zone: "qelie.com" always_nxdomain
 local-zone: "qfjys.com.img.800cdn.com" always_nxdomain
 local-zone: "qmsled.com" always_nxdomain
 local-zone: "qppl.angiang.gov.vn" always_nxdomain
+local-zone: "qualitygolfbags.com" always_nxdomain
 local-zone: "quartier-midi.be" always_nxdomain
 local-zone: "quehagoencartagena.com" always_nxdomain
 local-zone: "raacts.in" always_nxdomain
 local-zone: "raifix.com.br" always_nxdomain
+local-zone: "rangebroadcasting.com" always_nxdomain
 local-zone: "rapidex.co.rs" always_nxdomain
 local-zone: "rc.ixiaoyang.cn" always_nxdomain
 local-zone: "readytalk.github.io" always_nxdomain
@@ -630,24 +651,22 @@ local-zone: "res.uf1.cn" always_nxdomain
 local-zone: "ret.space" always_nxdomain
 local-zone: "rezaazizi.ir" always_nxdomain
 local-zone: "rinkaisystem-ht.com" always_nxdomain
-local-zone: "riskxai.com" always_nxdomain
 local-zone: "riyanenterprise.com" always_nxdomain
 local-zone: "rkverify.securestudies.com" always_nxdomain
 local-zone: "robertmcardle.com" always_nxdomain
 local-zone: "robotrade.com.vn" always_nxdomain
 local-zone: "rollingmill.in" always_nxdomain
 local-zone: "rollscar.pk" always_nxdomain
-local-zone: "ross-ocenka.ru" always_nxdomain
 local-zone: "rossogato.com" always_nxdomain
 local-zone: "ruisgood.ru" always_nxdomain
 local-zone: "rusch.nu" always_nxdomain
 local-zone: "s.51shijuan.com" always_nxdomain
 local-zone: "s.kk30.com" always_nxdomain
+local-zone: "s14b.91danji.com" always_nxdomain
+local-zone: "s14b.groundyun.cn" always_nxdomain
 local-zone: "sabiupd.compress.to" always_nxdomain
 local-zone: "saboorjaam.ir" always_nxdomain
 local-zone: "sabupda.vizvaz.com" always_nxdomain
-local-zone: "saglikliapp.live" always_nxdomain
-local-zone: "sahathaikasetpan.com" always_nxdomain
 local-zone: "salvation24.com" always_nxdomain
 local-zone: "salvationbd.com" always_nxdomain
 local-zone: "sandovalgraphics.com" always_nxdomain
@@ -656,9 +675,9 @@ local-zone: "saskklo.com" always_nxdomain
 local-zone: "scglobal.co.th" always_nxdomain
 local-zone: "schollaert.eu" always_nxdomain
 local-zone: "schoongezicht.org" always_nxdomain
+local-zone: "seeanu.ru" always_nxdomain
 local-zone: "seenext.com.pk" always_nxdomain
 local-zone: "sefp-boispro.fr" always_nxdomain
-local-zone: "seibee.biz" always_nxdomain
 local-zone: "selekture.com" always_nxdomain
 local-zone: "selfuseproperty.com" always_nxdomain
 local-zone: "selvikoyunciftligi.com" always_nxdomain
@@ -668,6 +687,7 @@ local-zone: "servicemhkd80.myvnc.com" always_nxdomain
 local-zone: "serviciosinfoware.cl" always_nxdomain
 local-zone: "sexybaccarat.329263.com" always_nxdomain
 local-zone: "sfoodfeedf.org" always_nxdomain
+local-zone: "sgm.pc6.com" always_nxdomain
 local-zone: "shacked.webdepot.co.il" always_nxdomain
 local-zone: "shahtoba.faqserv.com" always_nxdomain
 local-zone: "shaoxiaofei.cn" always_nxdomain
@@ -705,35 +725,33 @@ local-zone: "sriglobalit.com" always_nxdomain
 local-zone: "srvmanos.no-ip.info" always_nxdomain
 local-zone: "ss.cybersoft-vn.com" always_nxdomain
 local-zone: "sslv3.at" always_nxdomain
+local-zone: "staging.popclusive.asia" always_nxdomain
 local-zone: "starcountry.net" always_nxdomain
 local-zone: "static.ilclock.com" always_nxdomain
 local-zone: "static.topxgun.com" always_nxdomain
 local-zone: "stationaryhome.com" always_nxdomain
-local-zone: "stdykungeduationaldeveloper15investmenqg.duckdns.org" always_nxdomain
 local-zone: "stecit.nl" always_nxdomain
 local-zone: "steelbuildings.com" always_nxdomain
-local-zone: "stevewalker.com.au" always_nxdomain
 local-zone: "story-maker.jp" always_nxdomain
 local-zone: "stubbackup.ru" always_nxdomain
 local-zone: "suc9898.com" always_nxdomain
 local-zone: "suncity116.com" always_nxdomain
 local-zone: "support.clz.kr" always_nxdomain
-local-zone: "surecake.com" always_nxdomain
 local-zone: "sv.pvroe.com" always_nxdomain
 local-zone: "svkacademy.com" always_nxdomain
 local-zone: "svn.cc.jyu.fi" always_nxdomain
 local-zone: "sweaty.dk" always_nxdomain
 local-zone: "swwbia.com" always_nxdomain
-local-zone: "sylvaclouds.eu" always_nxdomain
 local-zone: "symanreni.mysecondarydns.com" always_nxdomain
 local-zone: "szxypt.com" always_nxdomain
 local-zone: "t.honker.info" always_nxdomain
+local-zone: "tandenblekenhoofddorp.nl" always_nxdomain
 local-zone: "taraward.com" always_nxdomain
 local-zone: "taxpos.com" always_nxdomain
 local-zone: "tcy.198424.com" always_nxdomain
-local-zone: "teacherlinx.com" always_nxdomain
 local-zone: "teardrop-productions.ro" always_nxdomain
 local-zone: "technoites.com" always_nxdomain
+local-zone: "tecnobella.cl" always_nxdomain
 local-zone: "tehrenberg.com" always_nxdomain
 local-zone: "telescopelms.com" always_nxdomain
 local-zone: "telsiai.info" always_nxdomain
@@ -752,19 +770,21 @@ local-zone: "theprestige.ro" always_nxdomain
 local-zone: "theptiendat.com" always_nxdomain
 local-zone: "therecruiter.io" always_nxdomain
 local-zone: "thesecuritysoftwarescannerindustrgreat.duckdns.org" always_nxdomain
+local-zone: "thevision.ro" always_nxdomain
 local-zone: "thornadops.com" always_nxdomain
 local-zone: "thosewebbs.com" always_nxdomain
 local-zone: "tianangdep.com" always_nxdomain
+local-zone: "tianmaouae.com" always_nxdomain
 local-zone: "tianzi8.cn" always_nxdomain
 local-zone: "tibinst.mefound.com" always_nxdomain
 local-zone: "tibok.lflink.com" always_nxdomain
 local-zone: "ticte.in" always_nxdomain
 local-zone: "timlinger.com" always_nxdomain
 local-zone: "tmhfashionhouse.co.za" always_nxdomain
+local-zone: "toe.polinema.ac.id" always_nxdomain
 local-zone: "tonghopgia.net" always_nxdomain
 local-zone: "tonydong.com" always_nxdomain
 local-zone: "tonyzone.com" always_nxdomain
-local-zone: "tovarentertainment.in" always_nxdomain
 local-zone: "tsd.jxwan.com" always_nxdomain
 local-zone: "tsredco.telangana.gov.in" always_nxdomain
 local-zone: "tulli.info" always_nxdomain
@@ -773,6 +793,7 @@ local-zone: "tuneup.ibk.me" always_nxdomain
 local-zone: "tup.com.cn" always_nxdomain
 local-zone: "tutuler.com" always_nxdomain
 local-zone: "uc-56.ru" always_nxdomain
+local-zone: "ufabet168168.329263.com" always_nxdomain
 local-zone: "ugc.wegame.com.cn" always_nxdomain
 local-zone: "ultimatelamborghiniexperience.com" always_nxdomain
 local-zone: "ultimatepointsstore.com" always_nxdomain
@@ -781,7 +802,6 @@ local-zone: "undantagforlag.se" always_nxdomain
 local-zone: "unicorpbrunei.com" always_nxdomain
 local-zone: "unilevercopabr.mbiz20.net" always_nxdomain
 local-zone: "uniquehall.net" always_nxdomain
-local-zone: "uniteddefence8forstdygorvermentsocialeyx.duckdns.org" always_nxdomain
 local-zone: "unokaoeojoejfghr.ru" always_nxdomain
 local-zone: "upd.m.dodo52.com" always_nxdomain
 local-zone: "update.iwang8.com" always_nxdomain
@@ -802,7 +822,8 @@ local-zone: "vfocus.net" always_nxdomain
 local-zone: "videoswebcammsn.free.fr" always_nxdomain
 local-zone: "vietducbio.com" always_nxdomain
 local-zone: "vigilar.com.br" always_nxdomain
-local-zone: "visagepk.com" always_nxdomain
+local-zone: "vip.recommendedtoyoo.com" always_nxdomain
+local-zone: "virustreatments.empeeevents.com" always_nxdomain
 local-zone: "visualdata.ru" always_nxdomain
 local-zone: "vitinhvnt.com" always_nxdomain
 local-zone: "vitromed.ro" always_nxdomain
@@ -822,7 +843,6 @@ local-zone: "webarte.com.br" always_nxdomain
 local-zone: "webq.wikaba.com" always_nxdomain
 local-zone: "webserverthai.com" always_nxdomain
 local-zone: "websound.ru" always_nxdomain
-local-zone: "webxposndytechnologyhardsoftware6buyers.duckdns.org" always_nxdomain
 local-zone: "welcometothefuture.com" always_nxdomain
 local-zone: "whgaty.com" always_nxdomain
 local-zone: "wiebe-sanitaer.de" always_nxdomain
@@ -837,14 +857,13 @@ local-zone: "writesofpassage.co.za" always_nxdomain
 local-zone: "wsg.com.sg" always_nxdomain
 local-zone: "wt8.siweidaoxiang.com" always_nxdomain
 local-zone: "wt9.siweidaoxiang.com" always_nxdomain
+local-zone: "wwealthllc.com" always_nxdomain
 local-zone: "www2.recepty5.com" always_nxdomain
 local-zone: "x2vn.com" always_nxdomain
 local-zone: "xia.vzboot.com" always_nxdomain
 local-zone: "xiaidown.com" always_nxdomain
-local-zone: "xiaoma-10021647.file.myqcloud.com" always_nxdomain
 local-zone: "xiegushi.cn" always_nxdomain
 local-zone: "xirfad.com" always_nxdomain
-local-zone: "xn--transfgran-mgbbb600b.ro" always_nxdomain
 local-zone: "xsdtx.xyz" always_nxdomain
 local-zone: "xsryx.xyz" always_nxdomain
 local-zone: "xtremeforumz.com" always_nxdomain
@@ -852,6 +871,8 @@ local-zone: "xuhss.com" always_nxdomain
 local-zone: "xxbdr.xyz" always_nxdomain
 local-zone: "xxwl.kuaiyunds.com" always_nxdomain
 local-zone: "xxxze.co.nu" always_nxdomain
+local-zone: "y-sani.com" always_nxdomain
+local-zone: "yc5.timeisletitgo.ru" always_nxdomain
 local-zone: "yeez.net" always_nxdomain
 local-zone: "yesky.51down.org.cn" always_nxdomain
 local-zone: "yesky.xzstatic.com" always_nxdomain
@@ -867,7 +888,6 @@ local-zone: "zd4b.lonlyfafner.ru" always_nxdomain
 local-zone: "zdy.17110.com" always_nxdomain
 local-zone: "zenkashow.com" always_nxdomain
 local-zone: "zentealounge.com.au" always_nxdomain
-local-zone: "zethla.com" always_nxdomain
 local-zone: "zeytinyagisabun.com" always_nxdomain
 local-zone: "zhetysu360.kz" always_nxdomain
 local-zone: "zhzy999.net" always_nxdomain
@@ -876,6 +896,8 @@ local-zone: "zmmore.com" always_nxdomain
 local-zone: "zoetermeerov.nl" always_nxdomain
 local-zone: "zoeydeutchweb.com" always_nxdomain
 local-zone: "zonefound.com.cn" always_nxdomain
+local-zone: "zskyjov.cz" always_nxdomain
 local-zone: "ztqsc.com.cn" always_nxdomain
 local-zone: "zumodelima.com" always_nxdomain
 local-zone: "zxcet.xyz" always_nxdomain
+local-zone: "zzv.seeanu.ru" always_nxdomain
diff --git a/urlhaus-filter-unbound.conf b/urlhaus-filter-unbound.conf
index b9a83afd..675ecdf3 100644
--- a/urlhaus-filter-unbound.conf
+++ b/urlhaus-filter-unbound.conf
@@ -1,5 +1,5 @@
 # Title: abuse.ch URLhaus Malicious Domains Unbound Blocklist
-# Updated: Wed, 29 Apr 2020 12:09:39 UTC
+# Updated: Thu, 30 Apr 2020 00:09:24 UTC
 # Repo: https://gitlab.com/curben/urlhaus-filter
 # License: https://creativecommons.org/publicdomain/zero/1.0/
 # Source: https://urlhaus.abuse.ch/api/
@@ -97,6 +97,7 @@ local-zone: "1000lostchildren.com" always_nxdomain
 local-zone: "1001-territoires.fr" always_nxdomain
 local-zone: "1001newsng.com" always_nxdomain
 local-zone: "1001tur-tver.ru" always_nxdomain
+local-zone: "10022020newfolder1002002231-service1002.space" always_nxdomain
 local-zone: "100alternance.fr" always_nxdomain
 local-zone: "100kala.ir" always_nxdomain
 local-zone: "100percentforkids.org" always_nxdomain
@@ -300,6 +301,7 @@ local-zone: "1in10jamaica.com" always_nxdomain
 local-zone: "1jpg1host.net16.net" always_nxdomain
 local-zone: "1jxmt.com" always_nxdomain
 local-zone: "1kvk.com" always_nxdomain
+local-zone: "1l04.timeisletitgo.ru" always_nxdomain
 local-zone: "1liveradar.de" always_nxdomain
 local-zone: "1lo.lukow.pl" always_nxdomain
 local-zone: "1localexpert.com" always_nxdomain
@@ -620,6 +622,7 @@ local-zone: "2vidyo.xyz" always_nxdomain
 local-zone: "2wheelrider.com" always_nxdomain
 local-zone: "2winresidency.com" always_nxdomain
 local-zone: "2x2print.com" always_nxdomain
+local-zone: "2xmy.timeisletitgo.ru" always_nxdomain
 local-zone: "2yb5.andichust.ru" always_nxdomain
 local-zone: "2yf32q.ch.files.1drv.com" always_nxdomain
 local-zone: "2yourwealth.com.au" always_nxdomain
@@ -778,6 +781,7 @@ local-zone: "3pabook.com" always_nxdomain
 local-zone: "3ppuubb.com" always_nxdomain
 local-zone: "3prokladkaeu.com" always_nxdomain
 local-zone: "3pubeu.com" always_nxdomain
+local-zone: "3q9h.timeisletitgo.ru" always_nxdomain
 local-zone: "3rdperson.ml" always_nxdomain
 local-zone: "3rdsectorsupportafrica.org" always_nxdomain
 local-zone: "3rytghjhkss.cf" always_nxdomain
@@ -800,6 +804,7 @@ local-zone: "3uqp.com" always_nxdomain
 local-zone: "3uso2927wiwofeppwi29.com" always_nxdomain
 local-zone: "3v5.net" always_nxdomain
 local-zone: "3v6bz7g2bncvrinwmaawz2t4.file.truckbennels.com" always_nxdomain
+local-zone: "3vc6.seeanu.ru" always_nxdomain
 local-zone: "3vdataguard.com" always_nxdomain
 local-zone: "3vventures.com" always_nxdomain
 local-zone: "3wereareyou.icu" always_nxdomain
@@ -1356,6 +1361,8 @@ local-zone: "FlorissantFire.com" always_nxdomain
 local-zone: "ForRealTraffic.com" always_nxdomain
 local-zone: "Heavensconcept.ng" always_nxdomain
 local-zone: "Mozilla.theworkpc.com" always_nxdomain
+local-zone: "Muanha.xyz" always_nxdomain
+local-zone: "NCERTSOLUTIONACADEMY.COM" always_nxdomain
 local-zone: "NeedCareers.com" always_nxdomain
 local-zone: "OpalAlert.com" always_nxdomain
 local-zone: "RENTITOUT.CO" always_nxdomain
@@ -1406,6 +1413,7 @@ local-zone: "a.pomf.su" always_nxdomain
 local-zone: "a.pomfe.co" always_nxdomain
 local-zone: "a.rokket.space" always_nxdomain
 local-zone: "a.safe.moe" always_nxdomain
+local-zone: "a.seeanu.ru" always_nxdomain
 local-zone: "a.teamworx.ph" always_nxdomain
 local-zone: "a.turnuvam.org" always_nxdomain
 local-zone: "a.uchi.moe" always_nxdomain
@@ -2227,6 +2235,7 @@ local-zone: "addpics.site" always_nxdomain
 local-zone: "addtomap.ru" always_nxdomain
 local-zone: "adducity.ga" always_nxdomain
 local-zone: "addvitashop.com" always_nxdomain
+local-zone: "ade.topepics.com" always_nxdomain
 local-zone: "adebeo.co.in" always_nxdomain
 local-zone: "adecityevents.com" always_nxdomain
 local-zone: "aded.co.in" always_nxdomain
@@ -2514,6 +2523,7 @@ local-zone: "aeletselschade.nl" always_nxdomain
 local-zone: "aelinks.com" always_nxdomain
 local-zone: "aellly.000webhostapp.com" always_nxdomain
 local-zone: "aelmas.5gbfree.com" always_nxdomain
+local-zone: "aelogica.com" always_nxdomain
 local-zone: "aemgrup.com.tr" always_nxdomain
 local-zone: "aemo-mecanique-usinage.fr" always_nxdomain
 local-zone: "aengineeringltd.com" always_nxdomain
@@ -3550,6 +3560,7 @@ local-zone: "alexandre-muhl.fr" always_nxdomain
 local-zone: "alexandrearchitecte.fr" always_nxdomain
 local-zone: "alexandrearealty.com" always_nxdomain
 local-zone: "alexandrecabello.com.br" always_nxdomain
+local-zone: "alexandredekerchove.com" always_nxdomain
 local-zone: "alexandrepaiva.com" always_nxdomain
 local-zone: "alexandrerivelli.com" always_nxdomain
 local-zone: "alexandria.run" always_nxdomain
@@ -5748,6 +5759,7 @@ local-zone: "ariacommunications.in" always_nxdomain
 local-zone: "ariadna.org.ua" always_nxdomain
 local-zone: "ariafm.gr" always_nxdomain
 local-zone: "arianasdelinewdorpplaza.com" always_nxdomain
+local-zone: "arianegerkens.com" always_nxdomain
 local-zone: "arianrayaneh.com" always_nxdomain
 local-zone: "arianshopping.com" always_nxdomain
 local-zone: "ariasms.ir" always_nxdomain
@@ -8216,6 +8228,7 @@ local-zone: "batch-photo-editor.com" always_nxdomain
 local-zone: "batchenangmuasieuben.com" always_nxdomain
 local-zone: "batdongsan3b.com" always_nxdomain
 local-zone: "batdongsanbamien24h.com" always_nxdomain
+local-zone: "batdongsanbentre.com.vn" always_nxdomain
 local-zone: "batdongsanhadong.info" always_nxdomain
 local-zone: "batdongsanhathanh.net" always_nxdomain
 local-zone: "batdongsanhuyphat68.com" always_nxdomain
@@ -9126,6 +9139,7 @@ local-zone: "betokont.com.tr" always_nxdomain
 local-zone: "beton-dubna.com" always_nxdomain
 local-zone: "betonbrother.com" always_nxdomain
 local-zone: "betonkeritesgyar.hu" always_nxdomain
+local-zone: "betopceo.com" always_nxdomain
 local-zone: "betprediksi.com" always_nxdomain
 local-zone: "betrachtungssicht.de" always_nxdomain
 local-zone: "betrogroup.com" always_nxdomain
@@ -10419,6 +10433,7 @@ local-zone: "blueboxsourcing.com" always_nxdomain
 local-zone: "blueboxxinterior.com" always_nxdomain
 local-zone: "bluebunni.com" always_nxdomain
 local-zone: "blueclutch.com" always_nxdomain
+local-zone: "bluecollarfinancial.net" always_nxdomain
 local-zone: "bluecrayonconsulting.com" always_nxdomain
 local-zone: "bluecrestpress.com" always_nxdomain
 local-zone: "bluecrystalband.com" always_nxdomain
@@ -10659,6 +10674,7 @@ local-zone: "boldog.hu" always_nxdomain
 local-zone: "boldreflectionsmn.com" always_nxdomain
 local-zone: "bolegreenhotel.com" always_nxdomain
 local-zone: "bolehprediksi.com" always_nxdomain
+local-zone: "bolescy.com" always_nxdomain
 local-zone: "bolesni.net" always_nxdomain
 local-zone: "bolhomes.stringbind.info" always_nxdomain
 local-zone: "bolidar.dnset.com" always_nxdomain
@@ -11277,6 +11293,7 @@ local-zone: "bristter.com" always_nxdomain
 local-zone: "britan.mx" always_nxdomain
 local-zone: "britanniasuperior.uk" always_nxdomain
 local-zone: "briteindonesia.com" always_nxdomain
+local-zone: "britica.vn" always_nxdomain
 local-zone: "british-rainbow.com" always_nxdomain
 local-zone: "britishvoices.co.uk" always_nxdomain
 local-zone: "brittanishantel.com" always_nxdomain
@@ -12379,6 +12396,7 @@ local-zone: "capacitacioncomercial.cl" always_nxdomain
 local-zone: "capamh.org" always_nxdomain
 local-zone: "capanoandassociates.com" always_nxdomain
 local-zone: "capasso.de" always_nxdomain
+local-zone: "capath.vn" always_nxdomain
 local-zone: "capaxinfiniti.ml" always_nxdomain
 local-zone: "capbangkok.com" always_nxdomain
 local-zone: "capebethel.org" always_nxdomain
@@ -13331,11 +13349,13 @@ local-zone: "ceramicasaosebastiao.com.br" always_nxdomain
 local-zone: "cercolorlaghi.com" always_nxdomain
 local-zone: "cerebro-coaching.fr" always_nxdomain
 local-zone: "cerenkent.com" always_nxdomain
+local-zone: "cerisiers.be" always_nxdomain
 local-zone: "ceritaislami.000webhostapp.com" always_nxdomain
 local-zone: "cermiamakmur.com" always_nxdomain
 local-zone: "ceronamtinclube.icu" always_nxdomain
 local-zone: "cerotex.webprojemiz.com" always_nxdomain
 local-zone: "cerovica.com" always_nxdomain
+local-zone: "cerradocredito.com.br" always_nxdomain
 local-zone: "cerrahibeyinpedi.com" always_nxdomain
 local-zone: "cerrajeria-sabbath.holy-animero.com" always_nxdomain
 local-zone: "cerrajeriajimenez.cl" always_nxdomain
@@ -13670,6 +13690,7 @@ local-zone: "cheappigeontraps.com" always_nxdomain
 local-zone: "cheapraccoontraps.com" always_nxdomain
 local-zone: "cheapseoprovider.com" always_nxdomain
 local-zone: "cheapsilkscreenprinting.com" always_nxdomain
+local-zone: "cheaptours.in.ua" always_nxdomain
 local-zone: "cheaptrainticket.cogbiz-infotech.com" always_nxdomain
 local-zone: "cheaptravel-spb.ru" always_nxdomain
 local-zone: "cheapwebvn.net" always_nxdomain
@@ -13746,6 +13767,7 @@ local-zone: "chepi.net" always_nxdomain
 local-zone: "cherdavis.com" always_nxdomain
 local-zone: "chergo.es" always_nxdomain
 local-zone: "cherinetiles.com" always_nxdomain
+local-zone: "cheriyilbuilders.com" always_nxdomain
 local-zone: "cherkassy.info" always_nxdomain
 local-zone: "cheron.co.uk" always_nxdomain
 local-zone: "cherrett.net" always_nxdomain
@@ -16392,6 +16414,7 @@ local-zone: "cryptomega.ga" always_nxdomain
 local-zone: "cryptomub.com" always_nxdomain
 local-zone: "cryptonias.top" always_nxdomain
 local-zone: "cryptoniaz.top" always_nxdomain
+local-zone: "cryptoomarket.com" always_nxdomain
 local-zone: "cryptorgasms.com" always_nxdomain
 local-zone: "cryptoseed.co.za" always_nxdomain
 local-zone: "cryptostruct.bunker.zone" always_nxdomain
@@ -17236,6 +17259,7 @@ local-zone: "dardash.info" always_nxdomain
 local-zone: "dareldjazair.com" always_nxdomain
 local-zone: "darelyateem.org" always_nxdomain
 local-zone: "darianinc.com" always_nxdomain
+local-zone: "daricci.de" always_nxdomain
 local-zone: "darice.in" always_nxdomain
 local-zone: "dario-mraz.from.hr" always_nxdomain
 local-zone: "dariojucker.edelegation.com" always_nxdomain
@@ -18130,6 +18154,7 @@ local-zone: "demo1.parsnet.space" always_nxdomain
 local-zone: "demo10.onbm.ir" always_nxdomain
 local-zone: "demo12.maybay.net" always_nxdomain
 local-zone: "demo13.abc-it.net.au" always_nxdomain
+local-zone: "demo13.dsdemosite.com" always_nxdomain
 local-zone: "demo15.versamall.com" always_nxdomain
 local-zone: "demo15.webindia.com" always_nxdomain
 local-zone: "demo19.keltron.org" always_nxdomain
@@ -18256,6 +18281,7 @@ local-zone: "dentsheaven.co.uk" always_nxdomain
 local-zone: "dentsov.ru" always_nxdomain
 local-zone: "denttrade.com.kg" always_nxdomain
 local-zone: "denuchoco.com" always_nxdomain
+local-zone: "denunciesoftwareilegal.org.br" always_nxdomain
 local-zone: "denverfs.org" always_nxdomain
 local-zone: "denverktrade.xyz" always_nxdomain
 local-zone: "deny.radio-denisa.com" always_nxdomain
@@ -18525,6 +18551,7 @@ local-zone: "dev.454mediahouse.com" always_nxdomain
 local-zone: "dev.abitotv.it" always_nxdomain
 local-zone: "dev.adrianapatsalou.com" always_nxdomain
 local-zone: "dev.ameekids.com" always_nxdomain
+local-zone: "dev.apshaps.se" always_nxdomain
 local-zone: "dev.artoonsolutions.com" always_nxdomain
 local-zone: "dev.ateamymm.ca" always_nxdomain
 local-zone: "dev.bassetlawscouts.org.uk" always_nxdomain
@@ -19106,6 +19133,7 @@ local-zone: "digistudy.vn" always_nxdomain
 local-zone: "digital-cloud.healthycheapfast.com" always_nxdomain
 local-zone: "digital-design.com.cn" always_nxdomain
 local-zone: "digital-life.pro" always_nxdomain
+local-zone: "digital-marketing-institute-delhi.empeeevents.com" always_nxdomain
 local-zone: "digital-vision.nl" always_nxdomain
 local-zone: "digital.audiobookjunkie.com" always_nxdomain
 local-zone: "digital.etnasoft.eu" always_nxdomain
@@ -20561,6 +20589,7 @@ local-zone: "drinkdirect.co.uk" always_nxdomain
 local-zone: "drinkfoodapp.com" always_nxdomain
 local-zone: "drinkgusto.sg" always_nxdomain
 local-zone: "drinklass.com.br" always_nxdomain
+local-zone: "drinkopolykopen.nl" always_nxdomain
 local-zone: "drischler.de" always_nxdomain
 local-zone: "drive.carlsongracieanaheim.com" always_nxdomain
 local-zone: "drive.deescreationstore.com" always_nxdomain
@@ -20932,6 +20961,7 @@ local-zone: "dunysaki.ru" always_nxdomain
 local-zone: "duoliprudential.com.watchdogdns.duckdns.org" always_nxdomain
 local-zone: "duomasters.com" always_nxdomain
 local-zone: "duongcaoky.com" always_nxdomain
+local-zone: "duongfpt.ga" always_nxdomain
 local-zone: "duongmanhtuan.com" always_nxdomain
 local-zone: "duoscript.com" always_nxdomain
 local-zone: "duotechgroup.com" always_nxdomain
@@ -21112,6 +21142,7 @@ local-zone: "dyvrullters.in" always_nxdomain
 local-zone: "dywanypers.pl" always_nxdomain
 local-zone: "dyyhfk120.com" always_nxdomain
 local-zone: "dzain.com.br" always_nxdomain
+local-zone: "dzapasigroup.usapglobal.org" always_nxdomain
 local-zone: "dzbo.dp.ua" always_nxdomain
 local-zone: "dzbooster.com" always_nxdomain
 local-zone: "dzcorlandyu.band" always_nxdomain
@@ -26069,6 +26100,7 @@ local-zone: "franchisorsuccess.com.au" always_nxdomain
 local-zone: "francini.dk" always_nxdomain
 local-zone: "francis-china.com" always_nxdomain
 local-zone: "franciscossc.pbworks.com" always_nxdomain
+local-zone: "francois-champion.com" always_nxdomain
 local-zone: "francois-rommens.fr" always_nxdomain
 local-zone: "francoise-vauzeilles.com" always_nxdomain
 local-zone: "francoisebon.fr" always_nxdomain
@@ -29458,6 +29490,7 @@ local-zone: "h.eurotrading.com.pl" always_nxdomain
 local-zone: "h.j990981.ru" always_nxdomain
 local-zone: "h.top4top.io" always_nxdomain
 local-zone: "h.valerana44.ru" always_nxdomain
+local-zone: "h1.iwakalong.ru" always_nxdomain
 local-zone: "h112321.s08.test-hf.su" always_nxdomain
 local-zone: "h13.doshimotai.ru" always_nxdomain
 local-zone: "h135460.s08.test-hf.su" always_nxdomain
@@ -34848,6 +34881,7 @@ local-zone: "jasclair.com" always_nxdomain
 local-zone: "jasclean.sk" always_nxdomain
 local-zone: "jascopump.com" always_nxdomain
 local-zone: "jaseminedenise.com" always_nxdomain
+local-zone: "jaservicioscontables.casteviajes.com" always_nxdomain
 local-zone: "jasesoi.com" always_nxdomain
 local-zone: "jaset.com.mx" always_nxdomain
 local-zone: "jashneadab.org" always_nxdomain
@@ -35145,6 +35179,7 @@ local-zone: "jessie-equitation.fr" always_nxdomain
 local-zone: "jessijonesstar.com" always_nxdomain
 local-zone: "jessikarkan.com" always_nxdomain
 local-zone: "jesswalsh.co.uk" always_nxdomain
+local-zone: "jessymart.flexyhub.com" always_nxdomain
 local-zone: "jester.com.au" always_nxdomain
 local-zone: "jet2.didev.id" always_nxdomain
 local-zone: "jetallied.com" always_nxdomain
@@ -36373,6 +36408,7 @@ local-zone: "kalyoncularyapi.com" always_nxdomain
 local-zone: "kam.vladistart.art" always_nxdomain
 local-zone: "kamadecor.ru" always_nxdomain
 local-zone: "kamagra-wolf.com" always_nxdomain
+local-zone: "kamagra.in.rs" always_nxdomain
 local-zone: "kamagra4uk.com" always_nxdomain
 local-zone: "kamajankowska.com" always_nxdomain
 local-zone: "kamakran.ru" always_nxdomain
@@ -37928,6 +37964,7 @@ local-zone: "koralli.if.ua" always_nxdomain
 local-zone: "koranpeduli.co.id" always_nxdomain
 local-zone: "korastation.com" always_nxdomain
 local-zone: "koratmobilya.xyz" always_nxdomain
+local-zone: "koravit.zaeteaw.net" always_nxdomain
 local-zone: "korayche2002.free.fr" always_nxdomain
 local-zone: "korbi-studio.com" always_nxdomain
 local-zone: "korbiel.info" always_nxdomain
@@ -45324,6 +45361,7 @@ local-zone: "monoclepetes.com" always_nxdomain
 local-zone: "monodoze.com" always_nxdomain
 local-zone: "monoit.eu" always_nxdomain
 local-zone: "monomind.co.kr" always_nxdomain
+local-zone: "mononet.lv" always_nxdomain
 local-zone: "monopeets.com" always_nxdomain
 local-zone: "monrottweiler.fr" always_nxdomain
 local-zone: "monset.it" always_nxdomain
@@ -45470,6 +45508,7 @@ local-zone: "morozan.it" always_nxdomain
 local-zone: "morrell-stinson.com" always_nxdomain
 local-zone: "morricone.kayakodev.com" always_nxdomain
 local-zone: "morrissan.com" always_nxdomain
+local-zone: "morruko.antesos.com" always_nxdomain
 local-zone: "morsengthaithai.com" always_nxdomain
 local-zone: "morshinnet.ru" always_nxdomain
 local-zone: "mortalityreview.net" always_nxdomain
@@ -46417,6 +46456,7 @@ local-zone: "mylistbuildingtraffic.com" always_nxdomain
 local-zone: "myloanbaazar.com" always_nxdomain
 local-zone: "mylocal.dk" always_nxdomain
 local-zone: "mylocal.no" always_nxdomain
+local-zone: "mylocalfoodie.com.au" always_nxdomain
 local-zone: "myloglogistica.com.br" always_nxdomain
 local-zone: "mylokipanel.cf" always_nxdomain
 local-zone: "mylokipanel.ga" always_nxdomain
@@ -49823,6 +49863,7 @@ local-zone: "oraclewednesday.org" always_nxdomain
 local-zone: "oraio.com.py" always_nxdomain
 local-zone: "oralcamp.com.br" always_nxdomain
 local-zone: "oralflora.jp" always_nxdomain
+local-zone: "oralloy.com" always_nxdomain
 local-zone: "oramos.com.ar" always_nxdomain
 local-zone: "oranbet.ml" always_nxdomain
 local-zone: "orange-county-loans.com" always_nxdomain
@@ -50023,6 +50064,7 @@ local-zone: "osim-heshbon.co.il" always_nxdomain
 local-zone: "osirisre.online" always_nxdomain
 local-zone: "osiyo555.com" always_nxdomain
 local-zone: "osk-hornet.pl" always_nxdomain
+local-zone: "oskarnews.gazashare.com" always_nxdomain
 local-zone: "osliving.com" always_nxdomain
 local-zone: "osmanager.com.br" always_nxdomain
 local-zone: "osmanisports.com" always_nxdomain
@@ -50289,6 +50331,7 @@ local-zone: "oyunw.com" always_nxdomain
 local-zone: "oz-dn.org" always_nxdomain
 local-zone: "oz-link.com" always_nxdomain
 local-zone: "oz-tekpersonelkiyafetleri.com" always_nxdomain
+local-zone: "oz.timeisletitgo.ru" always_nxdomain
 local-zone: "oz4eai75936b8d.com" always_nxdomain
 local-zone: "oz7p.dk" always_nxdomain
 local-zone: "oz9lla.dk" always_nxdomain
@@ -53158,6 +53201,7 @@ local-zone: "privacydesignstudio.com" always_nxdomain
 local-zone: "privacymails.space" always_nxdomain
 local-zone: "privacytools.life" always_nxdomain
 local-zone: "privacytools.site" always_nxdomain
+local-zone: "privacytoolsstore.website" always_nxdomain
 local-zone: "privat-cyprian.sk" always_nxdomain
 local-zone: "private-accounting.com" always_nxdomain
 local-zone: "private-dining.com.ua" always_nxdomain
@@ -53450,6 +53494,7 @@ local-zone: "proluxshop.ir" always_nxdomain
 local-zone: "prom-alp.kz" always_nxdomain
 local-zone: "prom-engineering.com" always_nxdomain
 local-zone: "promacsolutions.mx" always_nxdomain
+local-zone: "promassager.ga" always_nxdomain
 local-zone: "promdon.dn.ua" always_nxdomain
 local-zone: "promente.it" always_nxdomain
 local-zone: "promep.utrng.edu.mx" always_nxdomain
@@ -57539,6 +57584,7 @@ local-zone: "sageth.net" always_nxdomain
 local-zone: "sagiri.org" always_nxdomain
 local-zone: "saglikbakanligi20gbinternet.com" always_nxdomain
 local-zone: "saglikbakanligindanhediye20gb.com" always_nxdomain
+local-zone: "saglikgoalapp.site" always_nxdomain
 local-zone: "saglikliapp.live" always_nxdomain
 local-zone: "sagliklibedenim.com" always_nxdomain
 local-zone: "sagrathi.com" always_nxdomain
@@ -58757,6 +58803,7 @@ local-zone: "sedotwcdadilancar.com" always_nxdomain
 local-zone: "sedotwcsejakarta.com" always_nxdomain
 local-zone: "seductivestrands.com" always_nxdomain
 local-zone: "see.prblm.li" always_nxdomain
+local-zone: "seeanu.ru" always_nxdomain
 local-zone: "seecareer.com" always_nxdomain
 local-zone: "seednext.work" always_nxdomain
 local-zone: "seedopk.org" always_nxdomain
@@ -60233,6 +60280,7 @@ local-zone: "silverlineboatsales.com" always_nxdomain
 local-zone: "silverliningcoaching.com.au" always_nxdomain
 local-zone: "silverlinktechnologies.com" always_nxdomain
 local-zone: "silveroks.com.ua" always_nxdomain
+local-zone: "silverstargalaxy.com.silverstartv.website" always_nxdomain
 local-zone: "silverstoltsen.com" always_nxdomain
 local-zone: "silverswiss.com" always_nxdomain
 local-zone: "silvesterinmailand.com" always_nxdomain
@@ -60282,6 +60330,7 @@ local-zone: "simonsolutions.us" always_nxdomain
 local-zone: "simorghealborz.com" always_nxdomain
 local-zone: "simp-consulting.pl" always_nxdomain
 local-zone: "simpelway.dk.linux154.unoeuro-server.com" always_nxdomain
+local-zone: "simpl.pw" always_nxdomain
 local-zone: "simplatecplc.com" always_nxdomain
 local-zone: "simple-it.org" always_nxdomain
 local-zone: "simple-it.si" always_nxdomain
@@ -61161,6 +61210,7 @@ local-zone: "so-lonely.fr" always_nxdomain
 local-zone: "so-nettel.ml" always_nxdomain
 local-zone: "so.nevisconsultants.com" always_nxdomain
 local-zone: "so370.com" always_nxdomain
+local-zone: "so4.seeanu.ru" always_nxdomain
 local-zone: "so766.sohost.pl" always_nxdomain
 local-zone: "soa.com.pk" always_nxdomain
 local-zone: "soafinance.com" always_nxdomain
@@ -62394,6 +62444,7 @@ local-zone: "staging.overlogo.com" always_nxdomain
 local-zone: "staging.pashminadevelopers.com" always_nxdomain
 local-zone: "staging.phandeeyar.org" always_nxdomain
 local-zone: "staging.playhualien.com" always_nxdomain
+local-zone: "staging.popclusive.asia" always_nxdomain
 local-zone: "staging.presthemes.com" always_nxdomain
 local-zone: "staging.securenetworks.pk" always_nxdomain
 local-zone: "staging.semperkitchen.com" always_nxdomain
@@ -62720,6 +62771,7 @@ local-zone: "steinerurology.com.au" always_nxdomain
 local-zone: "steinoe.dk" always_nxdomain
 local-zone: "steinplatten-tirol.at" always_nxdomain
 local-zone: "stekols.ru" always_nxdomain
+local-zone: "stelamedien.de" always_nxdomain
 local-zone: "stelastraveldiary.com" always_nxdomain
 local-zone: "steldesign.com" always_nxdomain
 local-zone: "stella.pk" always_nxdomain
@@ -63512,6 +63564,7 @@ local-zone: "sunandsand.minnesotacowboy.com" always_nxdomain
 local-zone: "sunaner.com" always_nxdomain
 local-zone: "sunart-5.com" always_nxdomain
 local-zone: "sunblessvgp.com" always_nxdomain
+local-zone: "sunboom-gift.com" always_nxdomain
 local-zone: "sunchipaint.com.vn" always_nxdomain
 local-zone: "suncity116.com" always_nxdomain
 local-zone: "suncity727.com" always_nxdomain
@@ -64187,6 +64240,7 @@ local-zone: "t2.webtilia.com" always_nxdomain
 local-zone: "t2lisboa.lisbonlab.com" always_nxdomain
 local-zone: "t2tdesigns.com" always_nxdomain
 local-zone: "t3-thanglongcapital.top" always_nxdomain
+local-zone: "t37b.iwakalong.ru" always_nxdomain
 local-zone: "t3dgraphics.com" always_nxdomain
 local-zone: "t5forums.com" always_nxdomain
 local-zone: "t6226.com" always_nxdomain
@@ -64722,6 +64776,7 @@ local-zone: "taxpos.com" always_nxdomain
 local-zone: "taxready.in" always_nxdomain
 local-zone: "taxtell.ru" always_nxdomain
 local-zone: "taxtionfree.co.in" always_nxdomain
+local-zone: "taxukrebates.com" always_nxdomain
 local-zone: "tay.batt2u.com" always_nxdomain
 local-zone: "taybabuilders.com" always_nxdomain
 local-zone: "tayebsojib.com" always_nxdomain
@@ -70543,6 +70598,7 @@ local-zone: "vip-rocket.net" always_nxdomain
 local-zone: "vip-watch.store" always_nxdomain
 local-zone: "vip.lijinxi.com" always_nxdomain
 local-zone: "vip.maohuagong.com" always_nxdomain
+local-zone: "vip.recommendedtoyoo.com" always_nxdomain
 local-zone: "vip.zbfcxx.cn" always_nxdomain
 local-zone: "vip163.cf" always_nxdomain
 local-zone: "vip163.ga" always_nxdomain
@@ -70614,6 +70670,7 @@ local-zone: "virtualupload.org" always_nxdomain
 local-zone: "virtuoushairline.org" always_nxdomain
 local-zone: "virtuspartners.cl" always_nxdomain
 local-zone: "viruscheckmake.gq" always_nxdomain
+local-zone: "virustreatments.empeeevents.com" always_nxdomain
 local-zone: "visa.indonesia.nl" always_nxdomain
 local-zone: "visa.org.ua" always_nxdomain
 local-zone: "visaatlantis.com" always_nxdomain
@@ -74031,6 +74088,7 @@ local-zone: "ybtvmt.info" always_nxdomain
 local-zone: "ybuat49ounh.kaligodfrey.casa" always_nxdomain
 local-zone: "ybuzzfmdy.cf" always_nxdomain
 local-zone: "yc.satnam.ru" always_nxdomain
+local-zone: "yc5.timeisletitgo.ru" always_nxdomain
 local-zone: "ycg-tw.com" always_nxdomain
 local-zone: "ych.jp" always_nxdomain
 local-zone: "ychynt.com" always_nxdomain
@@ -75228,5 +75286,6 @@ local-zone: "zzii.net" always_nxdomain
 local-zone: "zzjph.com" always_nxdomain
 local-zone: "zzlong.xyz" always_nxdomain
 local-zone: "zzpit.dk" always_nxdomain
+local-zone: "zzv.seeanu.ru" always_nxdomain
 local-zone: "zzyin.cn" always_nxdomain
 local-zone: "zzz78.tk" always_nxdomain
diff --git a/urlhaus-filter.txt b/urlhaus-filter.txt
index 8a029a27..e8f1bae5 100644
--- a/urlhaus-filter.txt
+++ b/urlhaus-filter.txt
@@ -1,5 +1,5 @@
 ! Title: abuse.ch URLhaus Malicious URL Blocklist
-! Updated: Wed, 29 Apr 2020 12:09:39 UTC
+! Updated: Thu, 30 Apr 2020 00:09:24 UTC
 ! Expires: 1 day (update frequency)
 ! Repo: https://gitlab.com/curben/urlhaus-filter
 ! License: https://creativecommons.org/publicdomain/zero/1.0/
@@ -481,6 +481,7 @@
 1001-territoires.fr
 1001newsng.com
 1001tur-tver.ru
+10022020newfolder1002002231-service1002.space
 100alternance.fr
 100kala.ir
 100percentforkids.org
@@ -1061,6 +1062,7 @@
 104.168.190.82
 104.168.191.89
 104.168.195.250
+104.168.198.194
 104.168.198.208
 104.168.198.26
 104.168.201.250
@@ -1092,6 +1094,7 @@
 104.168.98.206
 104.168.99.30
 104.174.110.58
+104.175.99.243
 104.181.22.218
 104.192.1.10
 104.192.1.27
@@ -1180,6 +1183,7 @@
 104.244.78.187
 104.244.79.123
 104.244.79.197
+104.244.79.235
 104.248.1.184
 104.248.10.33
 104.248.112.206
@@ -2256,6 +2260,7 @@
 110.155.49.79
 110.155.51.119
 110.155.51.155
+110.155.51.173
 110.155.52.194
 110.155.52.210
 110.155.52.78
@@ -2935,6 +2940,7 @@
 112.122.227.241
 112.122.61.207
 112.122.61.238
+112.122.61.250
 112.122.61.47
 112.123.109.118
 112.123.109.145
@@ -3262,6 +3268,7 @@
 113.221.12.124
 113.221.12.219
 113.221.13.79
+113.221.145.204
 113.221.146.133
 113.221.147.115
 113.221.48.208
@@ -3892,6 +3899,7 @@
 114.235.200.56
 114.235.202.162
 114.235.202.69
+114.235.202.95
 114.235.203.26
 114.235.208.166
 114.235.209.22
@@ -4162,6 +4170,7 @@
 114.239.35.124
 114.239.36.147
 114.239.36.91
+114.239.37.159
 114.239.39.210
 114.239.39.76
 114.239.41.70
@@ -4474,6 +4483,7 @@
 115.216.111.23
 115.216.115.122
 115.216.118.218
+115.216.210.105
 115.216.214.215
 115.216.24.55
 115.216.25.37
@@ -4833,6 +4843,7 @@
 115.49.75.98
 115.49.76.11
 115.49.76.124
+115.49.76.131
 115.49.76.156
 115.49.76.187
 115.49.76.190
@@ -4849,6 +4860,7 @@
 115.49.77.146
 115.49.77.237
 115.49.77.248
+115.49.77.55
 115.49.77.71
 115.49.78.111
 115.49.78.137
@@ -5040,6 +5052,7 @@
 115.53.31.10
 115.53.39.133
 115.53.55.137
+115.53.63.184
 115.53.85.87
 115.54.103.113
 115.54.106.146
@@ -5289,6 +5302,7 @@
 115.56.118.133
 115.56.119.128
 115.56.119.142
+115.56.119.6
 115.56.120.212
 115.56.121.32
 115.56.123.101
@@ -5497,6 +5511,7 @@
 115.59.118.119
 115.59.118.128
 115.59.118.173
+115.59.118.51
 115.59.12.21
 115.59.120.233
 115.59.120.252
@@ -5626,6 +5641,7 @@
 115.61.15.32
 115.61.15.57
 115.61.15.82
+115.61.2.125
 115.61.2.183
 115.61.2.219
 115.61.2.225
@@ -5753,6 +5769,7 @@
 115.63.58.122
 115.63.58.142
 115.63.58.225
+115.63.60.199
 115.63.66.114
 115.63.68.150
 115.63.69.168
@@ -6953,6 +6970,7 @@
 117.88.172.200
 117.88.23.24
 117.90.117.185
+117.90.128.14
 117.90.167.17
 117.90.167.39
 117.90.19.184
@@ -8353,6 +8371,7 @@
 123.10.2.75
 123.10.2.87
 123.10.20.105
+123.10.20.166
 123.10.20.210
 123.10.20.42
 123.10.20.54
@@ -8368,6 +8387,7 @@
 123.10.22.53
 123.10.222.107
 123.10.222.129
+123.10.229.210
 123.10.23.171
 123.10.23.194
 123.10.23.231
@@ -9403,6 +9423,7 @@
 123.9.80.58
 123.9.84.74
 123.9.86.66
+123.96.134.180
 123.96.229.149
 123.96.26.32
 123.96.36.221
@@ -9696,6 +9717,7 @@
 125.109.198.82
 125.109.73.39
 125.113.166.213
+125.113.66.85
 125.113.71.127
 125.113.72.214
 125.115.143.80
@@ -11119,6 +11141,7 @@
 14.113.229.118
 14.113.229.176
 14.113.229.225
+14.113.229.49
 14.113.231.17
 14.118.212.137
 14.118.213.162
@@ -13277,6 +13300,7 @@
 165.227.212.62
 165.227.213.164
 165.227.218.79
+165.227.220.189
 165.227.220.53
 165.227.221.72
 165.227.230.68
@@ -13390,6 +13414,7 @@
 167.172.201.10
 167.172.201.113
 167.172.201.141
+167.172.206.156
 167.172.208.31
 167.172.209.140
 167.172.209.209
@@ -16951,6 +16976,7 @@
 179.127.180.9
 179.14.150.9
 179.156.136.113
+179.156.192.195
 179.156.196.13
 179.162.177.249
 179.162.179.107
@@ -17291,6 +17317,7 @@
 180.118.87.87
 180.119.156.246
 180.119.170.61
+180.120.12.85
 180.120.139.106
 180.120.14.158
 180.120.15.189
@@ -17420,6 +17447,7 @@
 180.124.204.213
 180.124.211.86
 180.124.214.147
+180.124.214.4
 180.124.223.200
 180.124.225.192
 180.124.225.68
@@ -18420,6 +18448,7 @@
 182.121.129.43
 182.121.133.229
 182.121.135.221
+182.121.152.74
 182.121.153.224
 182.121.154.112
 182.121.155.194
@@ -18616,6 +18645,7 @@
 182.126.1.102
 182.126.1.22
 182.126.100.190
+182.126.101.85
 182.126.102.35
 182.126.102.66
 182.126.103.146
@@ -18710,6 +18740,7 @@
 182.126.212.59
 182.126.212.68
 182.126.213.115
+182.126.213.171
 182.126.213.190
 182.126.213.199
 182.126.213.245
@@ -18966,6 +18997,7 @@
 182.127.2.37
 182.127.2.64
 182.127.201.102
+182.127.201.42
 182.127.202.23
 182.127.205.85
 182.127.208.131
@@ -19775,6 +19807,7 @@
 185.163.47.142
 185.163.47.144
 185.163.47.188
+185.163.47.253
 185.164.32.132
 185.164.40.36
 185.164.72.110
@@ -20748,6 +20781,7 @@
 187.57.90.131
 187.59.210.139
 187.62.179.28
+187.63.19.112
 187.72.59.113
 187.73.21.30
 187.74.139.94
@@ -22571,6 +22605,7 @@
 199.83.207.199
 199.83.207.207
 199.83.207.225
+199.83.207.230
 199.83.207.249
 199.83.207.35
 199.83.207.47
@@ -22636,6 +22671,7 @@
 1jpg1host.net16.net
 1jxmt.com
 1kvk.com
+1l04.timeisletitgo.ru
 1liveradar.de
 1lo.lukow.pl
 1localexpert.com
@@ -22820,6 +22856,7 @@
 2.55.89.188
 2.55.97.245
 2.56.213.96
+2.56.240.32
 2.56.241.218
 2.56.242.138
 2.56.8.102
@@ -22902,6 +22939,7 @@
 200.222.50.26
 200.225.120.12
 200.232.175.43
+200.233.206.164
 200.24.248.158
 200.28.78.213
 200.30.132.50
@@ -23518,6 +23556,7 @@
 206.189.205.248
 206.189.206.108
 206.189.206.89
+206.189.208.7
 206.189.209.111
 206.189.21.146
 206.189.21.255
@@ -24858,6 +24897,7 @@
 219.155.168.139
 219.155.169.175
 219.155.169.194
+219.155.169.47
 219.155.170.113
 219.155.170.124
 219.155.170.165
@@ -24874,6 +24914,7 @@
 219.155.172.72
 219.155.172.74
 219.155.173.117
+219.155.173.125
 219.155.173.136
 219.155.173.247
 219.155.173.255
@@ -25701,6 +25742,7 @@
 222.138.180.237
 222.138.180.34
 222.138.181.136
+222.138.181.140
 222.138.181.198
 222.138.181.252
 222.138.181.53
@@ -27133,6 +27175,7 @@
 27.41.223.26
 27.41.224.135
 27.41.224.145
+27.41.224.202
 27.41.224.81
 27.41.225.253
 27.41.227.194
@@ -27257,6 +27300,7 @@
 2wheelrider.com
 2winresidency.com
 2x2print.com
+2xmy.timeisletitgo.ru
 2yb5.andichust.ru
 2yf32q.ch.files.1drv.com
 2yourwealth.com.au
@@ -28118,6 +28162,7 @@
 36.108.154.99
 36.108.155.17
 36.108.155.78
+36.108.228.213
 36.108.229.41
 36.108.230.249
 36.108.231.67
@@ -28689,6 +28734,7 @@
 37.49.226.19
 37.49.226.192
 37.49.226.204
+37.49.226.209
 37.49.226.21
 37.49.226.43
 37.49.226.5
@@ -28880,6 +28926,7 @@
 3ppuubb.com
 3prokladkaeu.com
 3pubeu.com
+3q9h.timeisletitgo.ru
 3rdperson.ml
 3rdsectorsupportafrica.org
 3rytghjhkss.cf
@@ -28902,6 +28949,7 @@
 3uso2927wiwofeppwi29.com
 3v5.net
 3v6bz7g2bncvrinwmaawz2t4.file.truckbennels.com
+3vc6.seeanu.ru
 3vdataguard.com
 3vventures.com
 3wereareyou.icu
@@ -29361,6 +29409,7 @@
 42.227.186.139
 42.227.186.173
 42.227.186.220
+42.227.186.34
 42.227.187.137
 42.227.187.158
 42.227.187.193
@@ -30146,6 +30195,7 @@
 42.234.85.68
 42.234.85.87
 42.234.86.155
+42.234.86.212
 42.234.86.22
 42.234.86.246
 42.234.86.64
@@ -30488,6 +30538,7 @@
 42.239.124.91
 42.239.126.247
 42.239.127.58
+42.239.132.107
 42.239.132.124
 42.239.132.158
 42.239.133.185
@@ -30571,6 +30622,7 @@
 42.239.167.248
 42.239.167.82
 42.239.168.103
+42.239.168.235
 42.239.169.101
 42.239.169.143
 42.239.169.235
@@ -31385,6 +31437,7 @@
 45.95.168.98
 45.95.169.232
 45.95.169.233
+45.95.169.234
 45.95.169.238
 45.95.55.110
 45.95.55.121
@@ -32855,6 +32908,7 @@
 49.89.227.51
 49.89.227.84
 49.89.228.15
+49.89.228.167
 49.89.228.192
 49.89.228.51
 49.89.230.122
@@ -33568,6 +33622,7 @@
 51.89.0.134
 51.89.100.108
 51.89.115.101
+51.89.119.154
 51.89.126.21
 51.89.139.104
 51.89.163.174
@@ -34107,6 +34162,7 @@
 59.53.136.43
 59.55.11.202
 59.55.24.37
+59.55.253.105
 59.55.4.163
 59.55.93.179
 59.62.84.56
@@ -35258,6 +35314,7 @@
 61.52.131.32
 61.52.138.171
 61.52.144.189
+61.52.144.240
 61.52.144.91
 61.52.145.44
 61.52.190.240
@@ -37357,6 +37414,7 @@
 81.19.215.61
 81.193.147.127
 81.193.196.46
+81.196.213.134
 81.198.87.93
 81.2.131.12
 81.2.240.140
@@ -37660,6 +37718,7 @@
 85.10.196.43
 85.100.112.218
 85.100.126.73
+85.100.127.218
 85.100.32.114
 85.100.41.71
 85.100.96.127
@@ -38565,6 +38624,7 @@
 92.38.47.207
 92.39.78.146
 92.41.181.235
+92.41.46.206
 92.44.62.174
 92.45.198.60
 92.45.198.74
@@ -39178,6 +39238,8 @@ FlorissantFire.com
 ForRealTraffic.com
 Heavensconcept.ng
 Mozilla.theworkpc.com
+Muanha.xyz
+NCERTSOLUTIONACADEMY.COM
 NeedCareers.com
 OpalAlert.com
 RENTITOUT.CO
@@ -39228,6 +39290,7 @@ a.pomf.su
 a.pomfe.co
 a.rokket.space
 a.safe.moe
+a.seeanu.ru
 a.teamworx.ph
 a.top4top.io/p_1485hd0f51.jpg
 a.top4top.io/p_15275aw691.jpg
@@ -40076,6 +40139,7 @@ addpics.site
 addtomap.ru
 adducity.ga
 addvitashop.com
+ade.topepics.com
 adebeo.co.in
 adecityevents.com
 aded.co.in
@@ -40366,6 +40430,7 @@ aeletselschade.nl
 aelinks.com
 aellly.000webhostapp.com
 aelmas.5gbfree.com
+aelogica.com
 aemgrup.com.tr
 aemo-mecanique-usinage.fr
 aengineeringltd.com
@@ -41425,6 +41490,7 @@ alexandre-muhl.fr
 alexandrearchitecte.fr
 alexandrearealty.com
 alexandrecabello.com.br
+alexandredekerchove.com
 alexandrepaiva.com
 alexandrerivelli.com
 alexandria.run
@@ -43640,6 +43706,7 @@ ariacommunications.in
 ariadna.org.ua
 ariafm.gr
 arianasdelinewdorpplaza.com
+arianegerkens.com
 arianrayaneh.com
 arianshopping.com
 ariasms.ir
@@ -46130,6 +46197,7 @@ batch-photo-editor.com
 batchenangmuasieuben.com
 batdongsan3b.com
 batdongsanbamien24h.com
+batdongsanbentre.com.vn
 batdongsanhadong.info
 batdongsanhathanh.net
 batdongsanhuyphat68.com
@@ -47118,6 +47186,7 @@ betokont.com.tr
 beton-dubna.com
 betonbrother.com
 betonkeritesgyar.hu
+betopceo.com
 betprediksi.com
 betrachtungssicht.de
 betrogroup.com
@@ -48728,6 +48797,7 @@ blueboxsourcing.com
 blueboxxinterior.com
 bluebunni.com
 blueclutch.com
+bluecollarfinancial.net
 bluecrayonconsulting.com
 bluecrestpress.com
 bluecrystalband.com
@@ -48969,6 +49039,7 @@ boldog.hu
 boldreflectionsmn.com
 bolegreenhotel.com
 bolehprediksi.com
+bolescy.com
 bolesni.net
 bolhomes.stringbind.info
 bolidar.dnset.com
@@ -49593,6 +49664,7 @@ bristter.com
 britan.mx
 britanniasuperior.uk
 briteindonesia.com
+britica.vn
 british-rainbow.com
 britishvoices.co.uk
 brittanishantel.com
@@ -50701,6 +50773,7 @@ capacitacioncomercial.cl
 capamh.org
 capanoandassociates.com
 capasso.de
+capath.vn
 capaxinfiniti.ml
 capbangkok.com
 capebethel.org
@@ -52071,11 +52144,13 @@ cercolorlaghi.com
 cerebro-coaching.fr
 cerenkent.com
 cereriaterenzi.com/sites/EN_en/Invoices-Overdue
+cerisiers.be
 ceritaislami.000webhostapp.com
 cermiamakmur.com
 ceronamtinclube.icu
 cerotex.webprojemiz.com
 cerovica.com
+cerradocredito.com.br
 cerrahibeyinpedi.com
 cerrajeria-sabbath.holy-animero.com
 cerrajeriajimenez.cl
@@ -52421,6 +52496,7 @@ cheappigeontraps.com
 cheapraccoontraps.com
 cheapseoprovider.com
 cheapsilkscreenprinting.com
+cheaptours.in.ua
 cheaptrainticket.cogbiz-infotech.com
 cheaptravel-spb.ru
 cheapwebvn.net
@@ -52497,6 +52573,7 @@ chepi.net
 cherdavis.com
 chergo.es
 cherinetiles.com
+cheriyilbuilders.com
 cherkassy.info
 cheron.co.uk
 cherrett.net
@@ -55213,6 +55290,7 @@ cryptomega.ga
 cryptomub.com
 cryptonias.top
 cryptoniaz.top
+cryptoomarket.com
 cryptorgasms.com
 cryptoseed.co.za
 cryptostruct.bunker.zone
@@ -56096,6 +56174,7 @@ dardash.info
 dareldjazair.com
 darelyateem.org
 darianinc.com
+daricci.de
 darice.in
 dario-mraz.from.hr
 dariojucker.edelegation.com
@@ -57051,6 +57130,7 @@ demo1.parsnet.space
 demo10.onbm.ir
 demo12.maybay.net
 demo13.abc-it.net.au
+demo13.dsdemosite.com
 demo15.versamall.com
 demo15.webindia.com
 demo19.keltron.org
@@ -57177,6 +57257,7 @@ dentsheaven.co.uk
 dentsov.ru
 denttrade.com.kg
 denuchoco.com
+denunciesoftwareilegal.org.br
 denverfs.org
 denverktrade.xyz
 deny.radio-denisa.com
@@ -57448,6 +57529,7 @@ dev.454mediahouse.com
 dev.abitotv.it
 dev.adrianapatsalou.com
 dev.ameekids.com
+dev.apshaps.se
 dev.artoonsolutions.com
 dev.ateamymm.ca
 dev.bassetlawscouts.org.uk
@@ -58079,6 +58161,7 @@ digistudy.vn
 digital-cloud.healthycheapfast.com
 digital-design.com.cn
 digital-life.pro
+digital-marketing-institute-delhi.empeeevents.com
 digital-vision.nl
 digital.audiobookjunkie.com
 digital.etnasoft.eu
@@ -60592,6 +60675,7 @@ drinkdirect.co.uk
 drinkfoodapp.com
 drinkgusto.sg
 drinklass.com.br
+drinkopolykopen.nl
 drischler.de
 drive.carlsongracieanaheim.com
 drive.deescreationstore.com
@@ -62864,6 +62948,7 @@ drive.google.com/uc?export=download&id=1Pt89mFO0G1dI3HgQvy4a08DRssHc4cs-
 drive.google.com/uc?export=download&id=1Pvf3tztJ8pzj7QrOsiO6BKj8RnNhviv2
 drive.google.com/uc?export=download&id=1PviEcA5yAdZcrysTKQKl2JlN4NxCtxen
 drive.google.com/uc?export=download&id=1Q0Ltq2Kw5sxwS2JWRYNfsyrv58mrj4ks
+drive.google.com/uc?export=download&id=1Q2PX2OM5w6WFMrF_5lIhxBuqpcaxfjtr
 drive.google.com/uc?export=download&id=1Q3PyGHmArVGhseocKK5KcQAKPZ9OacQz
 drive.google.com/uc?export=download&id=1Q3gmFRTFRx-q6FCn8n6sLWZ6l7qiT42h
 drive.google.com/uc?export=download&id=1Q3ravYrC6zwnDgHyu1Ch59ly9kUD9HN5
@@ -72466,6 +72551,7 @@ dunysaki.ru
 duoliprudential.com.watchdogdns.duckdns.org
 duomasters.com
 duongcaoky.com
+duongfpt.ga
 duongmanhtuan.com
 duoscript.com
 duotechgroup.com
@@ -72648,6 +72734,7 @@ dyvrullters.in
 dywanypers.pl
 dyyhfk120.com
 dzain.com.br
+dzapasigroup.usapglobal.org
 dzbo.dp.ua
 dzbooster.com
 dzcorlandyu.band
@@ -77735,6 +77822,7 @@ franchisorsuccess.com.au
 francini.dk
 francis-china.com
 franciscossc.pbworks.com
+francois-champion.com
 francois-rommens.fr
 francoise-vauzeilles.com
 francoisebon.fr
@@ -81318,6 +81406,7 @@ h.eurotrading.com.pl
 h.j990981.ru
 h.top4top.io
 h.valerana44.ru
+h1.iwakalong.ru
 h112321.s08.test-hf.su
 h13.doshimotai.ru
 h135460.s08.test-hf.su
@@ -86828,6 +86917,7 @@ jasclair.com
 jasclean.sk
 jascopump.com
 jaseminedenise.com
+jaservicioscontables.casteviajes.com
 jasesoi.com
 jaset.com.mx
 jashneadab.org
@@ -87125,6 +87215,7 @@ jessie-equitation.fr
 jessijonesstar.com
 jessikarkan.com
 jesswalsh.co.uk
+jessymart.flexyhub.com
 jester.com.au
 jet2.didev.id
 jetallied.com
@@ -88365,6 +88456,7 @@ kalyoncularyapi.com
 kam.vladistart.art
 kamadecor.ru
 kamagra-wolf.com
+kamagra.in.rs
 kamagra4uk.com
 kamajankowska.com
 kamakran.ru
@@ -89936,6 +90028,7 @@ koralli.if.ua
 koranpeduli.co.id
 korastation.com
 koratmobilya.xyz
+koravit.zaeteaw.net
 korayche2002.free.fr
 korbi-studio.com
 korbiel.info
@@ -97517,6 +97610,7 @@ monoclepetes.com
 monodoze.com
 monoit.eu
 monomind.co.kr
+mononet.lv
 monopeets.com
 monrottweiler.fr
 monset.it
@@ -97663,6 +97757,7 @@ morozan.it
 morrell-stinson.com
 morricone.kayakodev.com
 morrissan.com
+morruko.antesos.com
 morsengthaithai.com
 morshinnet.ru
 mortalityreview.net
@@ -98622,6 +98717,7 @@ mylistbuildingtraffic.com
 myloanbaazar.com
 mylocal.dk
 mylocal.no
+mylocalfoodie.com.au
 myloglogistica.com.br
 mylokipanel.cf
 mylokipanel.ga
@@ -101943,6 +102039,7 @@ onedrive.live.com/download?cid=2F947402293C14C1&resid=2F947402293C14C1%21116&aut
 onedrive.live.com/download?cid=2F947402293C14C1&resid=2F947402293C14C1%21118&authkey=ACrL2Iiem-ZJer8
 onedrive.live.com/download?cid=2F947402293C14C1&resid=2F947402293C14C1%21119&authkey=APMAkX2CQB9rImU
 onedrive.live.com/download?cid=2F996A2F28356A49&resid=2F996A2F28356A49%21134&authkey=ABrC7U5UvhNrXII
+onedrive.live.com/download?cid=3112E77688F09693&resid=3112E77688F09693%21320&authkey=AOOUjzuf408Dclw
 onedrive.live.com/download?cid=3112E77688F09693&resid=3112E77688F09693%21321&authkey=ALmpxnBTSBzAUnA
 onedrive.live.com/download?cid=31795CF0FFB84FEE&resid=31795CF0FFB84FEE%21105&authkey=AD4rjP6prwaFFno
 onedrive.live.com/download?cid=341DF7E18D513049&resid=341DF7E18D513049%21110&authkey=ACZqAh_FBkJu3AY
@@ -102922,6 +103019,7 @@ oraclewednesday.org
 oraio.com.py
 oralcamp.com.br
 oralflora.jp
+oralloy.com
 oramos.com.ar
 oranbet.ml
 orange-county-loans.com
@@ -103122,6 +103220,7 @@ osim-heshbon.co.il
 osirisre.online
 osiyo555.com
 osk-hornet.pl
+oskarnews.gazashare.com
 osliving.com
 osmanager.com.br
 osmanisports.com
@@ -103389,6 +103488,7 @@ oyunw.com
 oz-dn.org
 oz-link.com
 oz-tekpersonelkiyafetleri.com
+oz.timeisletitgo.ru
 oz4eai75936b8d.com
 oz7p.dk
 oz9lla.dk
@@ -104202,6 +104302,7 @@ pastebin.com/raw/26mMJCuL
 pastebin.com/raw/27xsvVeZ
 pastebin.com/raw/2BGQMU3s
 pastebin.com/raw/2C97Q7SS
+pastebin.com/raw/2Cc1um47
 pastebin.com/raw/2EGEQgWu
 pastebin.com/raw/2Enk8GGe
 pastebin.com/raw/2FujfvU2
@@ -104215,6 +104316,7 @@ pastebin.com/raw/2MWDNGkp
 pastebin.com/raw/2Mfjz9Cp
 pastebin.com/raw/2NKZ44gr
 pastebin.com/raw/2Qpmy6Hr
+pastebin.com/raw/2QygLNc6
 pastebin.com/raw/2RA8ggP8
 pastebin.com/raw/2RyggrTF
 pastebin.com/raw/2S7m43cN
@@ -104743,6 +104845,7 @@ pastebin.com/raw/AiKZckiE
 pastebin.com/raw/Aisfgwyb
 pastebin.com/raw/AjEujLA3
 pastebin.com/raw/AkfTQsXy
+pastebin.com/raw/Amm2ja7E
 pastebin.com/raw/An9MbKv5
 pastebin.com/raw/AnnvDPYx
 pastebin.com/raw/AnsHH70i
@@ -105460,6 +105563,7 @@ pastebin.com/raw/Msi7TKXe
 pastebin.com/raw/MtMiWqQC
 pastebin.com/raw/MuKE1H7z
 pastebin.com/raw/MuTzjSNr
+pastebin.com/raw/Muz2mJiJ
 pastebin.com/raw/MuzwGkDy
 pastebin.com/raw/MvDHSXqF
 pastebin.com/raw/Mwbhz9Ua
@@ -105573,6 +105677,7 @@ pastebin.com/raw/PeDw6vWd
 pastebin.com/raw/PfLi3diu
 pastebin.com/raw/PfUj3cgY
 pastebin.com/raw/PfWTP4PM
+pastebin.com/raw/PfYbwYfs
 pastebin.com/raw/PiVnn4Da
 pastebin.com/raw/Pkm2viv3
 pastebin.com/raw/PkntiPnX
@@ -105840,6 +105945,7 @@ pastebin.com/raw/Tku5ubPu
 pastebin.com/raw/TkzbfNJv
 pastebin.com/raw/Tp7UQ5Ms
 pastebin.com/raw/TppcBtNJ
+pastebin.com/raw/Tps40B96
 pastebin.com/raw/TqNik0Yd
 pastebin.com/raw/TqTpj30L
 pastebin.com/raw/TqyPcjgF
@@ -106081,6 +106187,7 @@ pastebin.com/raw/XxLbSJmd
 pastebin.com/raw/Xxqrce90
 pastebin.com/raw/XyApcbVR
 pastebin.com/raw/XzkGmXJj
+pastebin.com/raw/XzkRsmeg
 pastebin.com/raw/Y07vWQrB
 pastebin.com/raw/Y1pKRPD0
 pastebin.com/raw/Y2jGggLX
@@ -106202,6 +106309,7 @@ pastebin.com/raw/ZsWQg7Up
 pastebin.com/raw/Zt3fQmYs
 pastebin.com/raw/Zt5c88F6
 pastebin.com/raw/ZtVibdaA
+pastebin.com/raw/ZtsLYu3S
 pastebin.com/raw/Zunvk1Lm
 pastebin.com/raw/ZuvAaJy9
 pastebin.com/raw/ZvWCsS9e
@@ -106260,6 +106368,7 @@ pastebin.com/raw/adTFwSQL
 pastebin.com/raw/adgMnQn6
 pastebin.com/raw/ae3S5Eq1
 pastebin.com/raw/aePwb1jC
+pastebin.com/raw/aehmfKUZ
 pastebin.com/raw/af3CYkxm
 pastebin.com/raw/agf6HHm7
 pastebin.com/raw/ah4qP3tG
@@ -106298,6 +106407,7 @@ pastebin.com/raw/b8pQFkVY
 pastebin.com/raw/b9dFkCVG
 pastebin.com/raw/b9yGSiW1
 pastebin.com/raw/bArenSzE
+pastebin.com/raw/bAwYmSxY
 pastebin.com/raw/bBgpG7Xk
 pastebin.com/raw/bD9hGesp
 pastebin.com/raw/bFRA2q5U
@@ -106502,6 +106612,7 @@ pastebin.com/raw/eXAxpWCb
 pastebin.com/raw/eXiR5mip
 pastebin.com/raw/eXnA5nqf
 pastebin.com/raw/eYev1SfG
+pastebin.com/raw/earnR8r4
 pastebin.com/raw/eart3SHc
 pastebin.com/raw/ebV5xBVm
 pastebin.com/raw/ebxb4Bqj
@@ -106782,6 +106893,7 @@ pastebin.com/raw/iiuHB9gX
 pastebin.com/raw/ik9R6swL
 pastebin.com/raw/inLZPJm0
 pastebin.com/raw/inPtSYFK
+pastebin.com/raw/inw8g5S4
 pastebin.com/raw/ipPTm1qM
 pastebin.com/raw/irH6YKgQ
 pastebin.com/raw/itTuZJrz
@@ -106902,6 +107014,7 @@ pastebin.com/raw/kipzXmUZ
 pastebin.com/raw/kjKci9J8
 pastebin.com/raw/kjNYaw6G
 pastebin.com/raw/kjNZNa8Y
+pastebin.com/raw/kjRExq4r
 pastebin.com/raw/kkTVvYhC
 pastebin.com/raw/knyBSXgJ
 pastebin.com/raw/krAHYi5N
@@ -107025,6 +107138,7 @@ pastebin.com/raw/nhg8ENKS
 pastebin.com/raw/njXDh14z
 pastebin.com/raw/nkT6YXPb
 pastebin.com/raw/nm4CjdyS
+pastebin.com/raw/nm89TzC3
 pastebin.com/raw/nrt2XNjb
 pastebin.com/raw/nsKJGM6G
 pastebin.com/raw/nsL8jSEB
@@ -107146,6 +107260,7 @@ pastebin.com/raw/qcH5wbd1
 pastebin.com/raw/qcmYh1LX
 pastebin.com/raw/qcxEwxmc
 pastebin.com/raw/qeMZ0hsA
+pastebin.com/raw/qhC2b0uA
 pastebin.com/raw/qiJrsLYg
 pastebin.com/raw/qj1cyCf5
 pastebin.com/raw/qmxvZneQ
@@ -107161,6 +107276,7 @@ pastebin.com/raw/qwZ0XRgD
 pastebin.com/raw/qx3sXdm1
 pastebin.com/raw/qx8rTte7
 pastebin.com/raw/qxZ5guFb
+pastebin.com/raw/qz5LLD00
 pastebin.com/raw/r3dhFEMS
 pastebin.com/raw/r6anjBZf
 pastebin.com/raw/r80fzTLv
@@ -107245,6 +107361,7 @@ pastebin.com/raw/smduhTqT
 pastebin.com/raw/snLGpZdD
 pastebin.com/raw/sqWYGYSu
 pastebin.com/raw/srXLK8i9
+pastebin.com/raw/srdmMBmH
 pastebin.com/raw/srrHbKju
 pastebin.com/raw/stzAsZQL
 pastebin.com/raw/svAUqF1b
@@ -107358,6 +107475,7 @@ pastebin.com/raw/ueEHU1Gc
 pastebin.com/raw/ueNmpvXb
 pastebin.com/raw/ugeUxUR2
 pastebin.com/raw/uh7zu6g4
+pastebin.com/raw/uiUaAsrR
 pastebin.com/raw/uixnCEnd
 pastebin.com/raw/ujCyTQzQ
 pastebin.com/raw/ujYfsbh7
@@ -107379,6 +107497,7 @@ pastebin.com/raw/v3Bnk378
 pastebin.com/raw/v4aMpJjn
 pastebin.com/raw/v5v5QPSn
 pastebin.com/raw/v6Tn6UiN
+pastebin.com/raw/v72EGxKQ
 pastebin.com/raw/v7MQKctj
 pastebin.com/raw/v8d0sKF3
 pastebin.com/raw/vBcKM12U
@@ -107412,6 +107531,7 @@ pastebin.com/raw/vcKL00gx
 pastebin.com/raw/vdisfq9T
 pastebin.com/raw/vdr5Va0y
 pastebin.com/raw/veXY5Qnq
+pastebin.com/raw/vg2uwUsX
 pastebin.com/raw/viHt1Thh
 pastebin.com/raw/vj4ficjg
 pastebin.com/raw/vjzXWdQZ
@@ -107525,6 +107645,7 @@ pastebin.com/raw/xVkANwJ5
 pastebin.com/raw/xVsNTyiU
 pastebin.com/raw/xW8WgbQ4
 pastebin.com/raw/xYVJ2rSY
+pastebin.com/raw/xYfJ6BrB
 pastebin.com/raw/xZP34LZ2
 pastebin.com/raw/xZPpq1mD
 pastebin.com/raw/xaKNJ0ws
@@ -107605,6 +107726,7 @@ pastebin.com/raw/yg7Lnb5J
 pastebin.com/raw/ygkf0xzq
 pastebin.com/raw/ygxVydbf
 pastebin.com/raw/yjFEN0dc
+pastebin.com/raw/yjQwfwLu
 pastebin.com/raw/yk7JdQ3h
 pastebin.com/raw/ymbLH1Us
 pastebin.com/raw/ymu73bXV
@@ -110000,6 +110122,7 @@ privacydesignstudio.com
 privacymails.space
 privacytools.life
 privacytools.site
+privacytoolsstore.website
 privat-cyprian.sk
 private-accounting.com
 private-dining.com.ua
@@ -110293,6 +110416,7 @@ proluxshop.ir
 prom-alp.kz
 prom-engineering.com
 promacsolutions.mx
+promassager.ga
 promdon.dn.ua
 promente.it
 promep.utrng.edu.mx
@@ -114705,6 +114829,7 @@ sageth.net
 sagiri.org
 saglikbakanligi20gbinternet.com
 saglikbakanligindanhediye20gb.com
+saglikgoalapp.site
 saglikliapp.live
 sagliklibedenim.com
 sagrathi.com
@@ -115942,6 +116067,7 @@ sedotwcdadilancar.com
 sedotwcsejakarta.com
 seductivestrands.com
 see.prblm.li
+seeanu.ru
 seecareer.com
 seednext.work
 seedopk.org
@@ -117453,6 +117579,7 @@ silverlineboatsales.com
 silverliningcoaching.com.au
 silverlinktechnologies.com
 silveroks.com.ua
+silverstargalaxy.com.silverstartv.website
 silverstoltsen.com
 silverswiss.com
 silvesterinmailand.com
@@ -117504,6 +117631,7 @@ simonsolutions.us
 simorghealborz.com
 simp-consulting.pl
 simpelway.dk.linux154.unoeuro-server.com
+simpl.pw
 simplatecplc.com
 simple-it.org
 simple-it.si
@@ -118403,6 +118531,7 @@ so-lonely.fr
 so-nettel.ml
 so.nevisconsultants.com
 so370.com
+so4.seeanu.ru
 so766.sohost.pl
 soa.com.pk
 soafinance.com
@@ -119649,6 +119778,7 @@ staging.overlogo.com
 staging.pashminadevelopers.com
 staging.phandeeyar.org
 staging.playhualien.com
+staging.popclusive.asia
 staging.presthemes.com
 staging.securenetworks.pk
 staging.semperkitchen.com
@@ -119981,6 +120111,7 @@ steinerurology.com.au
 steinoe.dk
 steinplatten-tirol.at
 stekols.ru
+stelamedien.de
 stelastraveldiary.com
 steldesign.com
 stella.pk
@@ -122386,6 +122517,7 @@ sunandsand.minnesotacowboy.com
 sunaner.com
 sunart-5.com
 sunblessvgp.com
+sunboom-gift.com
 sunchipaint.com.vn
 suncity116.com
 suncity727.com
@@ -123073,6 +123205,7 @@ t2.webtilia.com
 t2lisboa.lisbonlab.com
 t2tdesigns.com
 t3-thanglongcapital.top
+t37b.iwakalong.ru
 t3dgraphics.com
 t5forums.com
 t6226.com
@@ -123610,6 +123743,7 @@ taxpos.com
 taxready.in
 taxtell.ru
 taxtionfree.co.in
+taxukrebates.com
 tay.batt2u.com
 taybabuilders.com
 tayebsojib.com
@@ -129919,6 +130053,7 @@ vip-watch.store
 vip.lijinxi.com
 vip.maohuagong.com
 vip.muabannhanh.com/wp-admin/FILE/mkg7rmymjr_ibrls0nrj-411618777016/
+vip.recommendedtoyoo.com
 vip.zbfcxx.cn
 vip163.cf
 vip163.ga
@@ -129990,6 +130125,7 @@ virtualupload.org
 virtuoushairline.org
 virtuspartners.cl
 viruscheckmake.gq
+virustreatments.empeeevents.com
 visa.indonesia.nl
 visa.org.ua
 visaatlantis.com
@@ -133477,6 +133613,7 @@ ybtvmt.info
 ybuat49ounh.kaligodfrey.casa
 ybuzzfmdy.cf
 yc.satnam.ru
+yc5.timeisletitgo.ru
 ycg-tw.com
 ych.jp
 ychynt.com
@@ -134686,5 +134823,6 @@ zzii.net
 zzjph.com
 zzlong.xyz
 zzpit.dk
+zzv.seeanu.ru
 zzyin.cn
 zzz78.tk