diff --git a/src/URLhaus.csv b/src/URLhaus.csv
index 8ec74e70..22ee2bc4 100644
--- a/src/URLhaus.csv
+++ b/src/URLhaus.csv
@@ -1,12 +1,152 @@
 ################################################################
 # abuse.ch URLhaus Database Dump (CSV)                         #
-# Last updated: 2019-01-18 23:55:10 (UTC)                      #
+# Last updated: 2019-01-19 12:15:03 (UTC)                      #
 #                                                              #
 # Terms Of Use: https://urlhaus.abuse.ch/api/                  #
 # For questions please contact urlhaus [at] abuse.ch           #
 ################################################################
 #
 # id,dateadded,url,url_status,threat,tags,urlhaus_link
+"105935","2019-01-19 12:15:03","http://downfilepro.com/api/9a7e880d7c30808c13258fe5793e2de6/1001.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105935/"
+"105934","2019-01-19 11:45:49","http://5.167.53.163:28650/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/105934/"
+"105933","2019-01-19 11:45:15","http://47.186.74.215:40663/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/105933/"
+"105932","2019-01-19 11:44:43","http://177.206.121.57:29355/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/105932/"
+"105931","2019-01-19 11:44:10","http://1.34.159.106:39188/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/105931/"
+"105930","2019-01-19 11:43:34","http://187.175.42.227:32025/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/105930/"
+"105929","2019-01-19 11:42:07","http://84.214.54.35:62857/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/105929/"
+"105928","2019-01-19 11:41:35","http://103.51.249.64:33700/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/105928/"
+"105927","2019-01-19 10:39:45","http://www.babyparrots.it/wp-content/themes/atahualpa353/functions/efax_1225500012.doc","online","malware_download","doc","https://urlhaus.abuse.ch/url/105927/"
+"105926","2019-01-19 10:39:10","http://solaryug.com/V51-43278303571T52461879095979372.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/105926/"
+"105925","2019-01-19 10:30:03","http://firstzone.download/manage/syscheck1.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/105925/"
+"105924","2019-01-19 10:29:06","http://firstzone.download/tmp/arphost.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/105924/"
+"105922","2019-01-19 10:29:03","http://firstzone.download/manage/main.doc","online","malware_download","doc,opendir","https://urlhaus.abuse.ch/url/105922/"
+"105921","2019-01-19 10:27:02","http://107.172.3.102/r.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/105921/"
+"105920","2019-01-19 10:25:05","http://supportwip.com/denebt/gasby.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/105920/"
+"105919","2019-01-19 10:25:04","http://supportwip.com/kkkkkk/fajey.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/105919/"
+"105918","2019-01-19 10:25:03","http://supportwip.com/starbotg/gasby.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/105918/"
+"105917","2019-01-19 09:42:03","http://integramultimedia.com.mx/.well-known/acme-challenge/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105917/"
+"105916","2019-01-19 09:28:09","http://glazastiks.ru/gaLjP-Ra_noqrx-S0i/InvoiceCodeChanges/US_us/Need-to-send-the-attachment/","online","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105916/"
+"105915","2019-01-19 09:28:08","http://pojbez31.ru/Amazon/EN/Messages/012019/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105915/"
+"105914","2019-01-19 09:28:07","http://pkmsolutions.com.my/Amazon/En/Details/2019-01/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105914/"
+"105913","2019-01-19 09:28:04","http://kiber-soft.ru/AMAZON/Transactions-details/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105913/"
+"105912","2019-01-19 09:28:03","https://fastimmo.fr/.well-known/acme-challenge/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105912/"
+"105911","2019-01-19 09:19:29","http://www.advavoltiberica.com/wp-content/themes/sketch/qbct.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105911/"
+"105910","2019-01-19 09:12:34","http://y0.strangled.net/web/web.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105910/"
+"105909","2019-01-19 09:10:37","https://aussietruffles.com/wp-admin/js/435/AKLS.exe","online","malware_download","exe,rat,RemcosRAT","https://urlhaus.abuse.ch/url/105909/"
+"105908","2019-01-19 09:01:44","https://www.url.edu/premisrecerca/sites/1501.zip","online","malware_download","None","https://urlhaus.abuse.ch/url/105908/"
+"105907","2019-01-19 08:55:03","http://193.151.91.163/3.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105907/"
+"105906","2019-01-19 08:33:49","http://host.workskillsweb.net/~odyssey/royt/PO098766677.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105906/"
+"105905","2019-01-19 08:33:43","http://host.workskillsweb.net/~odyssey/royt/PI0998787_Doc.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105905/"
+"105904","2019-01-19 08:33:38","http://host.workskillsweb.net/~odyssey/royt/PI0976567.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105904/"
+"105903","2019-01-19 07:49:13","https://almasoodgroup.com/js3/svch","online","malware_download","Bitter RAT,exe,msi,Patchwork,sct","https://urlhaus.abuse.ch/url/105903/"
+"105902","2019-01-19 07:49:11","https://almasoodgroup.com/js3/pdfviewer.sct","offline","malware_download","Bitter RAT,exe,msi,Patchwork,sct","https://urlhaus.abuse.ch/url/105902/"
+"105901","2019-01-19 07:49:09","https://almasoodgroup.com/js3/pdfviewer.msi","online","malware_download","Bitter RAT,exe,msi,Patchwork,sct","https://urlhaus.abuse.ch/url/105901/"
+"105900","2019-01-19 07:49:07","https://almasoodgroup.com/js3/pdfjviewer.sct","offline","malware_download","Bitter RAT,exe,msi,Patchwork,sct","https://urlhaus.abuse.ch/url/105900/"
+"105899","2019-01-19 07:49:06","https://almasoodgroup.com/js3/pdfjviewer.msi","online","malware_download","Bitter RAT,exe,msi,Patchwork,sct","https://urlhaus.abuse.ch/url/105899/"
+"105898","2019-01-19 07:49:05","https://almasoodgroup.com/js3/mstsc","online","malware_download","Bitter RAT,exe,msi,Patchwork,sct","https://urlhaus.abuse.ch/url/105898/"
+"105897","2019-01-19 07:41:02","http://immobiliere-olivier.com/wp-includes/id3/sserv.jpg","offline","malware_download","zip","https://urlhaus.abuse.ch/url/105897/"
+"105896","2019-01-19 07:11:34","http://www.panafspace.com/ZXLa-4r_rd-uD5/ACH/PaymentAdvice/En/Service-Invoice/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105896/"
+"105895","2019-01-19 07:10:57","http://wijdoenbeter.be/XVeT-Zsn_KQ-DAd/PaymentStatus/US/Invoice-1866321-January/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105895/"
+"105894","2019-01-19 07:10:26","http://washuis.nl/VtzTI-an_TkRQS-94/PaymentStatus/US_us/Invoice-Number-872839/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105894/"
+"105893","2019-01-19 07:09:55","http://thevesuvio.com/GOAQ-yog_N-uw6/Ref/2606341144En_us/Scan/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105893/"
+"105892","2019-01-19 07:09:23","http://temptest123.reveance.nl/sitdb-TO_a-6G/US_us/Outstanding-Invoices/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105892/"
+"105891","2019-01-19 07:09:22","http://swanpark.dothidongsaigon.com/Iqgz-39o_sx-Wr8/RJzJ-q9oj_sWuryxl-g1/invoices/4092/07436/En/Inv-845562-PO-0L433922/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105891/"
+"105890","2019-01-19 07:09:19","http://rahkarinoo.com/AKBw-yV_aWOehADX-jM4/INVOICE/En/Companies-Invoice-84280381/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105890/"
+"105889","2019-01-19 07:09:17","http://photomoura.ir/AycO-8O3m_pYtxSGxNn-lP/INVOICE/EN_en/ACH-form/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105889/"
+"105888","2019-01-19 07:09:16","http://megatramtg.com/site/cache/ajax_login_form/bfXSu-jHhN_UmQs-pO/ACH/PaymentAdvice/US/Service-Report-14175/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105888/"
+"105887","2019-01-19 07:09:15","http://masswheyshop.com/IRwAb-F1UD_agyjAlFdT-J9/En_us/Scan/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105887/"
+"105886","2019-01-19 07:09:13","http://kleinamsterdam.be/xzjKi-ysPD_e-XtN/InvoiceCodeChanges/EN_en/Overdue-payment/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105886/"
+"105885","2019-01-19 07:08:42","http://hembacka.fi/ATkQ-kUu_NnN-Evp/INVOICE/US/Inv-25688-PO-1O647571/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105885/"
+"105884","2019-01-19 07:08:11","http://ftp.spbv.org/tMTLW-w2ClF_HsMlQPNNq-pGg/J33/invoicing/US/Invoice/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105884/"
+"105883","2019-01-19 07:08:09","http://excellenceconstructiongroup.com/RRzFk-0RZJ_JuB-Qc/INVOICE/13887/OVERPAYMENT/En_us/New-order/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105883/"
+"105882","2019-01-19 07:08:05","http://csrcampaign.com/lAdk-5Ur_CKHF-jg8/INVOICE/94996/OVERPAYMENT/EN_en/Past-Due-Invoices/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105882/"
+"105881","2019-01-19 07:08:03","http://animoderne.com/EtDPv-iWVf_EMvBnPKnv-5e/ACH/PaymentInfo/En/0-Past-Due-Invoices/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105881/"
+"105880","2019-01-19 06:29:56","http://ahmic.pro/.well-known/pki-validation/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105880/"
+"105879","2019-01-19 06:07:35","http://download.instalki.org/programy/Windows/Dodatki/wtyczki_do_komunikatorow/StrongGG_www.INSTALKI.pl.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105879/"
+"105877","2019-01-19 06:02:13","http://web.pa-cirebon.go.id/KGLp-2zo0_Q-fRg/INVOICE/41749/OVERPAYMENT/US/Overdue-payment/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105877/"
+"105878","2019-01-19 06:02:13","https://linkprotect.cudasvc.com/url?a=http://ar.caginerhastanesi.com.tr/IdVEX-GT6_m-nF/COMET/SIGNS/PAYMENT/NOTIFICATION/01/18/2019/En_us/Document-needed&c=E1W7tozd_OVjcy60eqOCwpBXREeD-sIJhLr8ktLmG4l_tOuxdnEakc1GjGuta8oMa3d2uhrtbSUvDx22YxShersKBsbUQ4RDs1y1fHtLNgiLFi5yTc/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105878/"
+"105876","2019-01-19 06:02:12","http://translampung.com/ATEZSRMPER2853602/Rechnungs-Details/Hilfestellung/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105876/"
+"105875","2019-01-19 06:02:10","http://toddlerpops.com/DE_de/NMEZPI6268550/Rechnungskorrektur/RECH/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105875/"
+"105874","2019-01-19 06:02:08","http://mother-earth.net/bn/wp-content/KwmW-WSOO_jYDW-B2t/PaymentStatus/EN_en/277-20-468894-239-277-20-468894-861/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105874/"
+"105873","2019-01-19 06:02:06","http://gazenap.ru/DE/XLXPDRQBOE9525605/Bestellungen/Rechnungszahlung/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105873/"
+"105872","2019-01-19 06:02:05","http://cumbrehambrecero.com/XXHKFSJT2382648/Rechnungskorrektur/Zahlungserinnerung/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105872/"
+"105870","2019-01-19 06:02:03","http://agentfox.io/ZAqo-QB5_tJXk-pL/H96/invoicing/EN_en/Past-Due-Invoices/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105870/"
+"105871","2019-01-19 06:02:03","http://cardealersforbadcredit.net/zlvkejwe/VLIbZ-0f_DVVLdjUsy-3dA/ACH/PaymentInfo/US_us/Invoice-for-n/n-01/18/2019/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105871/"
+"105869","2019-01-19 05:28:14","http://immo-en-israel.com/mP7mhva_1xVx_6tOstw7/","online","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105869/"
+"105868","2019-01-19 05:28:13","http://hjsanders.nl/rXqy-tOpX_bkl-K1/Invoice/8882088/EN_en/Need-to-send-the-attachment/","online","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105868/"
+"105867","2019-01-19 05:28:11","http://dplogistics.com.pl/PpCR-rB_QsLs-E4/ACH/PaymentAdvice/En/Past-Due-Invoices/","online","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105867/"
+"105866","2019-01-19 05:28:07","http://forma-31.ru/vTCv-VcT0_oU-zjp/803067/SurveyQuestionsUS/Companies-Invoice-09329127/","online","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105866/"
+"105865","2019-01-19 05:28:05","http://mandezik.com/ERqy-96Sw_Wh-hEI/PaymentStatus/US_us/Invoices-attached/","online","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105865/"
+"105864","2019-01-19 05:20:19","https://url.emailprotection.link/?aUBwMMpmLx1aCBzai5Pmpk0ANae_FL-JB5Hb5jRUPwJsVHOAz3bmVAuLRd2g6p3GXkrYYhk3Tmq0NRCKUa3DIyA~~/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105864/"
+"105863","2019-01-19 05:20:18","https://u2922402.ct.sendgrid.net/wf/click?upn=U5TE2xvQsUMQ5Y90MzYM5mxgHp-2FQzRuccBy6Ly5DmG396yzEV1N8LwoINp95Ul3KelAjoMb86HDotDzz6QiQQANDvitbHlgI5ouGu3KtBm8-3D_qt-2BjmiowRuPonHIzbfR9hDl7hx1YJv-2Be4M-2FXg7TuNN-2FRwHWqbSkqHklWbMmFUucAGrVB1Drl9RN4bCjmLGQQ1uRdER5wpEomv5DNo-2B/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105863/"
+"105861","2019-01-19 05:20:17","https://u2922402.ct.sendgrid.net/wf/click?upn=2xkp5mYBJviSycvurmixZVYwYm-2Be9oHWtcIQqGmiq6uk5-2Ft-2F0OFPa0y1-2FKOh-2BI7hxt-2Fjv6nvK4lR9Dok-2F3RYwQ-3D-3D_7XtDdMHRjqIUi4tzSjSp2gWvCS8-2Bh04cHP42t-2FIq6BWtD9-2FbS8vmNEcI2xbLUnS13UcKTwaRlpvvCHUjk17hR5x-2BOdIQBm8upTDrbB49am6ot6/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105861/"
+"105862","2019-01-19 05:20:17","https://u2922402.ct.sendgrid.net/wf/click?upn=BFMBSSkhnV7CpCSZgOiJyAdGHIM4UnhL-2F8DK6mctE2nAXuQsTAsfhrn3cLKGnsC0FzIWF5KtXJSby7DVUDakzg-3D-3D_-2F2kE4d6zW-2FK3bcRbEpDsznWSz5avyfOQjfgszYpdJCU3aNmg-2FSSRqPOjEb6umEl27QT6sN-2BfPfejhfNvi9Uqf3xov0scN0muGJvr1bd9dmhZi1nBxTZVZhliaj/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105862/"
+"105860","2019-01-19 05:20:16","https://register.srru.ac.th/Transaction_details/012019/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105860/"
+"105859","2019-01-19 05:20:12","http://wholehealthcrew.com/Amazon/Documents/01_19/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105859/"
+"105858","2019-01-19 05:20:08","http://suahoradeaprender.com.br/Rechnungs/122018/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105858/"
+"105856","2019-01-19 05:20:06","http://lignumpolska.com/Payment_details/2019-01/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105856/"
+"105857","2019-01-19 05:20:06","http://sendgrid2.oicgulf.ae/wf/click?upn=lQdaUDK4fP2DCBVU1OraJGoDl7FwMQZe24j7Rp7v-2Fs1-2BfSVKXmzzyU4G15Cwu53zuym9XsMv4AXKFUT-2FRg6PFg-3D-3D_dZdmncppqS0rwqJ1XUc5dwxmQeLVM0VmvWfu5AIsREIMmCO4fj6uvIcRicvmEcXSQbP4-2B8ZulreV7HLgb5-2Fla1Egex0h885xWSVqA3t1DjXtfqRfeRSz-2B1zBVjhZh/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105857/"
+"105855","2019-01-19 05:20:05","http://jongewolf.nl/Transaktion/201812/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105855/"
+"105854","2019-01-19 05:20:04","http://irsoradio.nl/Amazon/En/Messages/2019-01/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105854/"
+"105853","2019-01-19 05:20:03","http://idgnet.nl/Amazon/En/Transaction_details/012019/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105853/"
+"105852","2019-01-19 05:20:02","http://belovedmotherof13.com/Amazon/EN/Clients/01_19/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105852/"
+"105851","2019-01-19 05:02:02","http://bh-mehregan.org/pHdS2az/","online","malware_download","exe","https://urlhaus.abuse.ch/url/105851/"
+"105850","2019-01-19 04:46:09","http://121.177.239.68:29706/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/105850/"
+"105849","2019-01-19 04:45:34","http://109.205.143.207:23521/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/105849/"
+"105846","2019-01-19 04:43:04","http://flycourierservice.com/wp-admin/css/colors/blue/ssj.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105846/"
+"105847","2019-01-19 04:43:04","http://molministries.org/wp-content/themes/mesmerize/languages/wp-content/themes/mesmerize/languages/sserv.jpg","offline","malware_download","zip","https://urlhaus.abuse.ch/url/105847/"
+"105848","2019-01-19 04:43:04","http://molministries.org/wp-content/themes/mesmerize/woocommerce/checkout/wp-content/themes/mesmerize/woocommerce/checkout/sserv.jpg","offline","malware_download","zip","https://urlhaus.abuse.ch/url/105848/"
+"105845","2019-01-19 04:43:02","http://molministries.org/wp-content/themes/mesmerize/page-templates/wp-content/themes/mesmerize/page-templates/sserv.jpg","offline","malware_download","zip","https://urlhaus.abuse.ch/url/105845/"
+"105844","2019-01-19 04:36:06","http://targettrustcompany.com/tmp/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105844/"
+"105843","2019-01-19 04:19:03","http://molministries.org/wp-content/themes/mesmerize/inc/general-options/sserv.jpg","offline","malware_download","zip","https://urlhaus.abuse.ch/url/105843/"
+"105842","2019-01-19 04:12:04","http://rabhomes.com/wp-content/themes/oceanwp/woocommerce/cart/ssj.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105842/"
+"105841","2019-01-19 03:48:04","http://m.ttentionenergy.com/journal/cache/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105841/"
+"105840","2019-01-19 03:44:03","http://privatpolicy.ttentionenergy.com/forum/cache/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105840/"
+"105839","2019-01-19 03:37:06","http://molministries.org/wp-content/themes/mesmerize/languages/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105839/"
+"105838","2019-01-19 03:23:36","http://molministries.org/wp-content/themes/mesmerize/page-templates/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105838/"
+"105837","2019-01-19 03:23:21","http://dtprocure.com/wp-content/themes/twentyseventeen/template-parts/footer/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105837/"
+"105836","2019-01-19 03:06:02","http://preorder.ttentionenergy.com/wp-content/cache/et/12/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105836/"
+"105835","2019-01-19 02:41:07","http://destinyheightsnetwork.org/wp-content/ai1wm-backups/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105835/"
+"105834","2019-01-19 02:34:03","http://molministries.org/wp-snapshots/tmp/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105834/"
+"105833","2019-01-19 02:30:06","http://flycourierservice.com/wp-includes/ID3/ssj.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105833/"
+"105832","2019-01-19 02:27:07","http://dx93.downyouxi.com/wodisangshilinju3.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105832/"
+"105831","2019-01-19 02:22:37","http://wt92.downyouxi.com/wodisangshilinju3.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105831/"
+"105830","2019-01-19 02:16:04","http://flycourierservice.com/wp-admin/css/colors/blue/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105830/"
+"105829","2019-01-19 02:12:02","http://shop.ttentionenergy.com/wp-admin/css/colors/blue/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105829/"
+"105828","2019-01-19 02:08:04","http://surearmllc.com/wp-content/ewww/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105828/"
+"105827","2019-01-19 02:05:07","http://sight-admissions.com/wp-content/plugins/soundcloud-shortcode/4.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105827/"
+"105826","2019-01-19 02:05:06","http://molministries.org/wp-content/themes/mesmerize/woocommerce/checkout/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105826/"
+"105825","2019-01-19 01:57:09","http://wt91.downyouxi.com/zhiyongsanguo2zhongwenban.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105825/"
+"105824","2019-01-19 01:51:02","http://preorder.ttentionenergy.com/wp-admin/css/colors/blue/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105824/"
+"105822","2019-01-19 01:33:58","http://nouslesentrepreneurs.fr/yIwTQ-iTd_eumU-vL/COMET/SIGNS/PAYMENT/NOTIFICATION/01/19/2019/En_us/Overdue-payment/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105822/"
+"105823","2019-01-19 01:33:58","http://vendermicasaenbarcelona.com/0y8o_v1p0lAS/","offline","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105823/"
+"105821","2019-01-19 01:33:26","http://sskymedia.com/VMYB-ht_JAQo-gi/INV/99401FORPO/20673114777/US/Outstanding-Invoices/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105821/"
+"105820","2019-01-19 01:33:22","http://mail.learntoberich.vn/riplns6/Information/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105820/"
+"105819","2019-01-19 01:33:09","http://vincopoker.com/dWSx5bwE/","online","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105819/"
+"105818","2019-01-19 01:33:07","http://bootaly.com/pjuupfw/Amazon/Payment_details/2019-01/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105818/"
+"105817","2019-01-19 01:33:05","http://modaphamya.asertiva.cl/Clients/2019-01/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105817/"
+"105816","2019-01-19 01:33:00","http://faternegar.ir/Clients/01_19/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105816/"
+"105815","2019-01-19 01:32:59","http://tnr-vietnam.net/Transaction_details/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105815/"
+"105814","2019-01-19 01:32:26","http://milimetrikistanbul.com/Payment_details/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105814/"
+"105813","2019-01-19 01:32:23","http://leviathan.rs/Details/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105813/"
+"105812","2019-01-19 01:31:49","http://www.tag.ir/tag_old/wp-includes/js/Clients_information/2019-01/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105812/"
+"105811","2019-01-19 01:31:46","https://u2922402.ct.sendgrid.net/wf/click?upn=BIpawjqs3H-2FqnXmRPrICZoOWeishlfk7sxzG5z2qe37dNibTla0JZSBug2XMVqD03ZBCz5gdKhJC1XooftyOAw-3D-3D_tWQMEJ3FeAVn74dcOznYLY3SPQsA8kjT1tRujF8v8ygoVjF2H0-2BSSVduiAK72lWi3yism5uLubrmrSdHIe-2F3L2xgI4GVNcFTtQ-2BDXtwcLRl4uBTEkfNeWaMIAabgwZ13lwcViVOF-2B7SxJX-2Fhpe2-2BgJDsfR7wlRpkoOoApSFTOashMXf-2BGp-2FyWezEEoxej-2Fc9eytgU5wQwLfDscW5bRq56Q-3D-3D/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105811/"
+"105810","2019-01-19 01:31:42","https://url.emailprotection.link/?aRrGLSsI454x_jEWfF6W4igTu6X_qbZcAfvVPL3tZBtZtnrrtr5ogrLnDXdLd4eI8jA2pNBd9p8Nut0p5CqIkOg~~/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105810/"
+"105809","2019-01-19 01:31:38","http://vacationletting.net/Payments/01_19/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105809/"
+"105808","2019-01-19 01:31:04","http://med.siam.edu/Clients_transactions/2019-01/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105808/"
+"105807","2019-01-19 01:30:31","http://samix-num.com/Clients_transactions/2019-01/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105807/"
+"105806","2019-01-19 01:30:28","http://fieldscollege.co.za/Attachments/2019-01/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105806/"
+"105805","2019-01-19 01:30:25","http://paradiseguests.com/Clients_Messages/01_19/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105805/"
+"105804","2019-01-19 01:30:22","http://sasecuritygroup.com.br/Clients_information/2019-01/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105804/"
+"105803","2019-01-19 01:30:19","http://partycloud.nl/Payment_details/01_19/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105803/"
+"105802","2019-01-19 01:29:45","http://smkn.co.id/Payment_details/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105802/"
+"105801","2019-01-19 01:29:42","http://sara-gadalka.com.kg/Details/01_19/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105801/"
+"105800","2019-01-19 01:29:10","http://www.zonnestroomtilburg.nl/Information/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105800/"
+"105799","2019-01-19 01:29:08","http://www.testandersonline.nl/Attachments/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105799/"
+"105798","2019-01-19 01:28:36","http://digital.eudoratrading.com/Transaction_details/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105798/"
+"105797","2019-01-19 01:28:03","http://wimpiebarnard.co.za/Documents/2019-01/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105797/"
+"105796","2019-01-19 01:26:05","http://readingtokids.org/images2/Payment_slip_pdf.scr","online","malware_download","exe","https://urlhaus.abuse.ch/url/105796/"
+"105795","2019-01-19 00:40:35","http://downfile2019.com/HN_HIDE/App.bin","online","malware_download","exe","https://urlhaus.abuse.ch/url/105795/"
 "105794","2019-01-18 23:55:10","http://122.174.253.72:12542/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/105794/"
 "105793","2019-01-18 23:54:34","http://95.9.220.134:25716/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/105793/"
 "105792","2019-01-18 23:07:07","http://92.44.62.174:5348/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/105792/"
@@ -16,164 +156,164 @@
 "105786","2019-01-18 22:55:35","https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fwww.emmanuelboos.info%2fYqLad-p5ij_na-5eF%2fRef%2f9928911859EN_en%2fNew-order&c=E1el5WqYQWUOa9EXJJ-hSZfsAtKPvELrcZEcTMY3hcn-JgscDFOosmi9U1egPaFp9a1XiYpUraIQ3Nmt4emnDTKfdOj57jJ0UizGB5Y_9JAJU5DMmYZpA&typo=1/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105786/"
 "105787","2019-01-18 22:55:35","https://linkprotect.cudasvc.com/url?a=http://ar.caginerhastanesi.com.tr/IdVEX-GT6_m-nF/COMET/SIGNS/PAYMENT/NOTIFICATION/01/18/2019/En_us/Document-needed&c=E1W7tozd_OVjcy60eqOCwpBXREeD-sIJhLr8ktLmG4l_tOuxdnEakc1GjGuta8oMa3d2uhrtbSUvDx22YxShersKBsbUQ4RDs1y1fHtLNgiLFi5yTcAg&typo=1/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105787/"
 "105788","2019-01-18 22:55:35","https://souqaziz.com/nQXXR-yM0C_ehMzsVJUs-Nu/ACH/PaymentAdvice/EN_en/Invoice/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105788/"
-"105785","2019-01-18 22:55:34","http://tanineahlebeyt.com/qWxvb-KlE2_ieultlE-An/Invoice/56679571/US/Overdue-payment/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105785/"
-"105784","2019-01-18 22:55:33","http://superpozyczki.pl/iaWo-dq_lAPT-9Nn/ACH/PaymentAdvice/EN_en/Important-Please-Read/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105784/"
-"105783","2019-01-18 22:51:08","http://www.universalsmile.org/MCcs-VjO_ZHVDPH-aa/INVOICE/US_us/Need-to-send-the-attachment/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105783/"
-"105782","2019-01-18 22:50:35","http://www.ubocapacitacion.cl/DUYan-5pTF_yIlYRE-aJ/C832/invoicing/US/Open-Past-Due-Orders/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105782/"
-"105781","2019-01-18 22:50:32","http://www.pro-ind.ru/yaiQ-6wzWY_vcJn-WdR/Ref/5409569504En/ACH-form/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105781/"
-"105780","2019-01-18 22:50:31","http://www.idgnet.nl/tWcpZ-cp7P_kaA-xA/PaymentStatus/En_us/ACH-form/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105780/"
-"105779","2019-01-18 22:50:29","http://www.fatma-bouchiha-psychologue.fr/zrfMX-P3RD_l-li9/InvoiceCodeChanges/En/Service-Invoice/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105779/"
-"105778","2019-01-18 22:50:28","http://www.dsltech.co.uk/ZQQP-WaI_sTENQmYGW-hAP/QB24/invoicing/US/Service-Invoice/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105778/"
-"105777","2019-01-18 22:50:27","http://www.craigryan.eu/wLIuP-Lx_Rf-04L/INVOICE/En/Invoice-receipt/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105777/"
-"105776","2019-01-18 22:49:56","http://www.array.com.ua/ysfhC-un_QLqZxh-SSR/COMET/SIGNS/PAYMENT/NOTIFICATION/01/19/2019/US/Paid-Invoice-Credit-Card-Receipt/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105776/"
+"105785","2019-01-18 22:55:34","http://tanineahlebeyt.com/qWxvb-KlE2_ieultlE-An/Invoice/56679571/US/Overdue-payment/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105785/"
+"105784","2019-01-18 22:55:33","http://superpozyczki.pl/iaWo-dq_lAPT-9Nn/ACH/PaymentAdvice/EN_en/Important-Please-Read/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105784/"
+"105783","2019-01-18 22:51:08","http://www.universalsmile.org/MCcs-VjO_ZHVDPH-aa/INVOICE/US_us/Need-to-send-the-attachment/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105783/"
+"105782","2019-01-18 22:50:35","http://www.ubocapacitacion.cl/DUYan-5pTF_yIlYRE-aJ/C832/invoicing/US/Open-Past-Due-Orders/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105782/"
+"105781","2019-01-18 22:50:32","http://www.pro-ind.ru/yaiQ-6wzWY_vcJn-WdR/Ref/5409569504En/ACH-form/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105781/"
+"105780","2019-01-18 22:50:31","http://www.idgnet.nl/tWcpZ-cp7P_kaA-xA/PaymentStatus/En_us/ACH-form/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105780/"
+"105779","2019-01-18 22:50:29","http://www.fatma-bouchiha-psychologue.fr/zrfMX-P3RD_l-li9/InvoiceCodeChanges/En/Service-Invoice/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105779/"
+"105778","2019-01-18 22:50:28","http://www.dsltech.co.uk/ZQQP-WaI_sTENQmYGW-hAP/QB24/invoicing/US/Service-Invoice/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105778/"
+"105777","2019-01-18 22:50:27","http://www.craigryan.eu/wLIuP-Lx_Rf-04L/INVOICE/En/Invoice-receipt/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105777/"
+"105776","2019-01-18 22:49:56","http://www.array.com.ua/ysfhC-un_QLqZxh-SSR/COMET/SIGNS/PAYMENT/NOTIFICATION/01/19/2019/US/Paid-Invoice-Credit-Card-Receipt/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105776/"
 "105775","2019-01-18 22:49:54","http://vnxpress24h.com/lAmdd-Nom6_thBiJ-fy/invoices/6958/89166/US_us/Need-to-send-the-attachment/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105775/"
-"105774","2019-01-18 22:49:51","http://ucfoundation.online/OaTLO-pE0bN_nSw-5N/INVOICE/En_us/Invoices-attached/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105774/"
-"105773","2019-01-18 22:49:17","http://trottmyworld.ch/Xsxj-Rz_SimE-fuu/INVOICE/74831/OVERPAYMENT/En/Paid-Invoices/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105773/"
-"105772","2019-01-18 22:49:16","http://thesunavenuequan2.com/UfKnh-DDzIZ_aAl-3W6/EXT/PaymentStatus/US/Past-Due-Invoices/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105772/"
-"105771","2019-01-18 22:49:13","http://sidelineking.xyz/URJHB-Eiye9_cRHCODsUJ-L9/US/Outstanding-Invoices/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105771/"
-"105770","2019-01-18 22:49:10","http://shootinstars.in/WtMdY-ZQzY_xQbf-yEo/ACH/PaymentInfo/US_us/Past-Due-Invoice/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105770/"
-"105769","2019-01-18 22:49:09","http://rozwijamy.biz/wp-content/uploads/flwe-3yXO_TTxLoNHf-YI/EXT/PaymentStatus/US/Companies-Invoice-16854071/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105769/"
-"105768","2019-01-18 22:48:38","http://quentinberra.fr/ZvMh-sX_eRQN-TP/Z31/invoicing/En/Invoice-for-you/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105768/"
-"105767","2019-01-18 22:48:37","http://qigong-gironde.fr/ETszQ-ci_aglRKgmK-alC/EXT/PaymentStatus/US_us/Open-invoices/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105767/"
-"105766","2019-01-18 22:48:36","http://pmcorporation.fr/yiKCL-Er5cf_Dkj-Je/US_us/Overdue-payment/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105766/"
-"105765","2019-01-18 22:48:34","http://mroffers.co.ke/LIvgv-lU8b_SGsUmH-wj/INVOICE/9613/OVERPAYMENT/US/Past-Due-Invoices/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105765/"
-"105764","2019-01-18 22:48:32","http://migoshen.org/wXib-VaB1n_kQT-1Yf/EXT/PaymentStatus/US/Invoice/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105764/"
-"105763","2019-01-18 22:48:30","http://lespetitsloupsmaraichers.fr/BxjVt-w11j_EpfLuG-IUQ/ACH/PaymentAdvice/US_us/Invoice-for-l/b-01/19/2019/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105763/"
-"105762","2019-01-18 22:48:29","http://lamppm.asertiva.cl/lismr-G8_sgBQ-nLq/invoices/60259/12719/US/Invoice-59553663/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105762/"
-"105761","2019-01-18 22:48:20","http://joinerycity.co.uk/oaXpS-8fLnn_swV-po/EN_en/Companies-Invoice-5251735/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105761/"
-"105760","2019-01-18 22:47:49","http://fce-transport.nl/rhMHW-fcLes_fmF-z82/154512/SurveyQuestionsUS/Scan/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105760/"
-"105759","2019-01-18 22:47:17","http://evaviet.net/AdFY-Lh_VHbLQqxMe-qgA/INVOICE/6802/OVERPAYMENT/EN_en/Open-Past-Due-Orders/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105759/"
-"105758","2019-01-18 22:46:44","http://ero4790k.com/XUBb-INgV_L-gJ8/INVOICE/0576/OVERPAYMENT/US/Paid-Invoice-Credit-Card-Receipt/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105758/"
-"105757","2019-01-18 22:46:42","http://distinctiveblog.ir/EDHfD-gq_AIWqWukK-cph/InvoiceCodeChanges/EN_en/Paid-Invoice/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105757/"
-"105756","2019-01-18 22:46:41","http://cms.berichtvoorjou.nl/hwsCx-Czve_fm-xE/Ref/16789462En_us/Invoice-2239940-January/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105756/"
-"105755","2019-01-18 22:46:40","http://blogg.postvaxel.se/lzVtT-QdFfM_bu-zqP/ACH/PaymentInfo/US_us/Question/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105755/"
-"105754","2019-01-18 22:46:39","http://batdongsanbamien24h.com/tLMMM-NPQ_jJKMWeS-bZj/ACH/PaymentAdvice/EN_en/Service-Report-3588/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105754/"
-"105753","2019-01-18 22:46:36","http://andrewsalmon.co.uk/kokMx-ddRbM_BnsfV-8Z/INVOICE/US/Invoice-for-u/a-01/19/2019/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105753/"
+"105774","2019-01-18 22:49:51","http://ucfoundation.online/OaTLO-pE0bN_nSw-5N/INVOICE/En_us/Invoices-attached/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105774/"
+"105773","2019-01-18 22:49:17","http://trottmyworld.ch/Xsxj-Rz_SimE-fuu/INVOICE/74831/OVERPAYMENT/En/Paid-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105773/"
+"105772","2019-01-18 22:49:16","http://thesunavenuequan2.com/UfKnh-DDzIZ_aAl-3W6/EXT/PaymentStatus/US/Past-Due-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105772/"
+"105771","2019-01-18 22:49:13","http://sidelineking.xyz/URJHB-Eiye9_cRHCODsUJ-L9/US/Outstanding-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105771/"
+"105770","2019-01-18 22:49:10","http://shootinstars.in/WtMdY-ZQzY_xQbf-yEo/ACH/PaymentInfo/US_us/Past-Due-Invoice/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105770/"
+"105769","2019-01-18 22:49:09","http://rozwijamy.biz/wp-content/uploads/flwe-3yXO_TTxLoNHf-YI/EXT/PaymentStatus/US/Companies-Invoice-16854071/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105769/"
+"105768","2019-01-18 22:48:38","http://quentinberra.fr/ZvMh-sX_eRQN-TP/Z31/invoicing/En/Invoice-for-you/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105768/"
+"105767","2019-01-18 22:48:37","http://qigong-gironde.fr/ETszQ-ci_aglRKgmK-alC/EXT/PaymentStatus/US_us/Open-invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105767/"
+"105766","2019-01-18 22:48:36","http://pmcorporation.fr/yiKCL-Er5cf_Dkj-Je/US_us/Overdue-payment/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105766/"
+"105765","2019-01-18 22:48:34","http://mroffers.co.ke/LIvgv-lU8b_SGsUmH-wj/INVOICE/9613/OVERPAYMENT/US/Past-Due-Invoices/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105765/"
+"105764","2019-01-18 22:48:32","http://migoshen.org/wXib-VaB1n_kQT-1Yf/EXT/PaymentStatus/US/Invoice/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105764/"
+"105763","2019-01-18 22:48:30","http://lespetitsloupsmaraichers.fr/BxjVt-w11j_EpfLuG-IUQ/ACH/PaymentAdvice/US_us/Invoice-for-l/b-01/19/2019/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105763/"
+"105762","2019-01-18 22:48:29","http://lamppm.asertiva.cl/lismr-G8_sgBQ-nLq/invoices/60259/12719/US/Invoice-59553663/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105762/"
+"105761","2019-01-18 22:48:20","http://joinerycity.co.uk/oaXpS-8fLnn_swV-po/EN_en/Companies-Invoice-5251735/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105761/"
+"105760","2019-01-18 22:47:49","http://fce-transport.nl/rhMHW-fcLes_fmF-z82/154512/SurveyQuestionsUS/Scan/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105760/"
+"105759","2019-01-18 22:47:17","http://evaviet.net/AdFY-Lh_VHbLQqxMe-qgA/INVOICE/6802/OVERPAYMENT/EN_en/Open-Past-Due-Orders/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105759/"
+"105758","2019-01-18 22:46:44","http://ero4790k.com/XUBb-INgV_L-gJ8/INVOICE/0576/OVERPAYMENT/US/Paid-Invoice-Credit-Card-Receipt/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105758/"
+"105757","2019-01-18 22:46:42","http://distinctiveblog.ir/EDHfD-gq_AIWqWukK-cph/InvoiceCodeChanges/EN_en/Paid-Invoice/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105757/"
+"105756","2019-01-18 22:46:41","http://cms.berichtvoorjou.nl/hwsCx-Czve_fm-xE/Ref/16789462En_us/Invoice-2239940-January/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105756/"
+"105755","2019-01-18 22:46:40","http://blogg.postvaxel.se/lzVtT-QdFfM_bu-zqP/ACH/PaymentInfo/US_us/Question/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105755/"
+"105754","2019-01-18 22:46:39","http://batdongsanbamien24h.com/tLMMM-NPQ_jJKMWeS-bZj/ACH/PaymentAdvice/EN_en/Service-Report-3588/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105754/"
+"105753","2019-01-18 22:46:36","http://andrewsalmon.co.uk/kokMx-ddRbM_BnsfV-8Z/INVOICE/US/Invoice-for-u/a-01/19/2019/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105753/"
 "105752","2019-01-18 22:20:37","http://187.62.179.28:29141/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/105752/"
-"105751","2019-01-18 21:28:33","http://westland-onderhoud.nl/LtLiq-dQQ_Up-Ejj/ACH/PaymentAdvice/US_us/Invoice-receipt/","online","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105751/"
-"105750","2019-01-18 21:20:12","http://xn--pekys-iya.lt/wp-admin/Information/2019-01/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105750/"
+"105751","2019-01-18 21:28:33","http://westland-onderhoud.nl/LtLiq-dQQ_Up-Ejj/ACH/PaymentAdvice/US_us/Invoice-receipt/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105751/"
+"105750","2019-01-18 21:20:12","http://xn--pekys-iya.lt/wp-admin/Information/2019-01/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105750/"
 "105749","2019-01-18 21:20:10","http://www.xn----8sbef8axpew9i.xn--p1ai/Rechnungen/201812/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105749/"
 "105748","2019-01-18 21:20:09","http://sendgrid2.oicgulf.ae/wf/click?upn=lQdaUDK4fP2DCBVU1OraJGoDl7FwMQZe24j7Rp7v-2Fs1-2BfSVKXmzzyU4G15Cwu53zuym9XsMv4AXKFUT-2FRg6PFg-3D-3D_dZdmncppqS0rwqJ1XUc5dwxmQeLVM0VmvWfu5AIsREIMmCO4fj6uvIcRicvmEcXSQbP4-2B8ZulreV7HLgb5-2Fla1Egex0h885xWSVqA3t1DjXtfqRfeRSz-2B1zBVjhZhW7DqZOIail-2BwHBaD70nYpPjczHLGYDPFl27mSjJz-2Bw8fGMi0YJc9xyXTNjwaAp3ItEl96E-2BeogdAniy68RIEprPjSERpoW-2BVUwFAYibSn8-2F8iM-3D/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105748/"
-"105747","2019-01-18 21:20:08","http://sedhu.uy/Clients_Messages/2019-01/","online","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105747/"
-"105746","2019-01-18 21:19:35","http://cbsr.com.pk/Clients/2019-01/","online","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105746/"
-"105745","2019-01-18 21:19:34","http://borsh.site/Messages/2019-01/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105745/"
-"105744","2019-01-18 21:19:33","http://amitisazma.com/wp-includes/Transactions/2019-01/","online","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105744/"
-"105743","2019-01-18 21:12:07","http://yhhhczdy.cf/AMAZON/Clients_information/01_19/","online","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105743/"
-"105742","2019-01-18 21:12:05","http://marisel.com.ua/Rechnungen/DEZ2018/","online","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105742/"
-"105741","2019-01-18 21:12:04","http://bobin-head.com/AMAZON/Transactions-details/01_19/","online","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105741/"
+"105747","2019-01-18 21:20:08","http://sedhu.uy/Clients_Messages/2019-01/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105747/"
+"105746","2019-01-18 21:19:35","http://cbsr.com.pk/Clients/2019-01/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105746/"
+"105745","2019-01-18 21:19:34","http://borsh.site/Messages/2019-01/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105745/"
+"105744","2019-01-18 21:19:33","http://amitisazma.com/wp-includes/Transactions/2019-01/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105744/"
+"105743","2019-01-18 21:12:07","http://yhhhczdy.cf/AMAZON/Clients_information/01_19/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105743/"
+"105742","2019-01-18 21:12:05","http://marisel.com.ua/Rechnungen/DEZ2018/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105742/"
+"105741","2019-01-18 21:12:04","http://bobin-head.com/AMAZON/Transactions-details/01_19/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105741/"
 "105740","2019-01-18 21:02:04","https://url.emailprotection.link/?a6VDSPTGs_vNRYygmJ_By6Bs0LtJpQSKtoPuniiFFxnN9_C6z29MhPxuyuonGhfW7HDPbxyx5QVymuEWH5mWbkg~~/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105740/"
 "105739","2019-01-18 21:02:03","https://poly.rise-up.nsk.ru/Details/01_19/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105739/"
-"105738","2019-01-18 21:02:02","http://kantova.com/Information/01_19/","online","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105738/"
+"105738","2019-01-18 21:02:02","http://kantova.com/Information/01_19/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105738/"
 "105737","2019-01-18 21:00:03","https://linkprotect.cudasvc.com/url?a=http://etsj.futminna.edu.ng/Details/01_19&c=E10eZrhjvRJhfkoepMMDuW-W7mH2QBPWTP9otWHXxN4k3OUsjBdNaJoyMEJvGFFOHXeYjOOy3r82NIBjNWODZV0lJWqSGx97SARK6V5OrmWjGRQ-UFfpqPC_Xh&typo=1/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105737/"
 "105736","2019-01-18 20:59:47","http://prakritikkrishi.org/rGQkmu8i/","online","malware_download","emotet,epoch1,exe","https://urlhaus.abuse.ch/url/105736/"
 "105735","2019-01-18 20:59:46","http://www.kheiriehsalehin.com/wp-includes/ZBYLzi6s/","online","malware_download","emotet,epoch1,exe","https://urlhaus.abuse.ch/url/105735/"
 "105734","2019-01-18 20:59:14","http://www.bh-mehregan.org/pHdS2az/","online","malware_download","emotet,epoch1,exe","https://urlhaus.abuse.ch/url/105734/"
 "105733","2019-01-18 20:58:43","http://shantiniketangranthalay.technoexam.com/fsdVowy/","online","malware_download","emotet,epoch1,exe","https://urlhaus.abuse.ch/url/105733/"
 "105732","2019-01-18 20:58:40","http://www.vincopoker.com/dWSx5bwE/","online","malware_download","emotet,epoch1,exe","https://urlhaus.abuse.ch/url/105732/"
-"105731","2019-01-18 20:58:39","http://truongland.com/IQDMLVVK5515424/Information/2019-01/","online","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105731/"
-"105730","2019-01-18 20:58:37","http://tingera.com/Clients_transactions/01_19/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105730/"
-"105729","2019-01-18 20:58:03","http://thelivingstonfamily.net/Rechnungen/122018/","online","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105729/"
-"105728","2019-01-18 20:57:07","http://sevenempreenda.com.br/Information/012019/","online","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105728/"
-"105727","2019-01-18 20:57:05","http://saintjohnscba.com.ar/Rechnung/2018/","online","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105727/"
-"105726","2019-01-18 20:57:04","http://maytinhdau.vn/x5gsrus/Clients_Messages/012019/","online","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105726/"
-"105725","2019-01-18 20:43:36","http://zonnestroomtilburg.nl/Clients/012019/","online","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105725/"
+"105731","2019-01-18 20:58:39","http://truongland.com/IQDMLVVK5515424/Information/2019-01/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105731/"
+"105730","2019-01-18 20:58:37","http://tingera.com/Clients_transactions/01_19/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105730/"
+"105729","2019-01-18 20:58:03","http://thelivingstonfamily.net/Rechnungen/122018/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105729/"
+"105728","2019-01-18 20:57:07","http://sevenempreenda.com.br/Information/012019/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105728/"
+"105727","2019-01-18 20:57:05","http://saintjohnscba.com.ar/Rechnung/2018/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105727/"
+"105726","2019-01-18 20:57:04","http://maytinhdau.vn/x5gsrus/Clients_Messages/012019/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105726/"
+"105725","2019-01-18 20:43:36","http://zonnestroomtilburg.nl/Clients/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105725/"
 "105724","2019-01-18 20:43:35","http://queensaccessories.co.za/Details/01_19/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105724/"
-"105723","2019-01-18 20:43:33","http://goldengateschool.in/Transaction_details/01_19/","online","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105723/"
+"105723","2019-01-18 20:43:33","http://goldengateschool.in/Transaction_details/01_19/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105723/"
 "105722","2019-01-18 20:32:07","http://hartarizkigraha.co.id/wp-admin/JF0bdEb_lnQt6dKQ","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105722/"
 "105721","2019-01-18 20:32:03","http://reparaties-ipad.nl/pJjcudU8Kn/","online","malware_download","exe","https://urlhaus.abuse.ch/url/105721/"
 "105720","2019-01-18 20:28:02","http://vendermicasaenbarcelona.com/0y8o_v1p0lAS","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105720/"
-"105719","2019-01-18 20:27:59","http://petersatherley.live/Payments/012019/","online","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105719/"
+"105719","2019-01-18 20:27:59","http://petersatherley.live/Payments/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105719/"
 "105718","2019-01-18 20:27:27","http://ipeople.vn/Transaktion/2018/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105718/"
-"105717","2019-01-18 20:27:23","http://franklincovey.co.ke/Payments/012019/","online","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105717/"
-"105716","2019-01-18 20:26:51","http://storyonmymind.com/Documents/2019-01/","online","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105716/"
-"105715","2019-01-18 20:26:19","http://www.kortinakomarno.sk/Transactions/2019-01/","online","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105715/"
-"105714","2019-01-18 20:26:18","http://qeducacional.com.br/Payment_details/012019/","online","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105714/"
+"105717","2019-01-18 20:27:23","http://franklincovey.co.ke/Payments/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105717/"
+"105716","2019-01-18 20:26:51","http://storyonmymind.com/Documents/2019-01/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105716/"
+"105715","2019-01-18 20:26:19","http://www.kortinakomarno.sk/Transactions/2019-01/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105715/"
+"105714","2019-01-18 20:26:18","http://qeducacional.com.br/Payment_details/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105714/"
 "105713","2019-01-18 20:25:45","http://esculturaemjoia.vjvarga.com.br/Transaction_details/01_19/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105713/"
-"105712","2019-01-18 20:25:13","http://quahandmade.org/docs/Amazon/Transactions/012019/","online","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105712/"
+"105712","2019-01-18 20:25:13","http://quahandmade.org/docs/Amazon/Transactions/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105712/"
 "105711","2019-01-18 20:25:11","http://mail.queensaccessories.co.za/Information/2019-01/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105711/"
-"105710","2019-01-18 20:24:38","http://www.sobrancelhascassiana.com.br/Payment_details/2019-01/","online","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105710/"
+"105710","2019-01-18 20:24:38","http://www.sobrancelhascassiana.com.br/Payment_details/2019-01/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105710/"
 "105709","2019-01-18 20:24:04","http://wall309.com/Transactions/012019/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105709/"
 "105708","2019-01-18 20:23:32","http://oculista.com.br/Payments/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105708/"
 "105707","2019-01-18 20:23:30","https://linkprotect.cudasvc.com/url?a=http://etsj.futminna.edu.ng/Details/01_19&c=E,1,0eZrhjvRJhfkoepMMDuW-W7mH2QBPWTP9otWHXxN4k3OUsjBdNaJoyMEJvGFFOHXeYjOOy3r82NIBjNWODZV0lJWqSGx97SARK6V5OrmWjGRQ-UFfpqPC_Xh&typo=1/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105707/"
 "105706","2019-01-18 20:23:28","http://lmrcaorgukdy.cf/wp-admin/Clients_transactions/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105706/"
-"105704","2019-01-18 20:23:21","http://rapport-de-stage-tevai-sallaberry.fr/Attachments/01_19/","online","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105704/"
+"105704","2019-01-18 20:23:21","http://rapport-de-stage-tevai-sallaberry.fr/Attachments/01_19/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105704/"
 "105705","2019-01-18 20:23:21","https://u2922402.ct.sendgrid.net/wf/click?upn=U5TE2xvQsUMQ5Y90MzYM5mxgHp-2FQzRuccBy6Ly5DmG396yzEV1N8LwoINp95Ul3KelAjoMb86HDotDzz6QiQQANDvitbHlgI5ouGu3KtBm8-3D_qt-2BjmiowRuPonHIzbfR9hDl7hx1YJv-2Be4M-2FXg7TuNN-2FRwHWqbSkqHklWbMmFUucAGrVB1Drl9RN4bCjmLGQQ1uRdER5wpEomv5DNo-2BSz-2BOuVTxDiidS22EyWdRTB52i1-2BHPmz3q37u27s-2FyqaZzpVTXz6T0ULHff-2FLisDq5PvGR7jmztPB20jwTAQOSDfU5AKIk86I3fL-2BmUGNEyqrg45XtXlrTXbD3fDthwOYE7VM4-3D/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105705/"
-"105703","2019-01-18 20:23:20","http://fornalhadoabencoado.com.br/Messages/01_19/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105703/"
+"105703","2019-01-18 20:23:20","http://fornalhadoabencoado.com.br/Messages/01_19/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105703/"
 "105702","2019-01-18 20:22:48","https://u2922402.ct.sendgrid.net/wf/click?upn=BFMBSSkhnV7CpCSZgOiJyAdGHIM4UnhL-2F8DK6mctE2nAXuQsTAsfhrn3cLKGnsC0FzIWF5KtXJSby7DVUDakzg-3D-3D_-2F2kE4d6zW-2FK3bcRbEpDsznWSz5avyfOQjfgszYpdJCU3aNmg-2FSSRqPOjEb6umEl27QT6sN-2BfPfejhfNvi9Uqf3xov0scN0muGJvr1bd9dmhZi1nBxTZVZhliajYmotx3cemKWPlbsFx3-2FhRb9lU6zTGjXBwzv4-2FG0VDQRf1jKM2Q2wrscOKTU6IThzcysLxUbS2w2OXx2NRPGQh3bqOgXqAbuFwOcW30yT1Fla-2FFZ0M-3D/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105702/"
 "105701","2019-01-18 20:22:47","http://register.srru.ac.th/Transaction_details/012019/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105701/"
-"105700","2019-01-18 20:22:44","http://themanorcentralparknguyenxien.net/Documents/012019/","online","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105700/"
-"105699","2019-01-18 20:22:42","http://kamlab.fr/Documents/012019/","online","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105699/"
-"105698","2019-01-18 20:22:41","http://souqaziz.com/Transactions/2019-01/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105698/"
+"105700","2019-01-18 20:22:44","http://themanorcentralparknguyenxien.net/Documents/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105700/"
+"105699","2019-01-18 20:22:42","http://kamlab.fr/Documents/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105699/"
+"105698","2019-01-18 20:22:41","http://souqaziz.com/Transactions/2019-01/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105698/"
 "105697","2019-01-18 20:22:40","http://sofrehgard.com/Clients_Messages/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105697/"
-"105696","2019-01-18 20:22:38","http://hiswillfuneralhome.co.za/Information/012019/","online","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105696/"
-"105695","2019-01-18 20:22:05","http://ashleymrc.com/Attachments/2019-01/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105695/"
-"105694","2019-01-18 20:22:03","http://ria.krasnorechie.org/Transactions/01_19/","online","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105694/"
-"105693","2019-01-18 20:09:44","http://songlinhtran.vn/wp-content/Clients_information/01_19/","online","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105693/"
+"105696","2019-01-18 20:22:38","http://hiswillfuneralhome.co.za/Information/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105696/"
+"105695","2019-01-18 20:22:05","http://ashleymrc.com/Attachments/2019-01/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105695/"
+"105694","2019-01-18 20:22:03","http://ria.krasnorechie.org/Transactions/01_19/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105694/"
+"105693","2019-01-18 20:09:44","http://songlinhtran.vn/wp-content/Clients_information/01_19/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105693/"
 "105692","2019-01-18 20:09:42","http://jcpersonaliza.com.br/Clients_information/01_19/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105692/"
-"105691","2019-01-18 20:09:40","http://wtede.com/sKMWJ-RjNWQ_YerwTQ-K00/COMET/SIGNS/PAYMENT/NOTIFICATION/01/18/2019/US/Question/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105691/"
-"105690","2019-01-18 20:09:08","http://vndaily.site/xzXL-RBE_iTzbYbXt-P8g/PaymentStatus/En_us/471-01-466452-809-471-01-466452-917/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105690/"
-"105689","2019-01-18 20:08:35","http://realgen-webdesign.nl/GxqkZ-XM_dQrxPUU-Zb3/invoices/5524/5747/En_us/Invoice-93042534-January/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105689/"
+"105691","2019-01-18 20:09:40","http://wtede.com/sKMWJ-RjNWQ_YerwTQ-K00/COMET/SIGNS/PAYMENT/NOTIFICATION/01/18/2019/US/Question/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105691/"
+"105690","2019-01-18 20:09:08","http://vndaily.site/xzXL-RBE_iTzbYbXt-P8g/PaymentStatus/En_us/471-01-466452-809-471-01-466452-917/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105690/"
+"105689","2019-01-18 20:08:35","http://realgen-webdesign.nl/GxqkZ-XM_dQrxPUU-Zb3/invoices/5524/5747/En_us/Invoice-93042534-January/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105689/"
 "105688","2019-01-18 20:08:04","http://appliancestalk.com/cgi-bin/RQYil-iP_ytDEwOF-yYC/INV/803038FORPO/6442295196/US_us/Paid-Invoice-Credit-Card-Receipt/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105688/"
-"105687","2019-01-18 20:07:25","http://thanhlapdoanhnghiephnh.com/kbCg0oh0_rNNj4TLtq_K/","online","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105687/"
-"105686","2019-01-18 20:07:22","http://afordioretails.com/D4Rm_Eugj/","online","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105686/"
-"105685","2019-01-18 20:06:51","http://salecar2.muasam360.com/wp-content/9z7_MFL011/","online","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105685/"
-"105684","2019-01-18 20:06:48","http://panlierhu.com/XMy9MFv1_pDQsD/","online","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105684/"
-"105683","2019-01-18 20:06:13","http://salah.mobiilat.com/e24sv6_38Ihrh_nVYqny/","online","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105683/"
+"105687","2019-01-18 20:07:25","http://thanhlapdoanhnghiephnh.com/kbCg0oh0_rNNj4TLtq_K/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/105687/"
+"105686","2019-01-18 20:07:22","http://afordioretails.com/D4Rm_Eugj/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/105686/"
+"105685","2019-01-18 20:06:51","http://salecar2.muasam360.com/wp-content/9z7_MFL011/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/105685/"
+"105684","2019-01-18 20:06:48","http://panlierhu.com/XMy9MFv1_pDQsD/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/105684/"
+"105683","2019-01-18 20:06:13","http://salah.mobiilat.com/e24sv6_38Ihrh_nVYqny/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/105683/"
 "105682","2019-01-18 20:06:10","http://193.151.91.163/1.exe","online","malware_download","ServHelper,Task","https://urlhaus.abuse.ch/url/105682/"
 "105681","2019-01-18 20:05:17","http://106.105.197.111:20794/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/105681/"
 "105680","2019-01-18 20:04:44","https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fwww.emmanuelboos.info%2fYqLad-p5ij_na-5eF%2fRef%2f9928911859EN_en%2fNew-order&c=E,1,el5WqYQWUOa9EXJJ-hSZfsAtKPvELrcZEcTMY3hcn-JgscDFOosmi9U1egPaFp9a1XiYpUraIQ3Nmt4emnDTKfdOj57jJ0UizGB5Y_9JAJU5DMmYZpA,&typo=1/","offline","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105680/"
 "105679","2019-01-18 20:04:43","http://www.windailygh.com/cBeX-jJ_YnmrS-xFi/Invoice/910581862/En_us/Past-Due-Invoices/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105679/"
-"105678","2019-01-18 20:04:42","http://www.southafricanvenousforum.co.za/CPzf-Pg7F_xiOGP-l3n/COMET/SIGNS/PAYMENT/NOTIFICATION/01/18/2019/US_us/Paid-Invoice/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105678/"
-"105677","2019-01-18 20:04:07","http://www.skyrim-gow.fr/MIuE-U3YoH_wTpD-G3/204943/SurveyQuestionsEN_en/Scan/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105677/"
-"105676","2019-01-18 20:04:05","http://www.pwpami.pl/nfSsn-qp_WtSxvlgb-NYu/PaymentStatus/En/New-order/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105676/"
-"105675","2019-01-18 20:04:03","http://www.ljfpajpdy.cf/dHkb-7q_eQPWxlLr-x2/Ref/2723472224US_us/ACH-form/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105675/"
-"105674","2019-01-18 20:03:32","http://www.lexfort.ru/ofarA-OG_h-omH/600387/SurveyQuestionsEN_en/Important-Please-Read/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105674/"
-"105673","2019-01-18 20:03:30","http://www.housesittingreference.com/CTcA-8M_kFNRfQBku-dQI/Invoice/8751108/US_us/Open-invoices/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105673/"
-"105672","2019-01-18 20:02:56","http://www.grantkulinar.ru/AaLL-70_iFWIrwpBW-nS/EXT/PaymentStatus/En_us/Document-needed/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105672/"
-"105671","2019-01-18 20:02:53","http://www.glazastiks.ru/gaLjP-Ra_noqrx-S0i/InvoiceCodeChanges/US_us/Need-to-send-the-attachment/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105671/"
-"105670","2019-01-18 20:02:51","http://www.emmanuelboos.info/YqLad-p5ij_na-5eF/Ref/9928911859EN_en/New-order/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105670/"
-"105669","2019-01-18 20:02:49","http://www.abmtrust.org/GYOz-CKpQ_J-tEv/InvoiceCodeChanges/US_us/Invoices-attached/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105669/"
-"105668","2019-01-18 20:02:47","http://welovecreative.co.nz/zZPlc-MClAf_ZSrRmdT-4hr/PaymentStatus/US/Sales-Invoice/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105668/"
-"105667","2019-01-18 20:02:45","http://webview.bvibus.com/exWP-yING_DqBpZIA-ip/INV/474605FORPO/382136162612/En_us/Invoice-0002914/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105667/"
-"105666","2019-01-18 20:02:43","http://tommie.tlpdesignstudios.com/BmDqb-EgM_ltZIEMYW-TG/INV/75370FORPO/8323587825/En/Sales-Invoice/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105666/"
-"105665","2019-01-18 20:02:39","http://titheringtons.com/SXrZG-xH5_sh-dc/invoices/7595/8458/US_us/Service-Report-0593/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105665/"
-"105664","2019-01-18 20:02:36","http://suglafish.com/FZWw-Sxtp_G-vv/ACH/PaymentInfo/EN_en/Past-Due-Invoices/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105664/"
+"105678","2019-01-18 20:04:42","http://www.southafricanvenousforum.co.za/CPzf-Pg7F_xiOGP-l3n/COMET/SIGNS/PAYMENT/NOTIFICATION/01/18/2019/US_us/Paid-Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105678/"
+"105677","2019-01-18 20:04:07","http://www.skyrim-gow.fr/MIuE-U3YoH_wTpD-G3/204943/SurveyQuestionsEN_en/Scan/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105677/"
+"105676","2019-01-18 20:04:05","http://www.pwpami.pl/nfSsn-qp_WtSxvlgb-NYu/PaymentStatus/En/New-order/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105676/"
+"105675","2019-01-18 20:04:03","http://www.ljfpajpdy.cf/dHkb-7q_eQPWxlLr-x2/Ref/2723472224US_us/ACH-form/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105675/"
+"105674","2019-01-18 20:03:32","http://www.lexfort.ru/ofarA-OG_h-omH/600387/SurveyQuestionsEN_en/Important-Please-Read/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105674/"
+"105673","2019-01-18 20:03:30","http://www.housesittingreference.com/CTcA-8M_kFNRfQBku-dQI/Invoice/8751108/US_us/Open-invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105673/"
+"105672","2019-01-18 20:02:56","http://www.grantkulinar.ru/AaLL-70_iFWIrwpBW-nS/EXT/PaymentStatus/En_us/Document-needed/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105672/"
+"105671","2019-01-18 20:02:53","http://www.glazastiks.ru/gaLjP-Ra_noqrx-S0i/InvoiceCodeChanges/US_us/Need-to-send-the-attachment/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105671/"
+"105670","2019-01-18 20:02:51","http://www.emmanuelboos.info/YqLad-p5ij_na-5eF/Ref/9928911859EN_en/New-order/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105670/"
+"105669","2019-01-18 20:02:49","http://www.abmtrust.org/GYOz-CKpQ_J-tEv/InvoiceCodeChanges/US_us/Invoices-attached/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105669/"
+"105668","2019-01-18 20:02:47","http://welovecreative.co.nz/zZPlc-MClAf_ZSrRmdT-4hr/PaymentStatus/US/Sales-Invoice/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105668/"
+"105667","2019-01-18 20:02:45","http://webview.bvibus.com/exWP-yING_DqBpZIA-ip/INV/474605FORPO/382136162612/En_us/Invoice-0002914/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105667/"
+"105666","2019-01-18 20:02:43","http://tommie.tlpdesignstudios.com/BmDqb-EgM_ltZIEMYW-TG/INV/75370FORPO/8323587825/En/Sales-Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105666/"
+"105665","2019-01-18 20:02:39","http://titheringtons.com/SXrZG-xH5_sh-dc/invoices/7595/8458/US_us/Service-Report-0593/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105665/"
+"105664","2019-01-18 20:02:36","http://suglafish.com/FZWw-Sxtp_G-vv/ACH/PaymentInfo/EN_en/Past-Due-Invoices/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105664/"
 "105663","2019-01-18 20:02:33","http://stats.www.giancarlopuppo.com/tmp/NvBJ-Lo_MkWf-iVA/Invoice/5181591/US_us/Outstanding-Invoices/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105663/"
-"105662","2019-01-18 20:02:32","http://spcoretraining.com/RKIJM-Zc_CbZyocABK-e5/En_us/Invoice-57753072-January/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105662/"
-"105661","2019-01-18 20:01:59","http://southpacificawaits.com/JVfqY-VQs_FCtWBvz-FSr/Invoice/63259968/EN_en/Invoice-20415544/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105661/"
+"105662","2019-01-18 20:02:32","http://spcoretraining.com/RKIJM-Zc_CbZyocABK-e5/En_us/Invoice-57753072-January/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105662/"
+"105661","2019-01-18 20:01:59","http://southpacificawaits.com/JVfqY-VQs_FCtWBvz-FSr/Invoice/63259968/EN_en/Invoice-20415544/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105661/"
 "105660","2019-01-18 20:01:25","http://southernthatch.co.za/oMDzp-3II_s-kZ/PaymentStatus/En_us/Scan/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105660/"
-"105659","2019-01-18 20:01:23","http://smsold401.smsold.com/WhXS-B1tD_aEDWHSRHG-FJh/invoices/4313/7912/En_us/956-19-758612-186-956-19-758612-699/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105659/"
-"105658","2019-01-18 20:01:21","http://smsin.site/BCNP-iazWR_EOdXmtiXO-Lz/Southwire/HZD87624096/En/ACH-form/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105658/"
-"105657","2019-01-18 20:01:17","http://shop.avn.parts/GsAA-7QQ6X_tHrCvgz-3v/EXT/PaymentStatus/US_us/Invoice-1322320/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105657/"
-"105656","2019-01-18 20:01:15","http://shafanikan.com/rdPuM-d3ai_JgiXobg-Jdo/ACH/PaymentAdvice/EN_en/Invoice/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105656/"
-"105655","2019-01-18 20:00:42","http://sgtsrl.it/dnEe-mV9_CwHIrBs-Ui/INVOICE/En_us/Invoice-receipt/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105655/"
-"105654","2019-01-18 20:00:41","http://sanmarengenharia.com.br/xhyib-Q8NvA_tyfqMfJ-Vz1/0039425/SurveyQuestionsUS/Invoice-2027925-January/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105654/"
-"105653","2019-01-18 20:00:08","http://revistarevival.com/zwXt-nA3tk_biSZ-P0/EXT/PaymentStatus/EN_en/Paid-Invoice-Credit-Card-Receipt/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105653/"
-"105652","2019-01-18 19:59:36","http://redwing.com.eg/cIPlC-3G_uIxOd-UKh/Invoice/18742280/US_us/Invoice-for-x/k-01/18/2019/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105652/"
-"105651","2019-01-18 19:59:03","http://rccgregion15juniorchurch.org/BGbmS-5W_BDP-aj0/COMET/SIGNS/PAYMENT/NOTIFICATION/01/18/2019/EN_en/Past-Due-Invoice/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105651/"
-"105650","2019-01-18 19:58:15","http://petparents.com.br/bqshe-KO_yXFudV-FS/Ref/740935652En/Outstanding-Invoices/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105650/"
-"105649","2019-01-18 19:57:44","http://pe-co.nl/EvtAY-g1_KJjAmq-jj/INVOICE/US_us/Invoice-receipt/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105649/"
-"105648","2019-01-18 19:57:43","http://offblack.de/vPhT-jn2_eohiYtJyr-Dm/InvoiceCodeChanges/En/Past-Due-Invoices/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105648/"
-"105647","2019-01-18 19:57:42","http://oceangate.parkhomes.vn/laRsA-lKx_mQ-vd/Ref/817226888EN_en/Invoice-receipt/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105647/"
-"105646","2019-01-18 19:57:40","http://northernpost.in/HSHvT-nbQB_E-VD/15150/SurveyQuestionsEn/Open-invoices/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105646/"
-"105645","2019-01-18 19:57:39","http://nhakhoavieta.com/lplB-PwLai_rSROuND-om/83053/SurveyQuestionsEN_en/Past-Due-Invoices/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105645/"
-"105644","2019-01-18 19:57:34","http://msobrasciviles.cl/Gvuu-u3_brGnf-LN/10753/SurveyQuestionsEn/Invoice-Corrections-for-87/47/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105644/"
-"105643","2019-01-18 19:57:32","http://mail.buligbugto.org/klNNj-pE_nJ-9I/COMET/SIGNS/PAYMENT/NOTIFICATION/01/18/2019/En_us/475-03-845602-783-475-03-845602-522/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105643/"
-"105642","2019-01-18 19:56:59","http://ktml.org/dMAAQ-1XJxI_lxsT-vx/En/Service-Report-1340/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105642/"
-"105641","2019-01-18 19:56:58","http://johnnycrap.com/jXbo-Bzb_cQo-h0t/InvoiceCodeChanges/En_us/Question/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105641/"
-"105640","2019-01-18 19:56:56","http://fidesconstantia.com/Ywxfz-nr0_VxHR-TE/Southwire/XUB8632375051/US_us/Outstanding-Invoices/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105640/"
-"105639","2019-01-18 19:56:55","http://creditorgroup.com/pKVV-eaE_bSkiso-1xn/InvoiceCodeChanges/US/Past-Due-Invoices/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105639/"
-"105638","2019-01-18 19:56:54","http://clinicainnovate.com.br/QBDOi-cIKB_lochwKe-Yq/INV/9791369FORPO/9496030558/US/Past-Due-Invoice/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105638/"
-"105637","2019-01-18 19:56:22","http://clarisse-hervouet.fr/mpaw-yL_GuX-d2G/ACH/PaymentInfo/US_us/Inv-81204-PO-7D336498/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105637/"
-"105636","2019-01-18 19:56:20","http://butgoviet.com/ptCZf-SCq3F_W-jja/US/Outstanding-Invoices/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105636/"
-"105635","2019-01-18 19:55:45","http://ayumi.ishiura.org/ixOFR-ofPu_O-omE/INV/210081FORPO/31065215734/En_us/Outstanding-Invoices/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105635/"
-"105634","2019-01-18 19:55:41","http://astra-empress.com.ve/KDFLk-UcdJ_IYAwjC-DjA/PaymentStatus/En_us/Inv-30408-PO-9T735477/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105634/"
-"105633","2019-01-18 19:55:06","http://aryahospitalksh.com/gSxF-O0_lDfhym-3m/Invoice/89540320/En_us/Overdue-payment/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105633/"
+"105659","2019-01-18 20:01:23","http://smsold401.smsold.com/WhXS-B1tD_aEDWHSRHG-FJh/invoices/4313/7912/En_us/956-19-758612-186-956-19-758612-699/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105659/"
+"105658","2019-01-18 20:01:21","http://smsin.site/BCNP-iazWR_EOdXmtiXO-Lz/Southwire/HZD87624096/En/ACH-form/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105658/"
+"105657","2019-01-18 20:01:17","http://shop.avn.parts/GsAA-7QQ6X_tHrCvgz-3v/EXT/PaymentStatus/US_us/Invoice-1322320/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105657/"
+"105656","2019-01-18 20:01:15","http://shafanikan.com/rdPuM-d3ai_JgiXobg-Jdo/ACH/PaymentAdvice/EN_en/Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105656/"
+"105655","2019-01-18 20:00:42","http://sgtsrl.it/dnEe-mV9_CwHIrBs-Ui/INVOICE/En_us/Invoice-receipt/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105655/"
+"105654","2019-01-18 20:00:41","http://sanmarengenharia.com.br/xhyib-Q8NvA_tyfqMfJ-Vz1/0039425/SurveyQuestionsUS/Invoice-2027925-January/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105654/"
+"105653","2019-01-18 20:00:08","http://revistarevival.com/zwXt-nA3tk_biSZ-P0/EXT/PaymentStatus/EN_en/Paid-Invoice-Credit-Card-Receipt/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105653/"
+"105652","2019-01-18 19:59:36","http://redwing.com.eg/cIPlC-3G_uIxOd-UKh/Invoice/18742280/US_us/Invoice-for-x/k-01/18/2019/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105652/"
+"105651","2019-01-18 19:59:03","http://rccgregion15juniorchurch.org/BGbmS-5W_BDP-aj0/COMET/SIGNS/PAYMENT/NOTIFICATION/01/18/2019/EN_en/Past-Due-Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105651/"
+"105650","2019-01-18 19:58:15","http://petparents.com.br/bqshe-KO_yXFudV-FS/Ref/740935652En/Outstanding-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105650/"
+"105649","2019-01-18 19:57:44","http://pe-co.nl/EvtAY-g1_KJjAmq-jj/INVOICE/US_us/Invoice-receipt/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105649/"
+"105648","2019-01-18 19:57:43","http://offblack.de/vPhT-jn2_eohiYtJyr-Dm/InvoiceCodeChanges/En/Past-Due-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105648/"
+"105647","2019-01-18 19:57:42","http://oceangate.parkhomes.vn/laRsA-lKx_mQ-vd/Ref/817226888EN_en/Invoice-receipt/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105647/"
+"105646","2019-01-18 19:57:40","http://northernpost.in/HSHvT-nbQB_E-VD/15150/SurveyQuestionsEn/Open-invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105646/"
+"105645","2019-01-18 19:57:39","http://nhakhoavieta.com/lplB-PwLai_rSROuND-om/83053/SurveyQuestionsEN_en/Past-Due-Invoices/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105645/"
+"105644","2019-01-18 19:57:34","http://msobrasciviles.cl/Gvuu-u3_brGnf-LN/10753/SurveyQuestionsEn/Invoice-Corrections-for-87/47/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105644/"
+"105643","2019-01-18 19:57:32","http://mail.buligbugto.org/klNNj-pE_nJ-9I/COMET/SIGNS/PAYMENT/NOTIFICATION/01/18/2019/En_us/475-03-845602-783-475-03-845602-522/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105643/"
+"105642","2019-01-18 19:56:59","http://ktml.org/dMAAQ-1XJxI_lxsT-vx/En/Service-Report-1340/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105642/"
+"105641","2019-01-18 19:56:58","http://johnnycrap.com/jXbo-Bzb_cQo-h0t/InvoiceCodeChanges/En_us/Question/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105641/"
+"105640","2019-01-18 19:56:56","http://fidesconstantia.com/Ywxfz-nr0_VxHR-TE/Southwire/XUB8632375051/US_us/Outstanding-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105640/"
+"105639","2019-01-18 19:56:55","http://creditorgroup.com/pKVV-eaE_bSkiso-1xn/InvoiceCodeChanges/US/Past-Due-Invoices/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105639/"
+"105638","2019-01-18 19:56:54","http://clinicainnovate.com.br/QBDOi-cIKB_lochwKe-Yq/INV/9791369FORPO/9496030558/US/Past-Due-Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105638/"
+"105637","2019-01-18 19:56:22","http://clarisse-hervouet.fr/mpaw-yL_GuX-d2G/ACH/PaymentInfo/US_us/Inv-81204-PO-7D336498/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105637/"
+"105636","2019-01-18 19:56:20","http://butgoviet.com/ptCZf-SCq3F_W-jja/US/Outstanding-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105636/"
+"105635","2019-01-18 19:55:45","http://ayumi.ishiura.org/ixOFR-ofPu_O-omE/INV/210081FORPO/31065215734/En_us/Outstanding-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105635/"
+"105634","2019-01-18 19:55:41","http://astra-empress.com.ve/KDFLk-UcdJ_IYAwjC-DjA/PaymentStatus/En_us/Inv-30408-PO-9T735477/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105634/"
+"105633","2019-01-18 19:55:06","http://aryahospitalksh.com/gSxF-O0_lDfhym-3m/Invoice/89540320/En_us/Overdue-payment/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105633/"
 "105632","2019-01-18 19:55:03","http://robbedinbarcelona.com/Clients_transactions/01_19/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105632/"
 "105631","2019-01-18 18:58:07","https://cdn.discordapp.com/attachments/535542098124865566/535567927596810240/N3tfl1X_Reaper.exe","online","malware_download","exe,orcus,orcusrat,rat","https://urlhaus.abuse.ch/url/105631/"
-"105630","2019-01-18 18:53:02","http://darkksource.x10.mx/spoofer/Loop.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105630/"
-"105629","2019-01-18 18:52:07","http://darkksource.x10.mx/spoofer/HDD.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105629/"
-"105628","2019-01-18 18:52:05","http://darkksource.x10.mx/spoofer/Spoofer.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105628/"
+"105630","2019-01-18 18:53:02","http://darkksource.x10.mx/spoofer/Loop.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105630/"
+"105629","2019-01-18 18:52:07","http://darkksource.x10.mx/spoofer/HDD.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105629/"
+"105628","2019-01-18 18:52:05","http://darkksource.x10.mx/spoofer/Spoofer.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105628/"
 "105627","2019-01-18 18:43:04","http://142.93.145.217/armv4l","online","malware_download","elf","https://urlhaus.abuse.ch/url/105627/"
 "105626","2019-01-18 18:43:02","http://142.93.145.217/m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/105626/"
 "105625","2019-01-18 18:41:06","http://142.93.145.217/i686","online","malware_download","elf","https://urlhaus.abuse.ch/url/105625/"
@@ -186,8 +326,8 @@
 "105618","2019-01-18 18:39:35","http://142.93.145.217/x86","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/105618/"
 "105617","2019-01-18 18:39:34","http://142.93.145.217/i586","online","malware_download","elf","https://urlhaus.abuse.ch/url/105617/"
 "105616","2019-01-18 18:39:33","http://142.93.145.217/armv7l","online","malware_download","elf","https://urlhaus.abuse.ch/url/105616/"
-"105615","2019-01-18 18:38:05","http://darkksource.x10.mx/spoofer/Delete.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105615/"
-"105614","2019-01-18 18:38:04","http://darkksource.x10.mx/spoofer/IP.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/105614/"
+"105615","2019-01-18 18:38:05","http://darkksource.x10.mx/spoofer/Delete.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105615/"
+"105614","2019-01-18 18:38:04","http://darkksource.x10.mx/spoofer/IP.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105614/"
 "105613","2019-01-18 17:59:05","http://leodruker.com/Transactions/2019-01/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/105613/"
 "105612","2019-01-18 17:59:04","http://lrprealestate.vi-bus.com/Clients/2019-01/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/105612/"
 "105611","2019-01-18 17:59:02","http://tabouwadvies.nl/Transactions/012019/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/105611/"
@@ -196,22 +336,22 @@
 "105608","2019-01-18 17:51:10","http://ulco.tv/IxBx0er/","online","malware_download","emotet,epoch1,exe","https://urlhaus.abuse.ch/url/105608/"
 "105607","2019-01-18 17:51:09","http://lakewoods.net/mVMGKkcLY/","offline","malware_download","emotet,epoch1,exe","https://urlhaus.abuse.ch/url/105607/"
 "105606","2019-01-18 17:51:05","http://kids-education-support.com/aLEzfTe/","online","malware_download","emotet,epoch1,exe","https://urlhaus.abuse.ch/url/105606/"
-"105605","2019-01-18 17:50:14","http://jameshunt.org/uyni_0f7r_6FeBhv4/","online","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105605/"
+"105605","2019-01-18 17:50:14","http://jameshunt.org/uyni_0f7r_6FeBhv4/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/105605/"
 "105604","2019-01-18 17:50:12","http://deccanmarket.com/yLLP_ICCOEE_Xxf/","offline","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105604/"
-"105603","2019-01-18 17:49:39","http://ballimspharmacy.co.za/r0fhWv3_KERQ_JnF/","online","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105603/"
-"105602","2019-01-18 17:49:05","http://www.vendermicasaenbarcelona.com/0y8o_v1p0lAS/","online","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105602/"
-"105601","2019-01-18 17:49:04","http://horoscoposbrasil.com/rZH5U_FTnlcm_rEje59/","online","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105601/"
-"105600","2019-01-18 17:37:57","http://aconiaformation.fr/MnBNF-gV_MeI-l6/InvoiceCodeChanges/US/Open-Past-Due-Orders/","online","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105600/"
+"105603","2019-01-18 17:49:39","http://ballimspharmacy.co.za/r0fhWv3_KERQ_JnF/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/105603/"
+"105602","2019-01-18 17:49:05","http://www.vendermicasaenbarcelona.com/0y8o_v1p0lAS/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/105602/"
+"105601","2019-01-18 17:49:04","http://horoscoposbrasil.com/rZH5U_FTnlcm_rEje59/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/105601/"
+"105600","2019-01-18 17:37:57","http://aconiaformation.fr/MnBNF-gV_MeI-l6/InvoiceCodeChanges/US/Open-Past-Due-Orders/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105600/"
 "105599","2019-01-18 17:37:56","https://linkprotect.cudasvc.com/url?a=http://ar.caginerhastanesi.com.tr/IdVEX-GT6_m-nF/COMET/SIGNS/PAYMENT/NOTIFICATION/01/18/2019/En_us/Document-needed&c=E,1,W7tozd_OVjcy60eqOCwpBXREeD-sIJhLr8ktLmG4l_tOuxdnEakc1GjGuta8oMa3d2uhrtbSUvDx22YxShersKBsbUQ4RDs1y1fHtLNgiLFi5yTcAg,,&typo=1/","offline","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105599/"
-"105598","2019-01-18 17:37:55","https://xn--j1aclp1d.in.ua/LcIZ-cDaa_NTYKMl-u6/ACH/PaymentInfo/En/Companies-Invoice-22804841/","online","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105598/"
+"105598","2019-01-18 17:37:55","https://xn--j1aclp1d.in.ua/LcIZ-cDaa_NTYKMl-u6/ACH/PaymentInfo/En/Companies-Invoice-22804841/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105598/"
 "105597","2019-01-18 17:37:54","http://www.nancycheng.nl/ibEhu-5NL_KP-qHJ/ACH/PaymentInfo/US/Sales-Invoice/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105597/"
-"105596","2019-01-18 17:37:53","http://directsnel.nl/ldCPo-zOSG_U-Pon/ACH/PaymentInfo/En/823-33-487455-436-823-33-487455-583/","online","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105596/"
+"105596","2019-01-18 17:37:53","http://directsnel.nl/ldCPo-zOSG_U-Pon/ACH/PaymentInfo/En/823-33-487455-436-823-33-487455-583/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105596/"
 "105595","2019-01-18 17:37:52","https://gtp.usgtf.com/Blnt-jM_zE-6S8/INV/94637FORPO/87108004660/EN_en/Invoice-11235207/","offline","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105595/"
-"105594","2019-01-18 17:37:51","http://3.dohodtut.ru/HJPSb-qFf_VWHYIKyES-alN/INV/90912FORPO/649150722404/En/Important-Please-Read/","online","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105594/"
+"105594","2019-01-18 17:37:51","http://3.dohodtut.ru/HJPSb-qFf_VWHYIKyES-alN/INV/90912FORPO/649150722404/En/Important-Please-Read/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105594/"
 "105593","2019-01-18 17:37:20","https://na01.safelinks.protection.outlook.com/?url=http://www.scanliftmaskin.no/paYB-juX36_aNODsId-PqI/Inv/82509032526/US_us/Open-invoices&data=02|01|sid.turner@4tpe.com|7165dc024b574f66f5e208d67d529159|4e1664c3a8334f479037c634a1fd7c4a|0|0|636834190926125604&sdata=tG9RbeguBARnV87srH2xAhJBPVcvhCzf7NQ3Umwz0tY=&reserved=0/","offline","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105593/"
-"105592","2019-01-18 17:37:18","http://www.toddlerpops.com/DE_de/NMEZPI6268550/Rechnungskorrektur/RECH/","online","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105592/"
+"105592","2019-01-18 17:37:18","http://www.toddlerpops.com/DE_de/NMEZPI6268550/Rechnungskorrektur/RECH/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105592/"
 "105591","2019-01-18 17:37:16","http://aramanfood.com/csrrQ-lN1_so-FdC/Southwire/PSV1376627014/US/Paid-Invoice-Credit-Card-Receipt/","offline","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105591/"
-"105590","2019-01-18 17:37:14","https://cardealersforbadcredit.net/zlvkejwe/VLIbZ-0f_DVVLdjUsy-3dA/ACH/PaymentInfo/US_us/Invoice-for-n/n-01/18/2019/","online","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105590/"
+"105590","2019-01-18 17:37:14","https://cardealersforbadcredit.net/zlvkejwe/VLIbZ-0f_DVVLdjUsy-3dA/ACH/PaymentInfo/US_us/Invoice-for-n/n-01/18/2019/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105590/"
 "105589","2019-01-18 17:37:13","http://northernpost.in/tEtzO-llaio_DAlaN-mK/COMET/SIGNS/PAYMENT/NOTIFICATION/01/16/2019/EN_en/Invoice-Number-00051/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105589/"
 "105588","2019-01-18 17:36:41","http://www.taizer.ru/JIPwS-pQK_jdvZ-Irf/DL712/invoicing/En/Outstanding-Invoices/","offline","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/105588/"
 "105587","2019-01-18 17:36:40","http://nghiataman.com/Amazon/En/Orders-details/2019-01/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105587/"
@@ -227,7 +367,7 @@
 "105577","2019-01-18 17:34:48","http://amerigau.com/wp-content/uploads/Details/01_19/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105577/"
 "105576","2019-01-18 17:34:43","http://dhgl.vn/Attachments/01_19/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105576/"
 "105575","2019-01-18 17:34:40","http://pinimazor.com/Clients_Messages/2019-01/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105575/"
-"105574","2019-01-18 17:34:38","http://askhenry.co.uk/blog/upload/Amazon/Orders_details/2019-01/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105574/"
+"105574","2019-01-18 17:34:38","http://askhenry.co.uk/blog/upload/Amazon/Orders_details/2019-01/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105574/"
 "105573","2019-01-18 17:34:38","http://www.dr-ahmedelhusseiny.com/Amazon/En/Clients_transactions/2019-01/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105573/"
 "105572","2019-01-18 17:34:06","http://demo.jrkcompany.com/Amazon/En/Attachments/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105572/"
 "105571","2019-01-18 17:34:04","http://anthinhland.onlinenhadat.net/Amazon/Attachments/01_19/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105571/"
@@ -247,13 +387,13 @@
 "105557","2019-01-18 17:22:06","http://zamena-schetchikov.novosibirsk.ru/mODgV-bcF_tFaky-kOB/COMET/SIGNS/PAYMENT/NOTIFICATION/01/18/2019/US/Invoice/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105557/"
 "105556","2019-01-18 17:22:04","http://yxcsdy.cf/eOFLP-USnc_dXBralDX-9X/QC85/invoicing/En/Invoice-for-you/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105556/"
 "105555","2019-01-18 17:21:34","http://yserechdy.cf/DlDwk-QmkXa_ZKVbmNQXx-4Z/COMET/SIGNS/PAYMENT/NOTIFICATION/01/18/2019/US_us/Inv-272991-PO-4O608402/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105555/"
-"105554","2019-01-18 17:21:08","http://www.web.pa-cirebon.go.id/KGLp-2zo0_Q-fRg/INVOICE/41749/OVERPAYMENT/US/Overdue-payment/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105554/"
+"105554","2019-01-18 17:21:08","http://www.web.pa-cirebon.go.id/KGLp-2zo0_Q-fRg/INVOICE/41749/OVERPAYMENT/US/Overdue-payment/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105554/"
 "105553","2019-01-18 17:21:05","http://samet-celik.com/sYaq-Kbwsd_Ze-irZ/invoices/4353/55382/US_us/Invoice-receipt/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105553/"
 "105552","2019-01-18 17:21:00","http://mandalafest.com/JIpB-dzix_XVBWNwNJg-KN/EXT/PaymentStatus/En/New-order/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105552/"
 "105551","2019-01-18 17:20:59","http://lstasshdy.cf/wp-admin/waYqM-ZlD_fxwSJkAU-o7H/INV/47127FORPO/44322944468/US/280-30-169584-494-280-30-169584-161/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105551/"
-"105550","2019-01-18 17:20:50","http://linkingphase.com/bNWtV-qgbS_P-hH/INVOICE/US/Inv-981974-PO-2L436830/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105550/"
+"105550","2019-01-18 17:20:50","http://linkingphase.com/bNWtV-qgbS_P-hH/INVOICE/US/Inv-981974-PO-2L436830/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105550/"
 "105549","2019-01-18 17:20:48","http://fira.org.za/Bkzx-MCwZ_QbR-MR/invoices/53832/6396/US/Invoice-Number-53760/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105549/"
-"105548","2019-01-18 17:20:18","http://erolatak.com/gBpq-VQ9Q_nRIU-ab/Invoice/2786267/En_us/Paid-Invoice-Credit-Card-Receipt/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105548/"
+"105548","2019-01-18 17:20:18","http://erolatak.com/gBpq-VQ9Q_nRIU-ab/Invoice/2786267/En_us/Paid-Invoice-Credit-Card-Receipt/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105548/"
 "105547","2019-01-18 17:20:13","http://cbrrbdy.gq/LjquP-adxy_uMHckUtc-Pbm/Invoice/175472286/US/Inv-85999-PO-9D432791/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105547/"
 "105546","2019-01-18 17:20:07","http://authenticrooftiles.com/PPLp-iNl_HBHWHvI-eD/COMET/SIGNS/PAYMENT/NOTIFICATION/01/18/2019/En/Open-Past-Due-Orders/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105546/"
 "105545","2019-01-18 17:20:06","http://atashneda.com/cqnc-rfli_zDFNCUjoO-cr/PaymentStatus/EN_en/Overdue-payment/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105545/"
@@ -273,22 +413,22 @@
 "105531","2019-01-18 16:26:01","http://www.wins-power.com/iixF-OV_kqV-NK/INV/00968FORPO/134610688014/En_us/Outstanding-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105531/"
 "105530","2019-01-18 16:26:00","http://www.agentfox.io/ZAqo-QB5_tJXk-pL/H96/invoicing/EN_en/Past-Due-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105530/"
 "105529","2019-01-18 16:25:57","http://waggrouponline.org/NTYgH-3u_n-wh/Ref/302484694US_us/Important-Please-Read/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105529/"
-"105528","2019-01-18 16:25:53","http://sos-debouchage-dumeny.com/yPeg-tmw7X_JZWVIOxrF-gb1/En_us/Paid-Invoice/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105528/"
+"105528","2019-01-18 16:25:53","http://sos-debouchage-dumeny.com/yPeg-tmw7X_JZWVIOxrF-gb1/En_us/Paid-Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105528/"
 "105527","2019-01-18 16:25:50","http://sofathugian.vn/EKgOS-mZ5_KfbZG-Ylp/15643/SurveyQuestionsEN_en/Past-Due-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105527/"
 "105526","2019-01-18 16:25:47","http://milan-light.savel.ru/DAaZ-ECDN_MGqfftAK-PN5/628367/SurveyQuestionsUS_us/7-Past-Due-Invoices/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105526/"
 "105525","2019-01-18 16:25:46","http://kosolve.com/tzJC-OcOxP_RpPnYL-j0v/INVOICE/US/Important-Please-Read/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105525/"
 "105524","2019-01-18 16:25:44","http://hopeswithin.org/nKSOT-QWrY_ZRO-wft/Invoice/01535830/En_us/Invoice-for-you/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105524/"
 "105523","2019-01-18 16:25:43","http://drapart.org/Qxafy-OR_pzW-lT/INVOICE/10270/OVERPAYMENT/US_us/Document-needed/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105523/"
-"105522","2019-01-18 16:25:42","http://demo.gtcticket.com/fGSG-cIx8_TE-iq/INVOICE/EN_en/Important-Please-Read/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105522/"
+"105522","2019-01-18 16:25:42","http://demo.gtcticket.com/fGSG-cIx8_TE-iq/INVOICE/EN_en/Important-Please-Read/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105522/"
 "105521","2019-01-18 16:25:39","http://constructiis3.ro/wp-content/vfdTD-Kw_E-bX/Invoice/584235869/US/Past-Due-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105521/"
 "105520","2019-01-18 16:25:07","http://chzhfdy.gq/eAwG-Lm_ewDvQz-Jy/Invoice/983945882/En_us/Invoice-Corrections-for-66/89/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105520/"
-"105519","2019-01-18 16:24:21","http://tritonwoodworkers.org.au/Attachments/01_19/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105519/"
+"105519","2019-01-18 16:24:21","http://tritonwoodworkers.org.au/Attachments/01_19/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105519/"
 "105518","2019-01-18 16:24:19","http://talktowendyssurvey.us/wp-admin/Attachments/01_19/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105518/"
 "105517","2019-01-18 16:23:47","http://rdweb.ir/Details/01_19/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105517/"
 "105516","2019-01-18 16:23:46","http://lvajnczdy.cf/wp-admin/Clients_Messages/01_19/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105516/"
-"105515","2019-01-18 16:23:39","http://liarla.com/Payment_details/2019-01/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105515/"
+"105515","2019-01-18 16:23:39","http://liarla.com/Payment_details/2019-01/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105515/"
 "105514","2019-01-18 16:23:37","http://kcespolska.pl/Details/2019-01/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105514/"
-"105513","2019-01-18 16:23:36","http://en.tag.ir/wp-admin/Clients_transactions/2019-01/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105513/"
+"105513","2019-01-18 16:23:36","http://en.tag.ir/wp-admin/Clients_transactions/2019-01/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105513/"
 "105512","2019-01-18 16:23:35","http://dev.umasterov.org/Transactions/2019-01/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105512/"
 "105511","2019-01-18 16:23:34","http://aeco.ir/Clients/012019/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105511/"
 "105510","2019-01-18 16:08:32","http://saigonthinhvuong.net/gGAUL-ymV_ggng-Ueu/Invoice/9151000/US/Open-Past-Due-Orders","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/105510/"
@@ -304,15 +444,15 @@
 "105500","2019-01-18 15:36:46","http://saigonthinhvuong.net/gGAUL-ymV_ggng-Ueu/Invoice/9151000/US/Open-Past-Due-Orders/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105500/"
 "105499","2019-01-18 15:36:43","http://pskovhelp.ru/Xrolz-J3RRk_dpWZja-j6k/COMET/SIGNS/PAYMENT/NOTIFICATION/01/18/2019/En_us/ACH-form/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105499/"
 "105498","2019-01-18 15:36:42","http://noviatour.com/HrRiM-JlA_YGGPeuhE-fv/ACH/PaymentAdvice/En/Scan/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105498/"
-"105497","2019-01-18 15:36:39","http://mycv.fsm.undip.ac.id/xEOGq-SNgV_icr-aG/737263/SurveyQuestionsEn/Open-Past-Due-Orders/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105497/"
+"105497","2019-01-18 15:36:39","http://mycv.fsm.undip.ac.id/xEOGq-SNgV_icr-aG/737263/SurveyQuestionsEn/Open-Past-Due-Orders/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105497/"
 "105496","2019-01-18 15:36:03","http://modern-autoparts.com/DYVjA-hUP_p-D4/Ref/606083569US_us/Document-needed/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105496/"
-"105495","2019-01-18 15:35:59","http://mahsew.com/DqWOB-cPNL_nx-cO/Ref/7814649944En/Service-Report-00469/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105495/"
+"105495","2019-01-18 15:35:59","http://mahsew.com/DqWOB-cPNL_nx-cO/Ref/7814649944En/Service-Report-00469/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105495/"
 "105494","2019-01-18 15:35:57","http://leonardokubrick.com/UUYZE-Xr51_dVnZiwtP-tVs/EXT/PaymentStatus/US_us/7-Past-Due-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105494/"
-"105493","2019-01-18 15:35:54","http://legalisir.fib.uns.ac.id/ponSx-PY_yXMhjee-Wq8/Invoice/581627564/US_us/Invoice-for-you/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105493/"
+"105493","2019-01-18 15:35:54","http://legalisir.fib.uns.ac.id/ponSx-PY_yXMhjee-Wq8/Invoice/581627564/US_us/Invoice-for-you/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105493/"
 "105492","2019-01-18 15:35:20","http://eirak.co/RHgkF-VB_wJ-G2/PaymentStatus/US_us/Service-Report-2543/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105492/"
 "105491","2019-01-18 15:35:19","http://doctor.fpik.ub.ac.id/brpV-Oa_UDQlw-r4/Invoice/8076808/US/3-Past-Due-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105491/"
 "105490","2019-01-18 15:35:17","http://btcmining.fund/PhXGC-Hc_PQxBqeFA-dd7/Southwire/DFL3817991485/En/Past-Due-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105490/"
-"105489","2019-01-18 15:34:44","http://arcencieltour.ma/xMXt-4z_MhiSIxupv-7oI/InvoiceCodeChanges/En_us/4-Past-Due-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105489/"
+"105489","2019-01-18 15:34:44","http://arcencieltour.ma/xMXt-4z_MhiSIxupv-7oI/InvoiceCodeChanges/En_us/4-Past-Due-Invoices/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105489/"
 "105488","2019-01-18 15:34:39","http://www.suahoradeaprender.com.br/Rechnungs/122018/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105488/"
 "105487","2019-01-18 15:34:06","http://www.oculista.com.br/Attachments/012019/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105487/"
 "105486","2019-01-18 15:34:04","http://qwatmos.com/Rechnungs/122018/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105486/"
@@ -335,7 +475,7 @@
 "105469","2019-01-18 14:55:03","http://23.249.161.100/jhn/tony.exe","online","malware_download","exe,opendir","https://urlhaus.abuse.ch/url/105469/"
 "105468","2019-01-18 14:52:04","http://23.249.161.100/jhn/vbc.exe","online","malware_download","exe,Formbook,opendir","https://urlhaus.abuse.ch/url/105468/"
 "105467","2019-01-18 14:44:06","http://www.sos-secretariat.be/Details/2019-01/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/105467/"
-"105466","2019-01-18 14:44:05","http://thegablesofyorkcounty.com/Clients_information/01_19/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/105466/"
+"105466","2019-01-18 14:44:05","http://thegablesofyorkcounty.com/Clients_information/01_19/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/105466/"
 "105465","2019-01-18 14:44:03","http://morozan.it/Attachments/2019-01/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/105465/"
 "105464","2019-01-18 14:44:02","http://www.muzikgunlugu.com/fugpc1p/Documents/01_19/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/105464/"
 "105463","2019-01-18 14:23:06","http://web.muasam360.com/Amazon/Transaction_details/01_19/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/105463/"
@@ -351,15 +491,15 @@
 "105452","2019-01-18 13:34:45","http://mspn.com.au/bUEx-jfb_vMfRiU-xE/INVOICE/90736/OVERPAYMENT/EN_en/Paid-Invoice-Credit-Card-Receipt/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105452/"
 "105451","2019-01-18 13:34:42","http://mstudija.lt/Celhs-upjH_uarOJm-hY/ACH/PaymentAdvice/US_us/Scan/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105451/"
 "105450","2019-01-18 13:34:41","http://www.apresearch.in/DLmp-xu_OLaIwMvn-LI/INVOICE/63494/OVERPAYMENT/US_us/Invoice-Corrections-for-22/75/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105450/"
-"105449","2019-01-18 13:34:39","http://edmthing.com/Amazon/En/Payments/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105449/"
+"105449","2019-01-18 13:34:39","http://edmthing.com/Amazon/En/Payments/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105449/"
 "105448","2019-01-18 13:34:37","http://runtah.com/wp-includes/AMAZON/Payments/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105448/"
 "105447","2019-01-18 13:34:35","http://belnagroup.com/Amazon/Transaction_details/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105447/"
 "105446","2019-01-18 13:34:33","http://symbisystems.com/Amazon/Clients_Messages/2019-01/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105446/"
 "105445","2019-01-18 13:34:31","http://ojoquesecasan.com/AMAZON/Clients_Messages/2019-01/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105445/"
 "105444","2019-01-18 13:34:30","http://www.modern-autoparts.com/Amazon/Clients_Messages/2019-01/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105444/"
-"105443","2019-01-18 13:34:27","http://solovoyager.me/Amazon/En/Transaction_details/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105443/"
+"105443","2019-01-18 13:34:27","http://solovoyager.me/Amazon/En/Transaction_details/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105443/"
 "105442","2019-01-18 13:34:25","http://jaspinformatica.com/Amazon/En/Clients_transactions/01_19/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105442/"
-"105441","2019-01-18 13:34:23","http://www.belovedmotherof13.com/Amazon/EN/Clients/01_19/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105441/"
+"105441","2019-01-18 13:34:23","http://www.belovedmotherof13.com/Amazon/EN/Clients/01_19/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105441/"
 "105440","2019-01-18 13:34:21","http://alfemimoda.com/Rechnungen/201812/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105440/"
 "105439","2019-01-18 13:34:19","http://hjsanders.nl/Rechnungs/122018/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105439/"
 "105438","2019-01-18 13:34:19","http://hostelegant.com/Transaktion/2018/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105438/"
@@ -377,11 +517,11 @@
 "105426","2019-01-18 13:21:31","http://201.43.15.50:26664/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/105426/"
 "105425","2019-01-18 13:21:27","http://125.254.53.45:18466/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/105425/"
 "105423","2019-01-18 12:58:03","http://193.151.91.163/2.exe","online","malware_download","AZORult,Task","https://urlhaus.abuse.ch/url/105423/"
-"105422","2019-01-18 12:49:21","http://trend-studio.art/k6jaCgS_Ukfd_apNei38I6/","offline","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105422/"
+"105422","2019-01-18 12:49:21","http://trend-studio.art/k6jaCgS_Ukfd_apNei38I6/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/105422/"
 "105421","2019-01-18 12:49:19","http://tasmatbaa.com/1MXeJC9_KSsQ7B/","offline","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105421/"
-"105420","2019-01-18 12:49:17","http://hartarizkigraha.co.id/wp-admin/JF0bdEb_lnQt6dKQ/","online","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105420/"
-"105419","2019-01-18 12:49:06","http://nt-group.kz/86Rzn_wmF7RyQ7F/","online","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105419/"
-"105418","2019-01-18 12:49:03","http://mimiabner.com/22D_ZGrV5aY_AvvRf/","online","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105418/"
+"105420","2019-01-18 12:49:17","http://hartarizkigraha.co.id/wp-admin/JF0bdEb_lnQt6dKQ/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/105420/"
+"105419","2019-01-18 12:49:06","http://nt-group.kz/86Rzn_wmF7RyQ7F/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/105419/"
+"105418","2019-01-18 12:49:03","http://mimiabner.com/22D_ZGrV5aY_AvvRf/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/105418/"
 "105417","2019-01-18 12:38:05","http://jineplast.com.tr/wp-admin/css/colors/blue/ssj.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105417/"
 "105416","2019-01-18 12:34:11","https://discounted-deal.website/.well-known/acme-challenge/ssj.jp","offline","malware_download","exe,Shade","https://urlhaus.abuse.ch/url/105416/"
 "105415","2019-01-18 12:34:09","http://xn--80abhfbusccenm1pyb.xn--p1ai/upload/images/ssj.jpg","online","malware_download","exe,Shade","https://urlhaus.abuse.ch/url/105415/"
@@ -397,7 +537,7 @@
 "105405","2019-01-18 11:31:05","http://innio.biz/rg1n590/","online","malware_download","emotet,epoch1,exe","https://urlhaus.abuse.ch/url/105405/"
 "105404","2019-01-18 11:31:04","http://stats.emalaya.org/gWItwAFU/","online","malware_download","emotet,epoch1,exe","https://urlhaus.abuse.ch/url/105404/"
 "105403","2019-01-18 11:31:03","http://greenplastic.com/hUYu36qNEQ/","offline","malware_download","emotet,epoch1,exe","https://urlhaus.abuse.ch/url/105403/"
-"105402","2019-01-18 11:26:12","http://newwayit.vn/Rechnung/DEZ2018/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105402/"
+"105402","2019-01-18 11:26:12","http://newwayit.vn/Rechnung/DEZ2018/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105402/"
 "105401","2019-01-18 11:26:09","http://district.vi-bus.com/Transaktion/DEZ2018/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105401/"
 "105400","2019-01-18 11:26:06","http://komsima.org/wp-content/Rechnungen/DEZ2018/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105400/"
 "105399","2019-01-18 11:24:05","http://flipagrom.ga/temp/mmanwu.exe","online","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/105399/"
@@ -415,12 +555,12 @@
 "105387","2019-01-18 10:18:08","http://kristinka5.life/payload.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105387/"
 "105386","2019-01-18 10:08:07","http://d1exe.com/6FSgXhXskJ.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105386/"
 "105385","2019-01-18 10:07:08","http://d1exe.com/kKFCrw85HM.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105385/"
-"105384","2019-01-18 10:04:04","https://idontknow.moe/files/feknoe.jpg","online","malware_download","malware","https://urlhaus.abuse.ch/url/105384/"
+"105384","2019-01-18 10:04:04","https://idontknow.moe/files/feknoe.jpg","online","malware_download","HawkEye,malware","https://urlhaus.abuse.ch/url/105384/"
 "105383","2019-01-18 09:43:02","http://d1exe.com/3Dcc08iZHv.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105383/"
 "105382","2019-01-18 09:34:23","http://sosh47.citycheb.ru/components/Rechnungs/201812/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105382/"
 "105381","2019-01-18 09:34:21","http://web.pa-cirebon.go.id/Rechnungen/201812/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105381/"
 "105380","2019-01-18 09:34:20","http://www.xn--d1albnc.xn--p1ai/Rechnung/2018/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105380/"
-"105379","2019-01-18 09:34:18","http://pramlee.com.my/Rechnungs/2018/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105379/"
+"105379","2019-01-18 09:34:18","http://pramlee.com.my/Rechnungs/2018/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105379/"
 "105378","2019-01-18 09:34:14","http://take12.nl/Rechnungs/2018/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105378/"
 "105377","2019-01-18 09:34:13","http://suplemar.o11.pl/Rechnung/122018/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105377/"
 "105376","2019-01-18 09:34:10","http://shlifovka.by/Rechnungs/2018/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105376/"
@@ -439,7 +579,7 @@
 "105363","2019-01-18 09:01:20","http://farukyilmaz.com.tr/wp-includes/ID3/ssj.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105363/"
 "105362","2019-01-18 09:01:11","http://digimacmobiles.com/wp-includes/ID3/ssj.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105362/"
 "105361","2019-01-18 09:01:08","http://markpreneur.com/wp-content/themes/the-seo/css/ssj.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105361/"
-"105360","2019-01-18 09:01:05","http://gemco-geo.com/wp-content/themes/airi/widgets/ssj.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105360/"
+"105360","2019-01-18 09:01:05","http://gemco-geo.com/wp-content/themes/airi/widgets/ssj.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/105360/"
 "105359","2019-01-18 08:56:13","http://allaroundwm.com/wp-admin/css/colors/blue/ssj.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/105359/"
 "105358","2019-01-18 08:56:01","http://rnexpress.ir/Amazon/EN/Clients_Messages/01_19","offline","malware_download","None","https://urlhaus.abuse.ch/url/105358/"
 "105357","2019-01-18 08:50:03","http://dplogistics.com.pl/Amazon/En/Transactions-details/012019","offline","malware_download","None","https://urlhaus.abuse.ch/url/105357/"
@@ -474,11 +614,11 @@
 "105327","2019-01-18 07:16:13","http://livingdivineprinciple.org/xTV5cGLcz2/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/105327/"
 "105326","2019-01-18 07:16:05","http://demos.technoexam.com/C1CpwolKHv/","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/105326/"
 "105325","2019-01-18 07:14:04","http://bouresmau-gsf.com/ZhPZMfOo/","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/105325/"
-"105324","2019-01-18 07:12:27","http://kcpaving.co.za/vTzd_4jLXhB6AV/","offline","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105324/"
-"105323","2019-01-18 07:12:22","http://www.giancarlopuppo.com/tmp/3JBXN3_NmitWLk37_trb2wuQ/","offline","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105323/"
-"105322","2019-01-18 07:12:08","http://www.immo-en-israel.com/mP7mhva_1xVx_6tOstw7/","online","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105322/"
-"105321","2019-01-18 07:12:07","http://dowseservices.com/Cna7kt_HtIAD2LqT_rXDH9b/","online","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105321/"
-"105320","2019-01-18 07:12:05","http://easyaccesshs.com/WYPsCYUe_89F0oV/","offline","malware_download","emotet,epoch2,exe","https://urlhaus.abuse.ch/url/105320/"
+"105324","2019-01-18 07:12:27","http://kcpaving.co.za/vTzd_4jLXhB6AV/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/105324/"
+"105323","2019-01-18 07:12:22","http://www.giancarlopuppo.com/tmp/3JBXN3_NmitWLk37_trb2wuQ/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/105323/"
+"105322","2019-01-18 07:12:08","http://www.immo-en-israel.com/mP7mhva_1xVx_6tOstw7/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/105322/"
+"105321","2019-01-18 07:12:07","http://dowseservices.com/Cna7kt_HtIAD2LqT_rXDH9b/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/105321/"
+"105320","2019-01-18 07:12:05","http://easyaccesshs.com/WYPsCYUe_89F0oV/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/105320/"
 "105319","2019-01-18 06:50:01","https://aoiap.org/images/q.png","offline","malware_download","exe,HawkEye,keylogger","https://urlhaus.abuse.ch/url/105319/"
 "105318","2019-01-18 06:49:58","http://everyonesmile.net/wp/wp-admin/css/colors/blue/ssj.jpg","online","malware_download","exe,Shade","https://urlhaus.abuse.ch/url/105318/"
 "105317","2019-01-18 06:49:46","http://sidebartv.com/wp-content/themes/all-business/css/fonts/ssj.jpg","offline","malware_download","exe,Shade","https://urlhaus.abuse.ch/url/105317/"
@@ -514,9 +654,9 @@
 "105287","2019-01-18 03:52:24","http://kiber-soft.net/HBIVS-wLe_bcgq-GN/invoices/0343/79616/EN_en/Invoice-2574066-January/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105287/"
 "105286","2019-01-18 03:52:21","http://healers.awaken-hda.com/jyJtZ-Gq_PVOGW-Ak/184765/SurveyQuestionsEn/Paid-Invoices/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105286/"
 "105285","2019-01-18 03:52:18","http://eurolinecars.ru/DE/DCFYDKPT8398668/gescanntes-Dokument/FORM/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105285/"
-"105284","2019-01-18 03:52:15","http://drdoorbin.com/XGSR-aF_thsRz-o5/QE332/invoicing/US/Question/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105284/"
+"105284","2019-01-18 03:52:15","http://drdoorbin.com/XGSR-aF_thsRz-o5/QE332/invoicing/US/Question/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105284/"
 "105283","2019-01-18 03:52:11","http://coworkingaruja.com.br/Januar2019/PDQBOMHU0179187/Rechnungs/DOC/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105283/"
-"105282","2019-01-18 03:52:07","http://clubdirectors.tv/De_de/IPRXQNXPPM4929999/DE/DOC/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105282/"
+"105282","2019-01-18 03:52:07","http://clubdirectors.tv/De_de/IPRXQNXPPM4929999/DE/DOC/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105282/"
 "105281","2019-01-18 03:39:08","https://url.emailprotection.link/?abXcC0b1oLP-BXgTX0Qjajw42MURvcZK6HFKmlInhI7ZHVx_FYv0hOfNNuM9994JKrN-74FpQ3hIg5Qlr0-8p-A~~/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105281/"
 "105280","2019-01-18 03:39:07","https://pojbez31.ru/Amazon/EN/Messages/012019/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105280/"
 "105279","2019-01-18 03:39:06","https://linkprotect.cudasvc.com/url?a=http://hjsanders.nl/Transactions/2019-01&c=E1CZs0n8uqwSo1BXDYoKRF7k5Q-WOqtsqDfJlPRjzy40PT4lZOf-Xiwr-yG7fNvPk315kNYXZrw_h1U5018BjWwwyKC_Pqc73rBDpB25IB&typo=1/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105279/"
@@ -527,7 +667,7 @@
 "105274","2019-01-18 03:16:17","https://u6547982.ct.sendgrid.net/wf/click?upn=bu-2FKl8jwfHHl7vzGLYn8cGnlQRqBBIQjlVLdTGMPwP-2FgXjEiyLDwNc-2BYJI8ITnIb2epwvY3aJRBWhy0Xzc9PVw-3D-3D_T2OQnmBgkig8in2Rk28k1skDgT18t3Wt4cOZymvHqoMkt5RdSECrbVaG0bDn-2FzKGpXzjYHJ3WJDX-2Fb6CEeXByelUm4rGzFUsxpUDAhBIPUNluj0OVqw1MHtZ8hBI5XsX4N8YagvO1NAjEFPoc6-2Fy9k0mr-2BDoiyyB7idlKfh8gUK63Ul0-2BDZRioXM-2FKBAoOnLjeYs8vzCPSFsSCHnV9mLfX7USZFMXVH0rRS9-2FqCWI3w-3D/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105274/"
 "105273","2019-01-18 03:16:16","http://nongnghiepgiaphat.com/dreyym/Transaktion/DEZ2018/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105273/"
 "105272","2019-01-18 03:16:12","http://niteshagrico.com/Amazon/En/Clients_information/012019/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105272/"
-"105271","2019-01-18 03:16:10","http://marshalstar.com.ng/Amazon/En/Clients/2019-01/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105271/"
+"105271","2019-01-18 03:16:10","http://marshalstar.com.ng/Amazon/En/Clients/2019-01/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105271/"
 "105270","2019-01-18 03:16:08","http://clubmestre.com:8080/Amazon/Payments/012019/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105270/"
 "105269","2019-01-18 03:16:07","http://cfood-casa.com/Rechnung/DEZ2018/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105269/"
 "105268","2019-01-18 03:16:04","http://capitalprivateasset.com/Amazon/En/Clients_transactions/012019/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/105268/"
@@ -549,13 +689,13 @@
 "105252","2019-01-18 01:34:49","http://ipbempreende.com.br/d2gp7Tj_xfPR2/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105252/"
 "105251","2019-01-18 01:34:48","https://u7188081.ct.sendgrid.net/wf/click?upn=qndQ4JJTiH8bHf5Kr8XpQ4QQA6qFw81WTPThe-2By2Dz5IXZ3mQ3Q-2B-2FNjy1xe2zfkTxMTTjZgMk5idhNx-2F9pzkEQ-3D-3D_4KEdUF-2FjGpR9pwSuVDOUnEcSXKDOcV9PRdMDD13WTECkwzhAplBqWjm1ueP-2BCJdIFzRQ-2BQtUC3kUu6-2Bftxf-2Bp2e0SeHb0OvzvW7GvyrvsEUPJmuD6hIkmGjN2PHzApu2dWTcEVa4H6hVBcbjp05fq7lZNfTJEBUnZHquRVf9hZEvWtMy96vF1wfRlmVGBxJE6iE-2BARYdm1J41gddRvuNeA-3D-3D/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105251/"
 "105250","2019-01-18 01:34:46","http://estab.org.tr/U3L2aMZnmE/","online","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105250/"
-"105249","2019-01-18 01:34:35","http://antique-carpets.com/PIpK4IlRd/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105249/"
+"105249","2019-01-18 01:34:35","http://antique-carpets.com/PIpK4IlRd/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105249/"
 "105248","2019-01-18 01:34:08","http://divametalart.com/BcabYiW/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105248/"
 "105247","2019-01-18 01:34:06","http://2benerji.com/Amazon/Transaction_details/012019/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105247/"
 "105245","2019-01-18 01:34:05","http://aramanfood.com/Rechnungen/01_19/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105245/"
-"105246","2019-01-18 01:34:05","http://zonnestroomtilburg.nl/Amazon/EN/Orders-details/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105246/"
+"105246","2019-01-18 01:34:05","http://zonnestroomtilburg.nl/Amazon/EN/Orders-details/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105246/"
 "105244","2019-01-18 01:34:02","https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsendgrid2.oicgulf.ae%2Fwf%2Fclick%3Fupn%3DFBXErEQYiWolIv6Nv7udtFUSdJbAYRpJ4ohWrD2wwo-2BKGk5fyM1vRhO9LQfzAAXuCfgRWFwpITFx6nMWvvqqoA-3D-3D_ZYmkta4SgKmmpIeqWK-2F8QZphizH3NqeiK5Ud1frAkCDr9j5QSG2iCu0giCEYHPR0aVo6YT9-2FLy5umT4XXCUicK9zEgn4iJq0121cZ2YcOXurIFWdqkDKeVMIAu15mpecc7eIlLl-2FYnzOGu1NB7kBXhoyCCLppLy8Jh5kypH9t-2BhL81-2Fgazhbc-2FFAUobyesZIBo-2BFb3C8LjQJAhq84oGKSpFuNeINTCOdgNblT3i0i44-3D&data=02%7C01%7Cpaul.cornelison%40cerner.com%7Cf882645333ea46b0fadd08d67cad1123%7Cfbc493a80d244454a815f4ca58e8c09d%7C0%7C0%7C636833480093430394&sdata=AlZAN%2FTM6cXq%2BLoH%2BxULMJuS9H8cXwZfI5TEcdwmkD4%3D&reserved=0/","offline","malware_download","None","https://urlhaus.abuse.ch/url/105244/"
-"105243","2019-01-18 00:51:14","http://www.mother-earth.net/bn/wp-content/KwmW-WSOO_jYDW-B2t/PaymentStatus/EN_en/277-20-468894-239-277-20-468894-861/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105243/"
+"105243","2019-01-18 00:51:14","http://www.mother-earth.net/bn/wp-content/KwmW-WSOO_jYDW-B2t/PaymentStatus/EN_en/277-20-468894-239-277-20-468894-861/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105243/"
 "105242","2019-01-18 00:51:12","http://salam-ngo.ir/yDdmu-GJ_VSwmngXHe-Dp/US/Outstanding-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105242/"
 "105241","2019-01-18 00:51:11","http://kamdhenu.technoexam.com/cPdj-pF53V_MAu-US/INVOICE/9255/OVERPAYMENT/EN_en/Open-Past-Due-Orders/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105241/"
 "105240","2019-01-18 00:51:09","http://fhclinica.com.br/DBhN-lVqao_nErXwPzxA-R4Q/EN_en/Document-needed/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105240/"
@@ -567,7 +707,7 @@
 "105234","2019-01-18 00:50:45","http://radintrader.com/Amazon/Transactions-details/2019-01/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105234/"
 "105233","2019-01-18 00:50:43","http://pmracing.it/Amazon/Transactions/012019/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105233/"
 "105232","2019-01-18 00:50:41","http://isoblogs.ir/Amazon/Orders-details/01_19/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105232/"
-"105231","2019-01-18 00:50:39","http://isikbahce.com/55pkhuo/Amazon/En/Payments/01_19/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105231/"
+"105231","2019-01-18 00:50:39","http://isikbahce.com/55pkhuo/Amazon/En/Payments/01_19/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105231/"
 "105230","2019-01-18 00:50:08","http://eriklanger.it/AMAZON/Transaction_details/012019/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105230/"
 "105229","2019-01-18 00:50:07","http://airmanship.nl/Amazon/En/Documents/01_19/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105229/"
 "105228","2019-01-18 00:50:05","http://aimypie.com/szrblze/Amazon/EN/Clients/012019/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105228/"
@@ -598,7 +738,7 @@
 "105203","2019-01-17 21:34:34","http://ubocapacitacion.cl/Amazon/Documents/2019-01/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105203/"
 "105202","2019-01-17 21:34:31","http://www.thequoruminitiative.com/Amazon/Payments_details/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105202/"
 "105201","2019-01-17 21:34:29","http://forexpedia.tradewithrobbie.com/Amazon/Transactions/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105201/"
-"105200","2019-01-17 21:34:26","http://kientrucdep.club/Amazon/En/Clients_information/01_19/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105200/"
+"105200","2019-01-17 21:34:26","http://kientrucdep.club/Amazon/En/Clients_information/01_19/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105200/"
 "105199","2019-01-17 21:34:23","http://tesla-power.pl/Amazon/EN/Documents/01_19/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105199/"
 "105198","2019-01-17 21:34:22","https://u7648241.ct.sendgrid.net/wf/click?upn=fx-2FIlfZR6CACYC-2FEzUu5goBFSgo-2FOrRzDmkybKg1z9uwiut4wbIhZi2DMOHWGLaCPgIT4yAKn0TPDAgdLkAgig-3D-3D_sAp2mMIMgdWludllEZL9PBvrjxZIksULq0cN0suEYiBM7CpYcV-2FMils5XnJXGsN6oiBmRpEscnWAJiBgYhvZYu8LjRz8gTfenmMA1s4nB8ovbmKiTxPuRlsZcgGrsZGuibb5yidRVAYyVQ-2BZLOQymb1CW0N84nrwmO9J56MRGf-2BZp8qHwgbJl0PeSzMefko4anVKUqFur0m-2FREvhOJYbPw-3D-3D/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/105198/"
 "105197","2019-01-17 21:34:21","http://mandselectricalcontractors.co.za/Amazon/Documents/2019-01/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/105197/"
@@ -638,7 +778,7 @@
 "105163","2019-01-17 20:10:28","http://millennialsberkarya.com/wp-admin/js/widgets/KZyMB-eF_cvZCCE-Hzy/COMET/SIGNS/PAYMENT/NOTIFICATION/01/17/2019/EN_en/New-ord/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105163/"
 "105162","2019-01-17 20:10:26","http://kashholon.co.il/mdzT-My0OG_JnCcOJlN-5KV/EXT/PaymentStatus/US/Companies-Invoice-2556548/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105162/"
 "105161","2019-01-17 20:10:25","http://gostar.vn/UcIN-Lz_Ccknj-5U5/En/Invoices-attached/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105161/"
-"105160","2019-01-17 20:10:22","http://firstclassedu.com.ng/zwZFR-he_AZVqIRdXI-jmS/P85/invoicing/US_us/Invoice-for-d/r-01/17/2019/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105160/"
+"105160","2019-01-17 20:10:22","http://firstclassedu.com.ng/zwZFR-he_AZVqIRdXI-jmS/P85/invoicing/US_us/Invoice-for-d/r-01/17/2019/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105160/"
 "105159","2019-01-17 20:10:12","http://estylos.com.gt/VRYHS-lK_yyGW-yg/InvoiceCodeChanges/US_us/Paid-Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105159/"
 "105157","2019-01-17 20:10:09","http://birdychat.com/cEmu-RnVlM_fyzp-vE/Inv/4353161709/US/Past-Due-Invoices/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105157/"
 "105158","2019-01-17 20:10:09","http://checkreview.ooo/irCTz-YAk_YElImI-Em5/Southwire/PLD919931638/EN_en/Invoices-Overdue/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105158/"
@@ -766,21 +906,21 @@
 "105034","2019-01-17 16:29:12","http://sskymedia.com/OTlDq-er_UxiKafT-x1/EXT/PaymentStatus/En_us/Service-Invoice/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105034/"
 "105032","2019-01-17 16:29:09","http://hauteloirebio.fr/jvYX-hJYx_IEsfAK-3yL/PaymentStatus/US_us/Invoice/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105032/"
 "105033","2019-01-17 16:29:09","http://quentinberra.fr/DsyPv-c4_EFrjaluU-Eu/COMET/SIGNS/PAYMENT/NOTIFICATION/01/17/2019/En_us/Paid-Invoice-Credit-Card-Receipt/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105033/"
-"105031","2019-01-17 16:29:08","http://www.kolejskilmentari.edu.my/MEFZY-R2eEc_OnxRMTNO-lNB/En/Outstanding-Invoices/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105031/"
-"105030","2019-01-17 16:29:05","http://csrcampaign.com/oSLl-q2Jo_d-8pv/PaymentStatus/US_us/Paid-Invoice-Credit-Card-Receipt/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105030/"
+"105031","2019-01-17 16:29:08","http://www.kolejskilmentari.edu.my/MEFZY-R2eEc_OnxRMTNO-lNB/En/Outstanding-Invoices/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105031/"
+"105030","2019-01-17 16:29:05","http://csrcampaign.com/oSLl-q2Jo_d-8pv/PaymentStatus/US_us/Paid-Invoice-Credit-Card-Receipt/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105030/"
 "105029","2019-01-17 16:26:03","http://www.paceforliving.co.uk/xxdap/client/wordpress/Amazon/EN/Orders_details/012019/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/105029/"
 "105028","2019-01-17 16:26:02","http://seitenstreifen.ch/Amazon/Information/01_19/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/105028/"
-"105027","2019-01-17 16:17:39","http://69.45.19.254:8080/Nrn3GDj89t5/RunMedia.txt","online","malware_download","CAN,Dridex,powershell,USA","https://urlhaus.abuse.ch/url/105027/"
+"105027","2019-01-17 16:17:39","http://69.45.19.254:8080/Nrn3GDj89t5/RunMedia.txt","offline","malware_download","CAN,Dridex,powershell,USA","https://urlhaus.abuse.ch/url/105027/"
 "105026","2019-01-17 16:17:37","http://192.254.177.175:8080/IniIhqQg/EsetNOD32.bin","offline","malware_download","CAN,Dridex,exe,USA","https://urlhaus.abuse.ch/url/105026/"
-"105025","2019-01-17 16:17:07","http://91.205.215.13:8080/O11L9Qub/MediaTable.bin","online","malware_download","CAN,Dridex,exe,USA","https://urlhaus.abuse.ch/url/105025/"
-"105024","2019-01-17 16:17:05","http://69.163.33.84:8080/ELjOX2c8/OfficeActivate.bin","online","malware_download","CAN,Dridex,exe,USA","https://urlhaus.abuse.ch/url/105024/"
+"105025","2019-01-17 16:17:07","http://91.205.215.13:8080/O11L9Qub/MediaTable.bin","offline","malware_download","CAN,Dridex,exe,USA","https://urlhaus.abuse.ch/url/105025/"
+"105024","2019-01-17 16:17:05","http://69.163.33.84:8080/ELjOX2c8/OfficeActivate.bin","offline","malware_download","CAN,Dridex,exe,USA","https://urlhaus.abuse.ch/url/105024/"
 "105023","2019-01-17 16:14:20","http://ysoredy.cf/Januar2019/VMAJGVUDB5016066/Rechnungs-docs/DOC-Dokument/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105023/"
 "105022","2019-01-17 16:14:14","http://www.zhktonline.ru/QIUE-GjrX_jKqQbZtS-pg/J06/invoicing/US/Invoice-69989281-January/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105022/"
 "105021","2019-01-17 16:14:11","http://www.rosimpex.net/cpHe-bNdyQ_JbjWuhlfr-u5/EN_en/Document-needed/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/105021/"
 "105020","2019-01-17 16:14:08","http://www.mandezik.com/ERqy-96Sw_Wh-hEI/PaymentStatus/US_us/Invoices-attached/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105020/"
 "105019","2019-01-17 16:14:03","http://www.droobedu.com/HPyL-cL3ex_dEzh-KnJ/INVOICE/0796/OVERPAYMENT/En_us/Document-needed/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105019/"
 "105018","2019-01-17 16:13:59","http://www.dplogistics.com.pl/PpCR-rB_QsLs-E4/ACH/PaymentAdvice/En/Past-Due-Invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105018/"
-"105017","2019-01-17 16:13:57","http://sutesisatci.biz.tr/pBAih-UHv_HowdfYoAw-vvK/87105/SurveyQuestionsEN_en/Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105017/"
+"105017","2019-01-17 16:13:57","http://sutesisatci.biz.tr/pBAih-UHv_HowdfYoAw-vvK/87105/SurveyQuestionsEN_en/Invoice/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105017/"
 "105016","2019-01-17 16:13:53","http://ronasmarket.ir/ESVD-XXlxF_PocOZiz-3D/Southwire/CZR601587498/US/ACH-form/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105016/"
 "105015","2019-01-17 16:13:50","http://robledodetorio.com/HZlAt-fVcum_x-Fy/US/Invoice-receipt/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105015/"
 "105014","2019-01-17 16:13:48","http://phytosweets101.com/XQZL-Wx4s_ywKmHhkA-Cf/Invoice/08475966/En_us/Inv-67164-PO-0F526809/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/105014/"
@@ -859,7 +999,7 @@
 "104941","2019-01-17 14:22:09","http://agence.nucleus.odns.fr/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/104941/"
 "104940","2019-01-17 14:16:04","http://jesseworld.eu/chidon/chidon.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/104940/"
 "104939","2019-01-17 14:13:31","http://ybbsshdy.cf/Rechnungs/2018/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104939/"
-"104938","2019-01-17 14:13:27","http://test.good-gid.ru/Rechnungen/201812/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104938/"
+"104938","2019-01-17 14:13:27","http://test.good-gid.ru/Rechnungen/201812/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104938/"
 "104937","2019-01-17 14:13:18","http://catfish.by/Rechnung/2018/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104937/"
 "104936","2019-01-17 14:13:17","http://www.pivmag02.ru/De_de/YWJLCUYZJ9767423/gescanntes-Dokument/Hilfestellung/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104936/"
 "104935","2019-01-17 14:13:15","http://www.hopeintlschool.org/Januar2019/NHNZYRYQAN0737838/gescanntes-Dokument/DETAILS/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104935/"
@@ -873,21 +1013,21 @@
 "104927","2019-01-17 14:03:41","http://kynangtuhoc.com/WRCk6xGo9s/","online","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/104927/"
 "104926","2019-01-17 14:03:38","http://adamallorca.org/Jw3mayRvk/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/104926/"
 "104925","2019-01-17 14:03:37","http://buyhomecare.net/RyoJj06p/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/104925/"
-"104924","2019-01-17 14:03:35","http://www.antique-carpets.com/PIpK4IlRd/","online","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/104924/"
+"104924","2019-01-17 14:03:35","http://www.antique-carpets.com/PIpK4IlRd/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/104924/"
 "104923","2019-01-17 14:03:08","http://kosardoor.com/PbEu786/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/104923/"
 "104922","2019-01-17 13:58:28","http://www.niteshagrico.com/Amazon/En/Clients_information/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104922/"
 "104921","2019-01-17 13:58:26","http://btrsecurity.co.uk/Amazon/En/Clients/2019-01/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104921/"
 "104920","2019-01-17 13:58:25","http://www.pojbez31.ru/Amazon/EN/Messages/012019/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/104920/"
 "104919","2019-01-17 13:58:24","http://childminding.ie/wp-content/Amazon/En/Payments_details/01_19/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104919/"
 "104918","2019-01-17 13:58:23","http://jeturnbull.com/AMAZON/Clients_transactions/2019-01/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104918/"
-"104917","2019-01-17 13:58:22","http://www.id14.good-gid.ru/Amazon/En/Information/2019-01/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104917/"
-"104916","2019-01-17 13:58:20","http://id14.good-gid.ru/Amazon/En/Information/2019-01/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104916/"
+"104917","2019-01-17 13:58:22","http://www.id14.good-gid.ru/Amazon/En/Information/2019-01/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104917/"
+"104916","2019-01-17 13:58:20","http://id14.good-gid.ru/Amazon/En/Information/2019-01/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104916/"
 "104915","2019-01-17 13:58:19","http://blindzestates.co.uk/Amazon/Transaction_details/012019/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/104915/"
 "104914","2019-01-17 13:58:18","http://ytewporgdy.cf/wp-admin/AMAZON/Information/2019-01/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104914/"
 "104913","2019-01-17 13:58:13","http://yxchczdy.cf/Amazon/En/Transaction_details/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104913/"
 "104912","2019-01-17 13:58:06","http://ldztmdy.cf/wp-admin/Amazon/Orders_details/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104912/"
 "104911","2019-01-17 13:49:03","http://fm.centeredinself.com/index","online","malware_download","gootkit","https://urlhaus.abuse.ch/url/104911/"
-"104910","2019-01-17 13:46:06","http://cccb-dz.org/wp-content/themes/bulk/img/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/104910/"
+"104910","2019-01-17 13:46:06","http://cccb-dz.org/wp-content/themes/bulk/img/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/104910/"
 "104909","2019-01-17 13:45:13","http://wvaljssp.org/wp-content/themes/smartshooterpro/functions/css/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/104909/"
 "104908","2019-01-17 13:45:12","http://wvaljssp.org/wp-content/themes/smartshooterpro/js/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/104908/"
 "104907","2019-01-17 13:45:10","http://myphamhanbok.com/.well-known/acme-challenge/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/104907/"
@@ -898,16 +1038,16 @@
 "104902","2019-01-17 13:44:02","http://www.klussen-gids.nl/xzMPGNb_wYmswEnQ_ugnZr/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/104902/"
 "104901","2019-01-17 13:40:14","http://myphamhanbok.com/wp-includes/ID3/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/104901/"
 "104900","2019-01-17 13:40:06","http://wvaljssp.org/wp-content/themes/smartshooterpro/css/button-image/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/104900/"
-"104899","2019-01-17 13:40:04","http://cccb-dz.org/wp-content/themes/bulk/img/ssj.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/104899/"
+"104899","2019-01-17 13:40:04","http://cccb-dz.org/wp-content/themes/bulk/img/ssj.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/104899/"
 "104898","2019-01-17 13:39:10","http://indigo-office.com/contact/TXBFCQPPIU3525240/GER/DOC/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104898/"
 "104897","2019-01-17 13:39:07","http://yhricjpdy.cf/Januar2019/NVBBHBK9881944/Scan/FORM/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104897/"
 "104896","2019-01-17 13:19:37","http://cloudresemblao.top/kuhl.exe","online","malware_download","DEU,GandCrab,Ransomware,Sandiflux","https://urlhaus.abuse.ch/url/104896/"
 "104895","2019-01-17 13:14:13","http://myphamhanbok.com/wp-content/languages/plugins/ssj.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/104895/"
-"104894","2019-01-17 13:14:04","http://cccb-dz.org/wp-content/themes/bulk/languages/ssj.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/104894/"
+"104894","2019-01-17 13:14:04","http://cccb-dz.org/wp-content/themes/bulk/languages/ssj.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/104894/"
 "104893","2019-01-17 13:10:15","http://wvaljssp.org/wp-content/themes/smartshooterpro/js/ssj.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/104893/"
 "104892","2019-01-17 13:04:15","http://awaken-hda.com/PIKtAm3u/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/104892/"
 "104891","2019-01-17 13:04:13","http://leblogdemimi.theophraste.net/ZJRvNHDg/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/104891/"
-"104890","2019-01-17 13:04:10","http://mabruuk.ridvxn.site/g5hHLoyE3/","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/104890/"
+"104890","2019-01-17 13:04:10","http://mabruuk.ridvxn.site/g5hHLoyE3/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/104890/"
 "104889","2019-01-17 13:04:07","http://staff.pelfberry.com/bNRouz3/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/104889/"
 "104888","2019-01-17 13:04:03","http://deryaabiye.com/LrBN7ad/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/104888/"
 "104887","2019-01-17 12:58:39","http://www.gazenap.ru/DE/XLXPDRQBOE9525605/Bestellungen/Rechnungszahlung/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104887/"
@@ -995,8 +1135,8 @@
 "104805","2019-01-17 10:19:10","http://usmlemasters.com/9pOqELA/","offline","malware_download","emotet,epoch1,exe","https://urlhaus.abuse.ch/url/104805/"
 "104804","2019-01-17 10:18:03","http://nextserv.pl/img/liwx.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/104804/"
 "104803","2019-01-17 10:14:10","http://www.srooooiva.ru/Transaktion/DEZ2018/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104803/"
-"104802","2019-01-17 10:14:09","http://eminencewomensforum.org/Rechnungen/201812/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104802/"
-"104801","2019-01-17 10:14:06","http://xn--90aeb9ae9a.xn--p1ai/Transaktion/DEZ2018/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104801/"
+"104802","2019-01-17 10:14:09","http://eminencewomensforum.org/Rechnungen/201812/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104802/"
+"104801","2019-01-17 10:14:06","http://xn--90aeb9ae9a.xn--p1ai/Transaktion/DEZ2018/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104801/"
 "104800","2019-01-17 10:14:05","http://trottmyworld.ch/Amazon/Attachments/01_19/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104800/"
 "104799","2019-01-17 10:14:03","http://www.euk.lt/Transaktion/201812/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104799/"
 "104798","2019-01-17 10:14:03","http://www.kamprotect.ru/Rechnung/2018/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/104798/"
@@ -1004,7 +1144,7 @@
 "104796","2019-01-17 10:01:01","http://vektorex.com/cgii/don12089.hta","offline","malware_download","Formbook,hta","https://urlhaus.abuse.ch/url/104796/"
 "104795","2019-01-17 09:56:07","http://mithramdirectory.com/temp/tuferwt.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/104795/"
 "104794","2019-01-17 09:45:14","http://k-investigations.com/wp-content/languages/plugins/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/104794/"
-"104793","2019-01-17 09:41:03","http://92.63.197.153/1.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/104793/"
+"104793","2019-01-17 09:41:03","http://92.63.197.153/1.exe","online","malware_download","CoinMiner,exe","https://urlhaus.abuse.ch/url/104793/"
 "104792","2019-01-17 09:29:03","https://froidfond-stejeannedarc.fr/jubajeo.exe","online","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/104792/"
 "104791","2019-01-17 09:19:06","http://tracker-activite.com/wp-content/languages/plugins/ssj.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/104791/"
 "104790","2019-01-17 09:19:03","http://happysunfellbach.com/wp-content/ai1wm-backups/ssj.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/104790/"
@@ -1083,7 +1223,7 @@
 "104717","2019-01-17 07:25:03","https://a.uchi.moe/bidtfb.hta","online","malware_download","hta","https://urlhaus.abuse.ch/url/104717/"
 "104716","2019-01-17 07:23:34","http://www.lineageforum.ru/DE_de/PODMLRTCUW7550065/Rechnungs/RECH/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104716/"
 "104715","2019-01-17 07:23:32","http://fieldscollege.co.za/Amazon/En/Clients/01_19/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/104715/"
-"104714","2019-01-17 07:23:31","http://www.muzikgunlugu.com/De_de/FYCXHTDB3652329/gescanntes-Dokument/DOC-Dokument/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/104714/"
+"104714","2019-01-17 07:23:31","http://www.muzikgunlugu.com/De_de/FYCXHTDB3652329/gescanntes-Dokument/DOC-Dokument/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/104714/"
 "104713","2019-01-17 07:23:30","http://eetstoelbaby.koffie-bekers.nl/AMAZON/Clients_information/012019/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/104713/"
 "104712","2019-01-17 07:23:28","http://ray-beta.com/aPzSt-9mDHW_cX-ju/invoices/79588/11360/US_us/Document-needed/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/104712/"
 "104709","2019-01-17 07:22:56","http://www.us-trans.ru/Amazon/Clients_information/01_19/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/104709/"
@@ -1091,7 +1231,7 @@
 "104696","2019-01-17 07:22:33","http://rentalagreement.aartimkarande.in/KqRy-Eeq_C-Ci/ACH/PaymentAdvice/En/Invoices-attached/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/104696/"
 "104695","2019-01-17 07:22:30","http://wikiprojet.fr/ARXFHCFHPJ6673068/Bestellungen/DOC/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/104695/"
 "104693","2019-01-17 07:22:29","http://modern-autoparts.com/lIIVo-GN_K-MTW/invoices/83990/9270/EN_en/Past-Due-Invoice/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/104693/"
-"104690","2019-01-17 07:22:23","http://www.clubdirectors.tv/De_de/IPRXQNXPPM4929999/DE/DOC/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/104690/"
+"104690","2019-01-17 07:22:23","http://www.clubdirectors.tv/De_de/IPRXQNXPPM4929999/DE/DOC/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/104690/"
 "104689","2019-01-17 07:22:22","http://www.webbs.cl/Januar2019/RNYOSEB6954540/Dokumente/DOC/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/104689/"
 "104688","2019-01-17 07:22:19","http://megatramtg.com/site/cache/ajax_login_form/QONy-f1_mYEYk-dVZ/XC09/invoicing/En_us/Outstanding-Invoices/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/104688/"
 "104687","2019-01-17 07:22:18","http://www.bauburo.ru/LufKe-b4_fXmjuDiHv-viu/Ref/393742266US/Invoice-38700138-January/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/104687/"
@@ -1134,7 +1274,7 @@
 "104644","2019-01-17 06:50:06","http://baskanligagidenyol.com/1iSd7Z8y_h1Ocq_hmfW4vH7L/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/104644/"
 "104643","2019-01-17 06:50:04","http://highclass-store.co/NzDOK_DeMJ9_tU/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/104643/"
 "104642","2019-01-17 06:45:17","http://healthtech.tn/DE_de/FWWBXSDY5884914/de/DETAILS/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104642/"
-"104641","2019-01-17 06:45:12","http://pnneuroeducacao.pt/Januar2019/QTUBNJMA0319791/Rechnungs-Details/RECHNUNG/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104641/"
+"104641","2019-01-17 06:45:12","http://pnneuroeducacao.pt/Januar2019/QTUBNJMA0319791/Rechnungs-Details/RECHNUNG/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104641/"
 "104640","2019-01-17 06:45:07","http://www.akblog.ru/ePug-k85sR_YytAfLR-wB1/EXT/PaymentStatus/EN_en/Sales-Invoice/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104640/"
 "104639","2019-01-17 06:44:26","http://tral24.su/YW50qrlHa/","offline","malware_download","emotet,epoch1,exe","https://urlhaus.abuse.ch/url/104639/"
 "104638","2019-01-17 06:44:24","http://xyzfilamenten.nl/v4h00iq9W/","online","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/104638/"
@@ -1177,7 +1317,7 @@
 "104601","2019-01-17 05:04:10","http://torfsgebroeders.eu/jxvcW-5j7_FfHbDoyE-Zb/INVOICE/En/Document-needed/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/104601/"
 "104599","2019-01-17 05:04:09","http://pojbez31.ru/De_de/HLZWYP1604214/de/RECHNUNG/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/104599/"
 "104600","2019-01-17 05:04:09","http://realistickeportrety.sk/de_DE/HRJFTKZNHQ4922711/gescanntes-Dokument/Zahlung/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104600/"
-"104598","2019-01-17 05:04:08","http://phihungmobile.net/Januar2019/MXSVAX4507556/DE/Rechnungsanschrift/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104598/"
+"104598","2019-01-17 05:04:08","http://phihungmobile.net/Januar2019/MXSVAX4507556/DE/Rechnungsanschrift/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104598/"
 "104597","2019-01-17 05:04:04","http://michelinlearninginstitute.co.za/VtXAX-FUy_P-8H/CG234/invoicing/EN_en/Paid-Invoices/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/104597/"
 "104596","2019-01-17 05:03:11","http://ip-tes.com/Dmyh-mMBJE_NVtzfbHtL-7N/455929/SurveyQuestionsUS/Invoice/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/104596/"
 "104595","2019-01-17 05:03:10","http://glazastiks.ru/BAMXJ-YK_aGuzKvH-8XR/En_us/Companies-Invoice-7729809/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104595/"
@@ -1197,7 +1337,7 @@
 "104581","2019-01-17 03:52:06","https://register.srru.ac.th/Amazon/EN/Transactions-details/2019-01/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104581/"
 "104580","2019-01-17 03:51:11","http://www.midts.com/Amazon/Payments_details/01_19/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104580/"
 "104579","2019-01-17 03:51:10","http://www.drinkdirect.co.uk/AMAZON/Orders_details/01_19/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104579/"
-"104577","2019-01-17 03:51:08","http://shootinstars.in/Amazon/En/Orders_details/01_19/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104577/"
+"104577","2019-01-17 03:51:08","http://shootinstars.in/Amazon/En/Orders_details/01_19/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104577/"
 "104578","2019-01-17 03:51:08","http://themoonplease.com/Amazon/Clients/2019-01/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104578/"
 "104575","2019-01-17 03:51:05","http://mail.bestonlinegames.xyz/Amazon/En/Transactions-details/2019-01/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104575/"
 "104576","2019-01-17 03:51:05","http://pmcorporation.fr/Amazon/Messages/012019/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104576/"
@@ -1221,7 +1361,7 @@
 "104557","2019-01-17 03:22:49","http://excellenceconstructiongroup.com/HmmW-wPY_CSEtTDx-GRs/PaymentStatus/En/Companies-Invoice-31133887/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104557/"
 "104556","2019-01-17 03:22:47","http://tec-auto.org/lbypS-tQ_ZnLTk-yT/Inv/64718210754/US_us/Outstanding-Invoices/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104556/"
 "104555","2019-01-17 03:22:43","http://creationmakessense.com/DE/JWZWILOARB4701143/Rechnungs/Zahlungserinnerung/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104555/"
-"104554","2019-01-17 03:22:41","http://antique-carpets.com/De/LDKQDUHSA3654559/Rech/Zahlungserinnerung/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104554/"
+"104554","2019-01-17 03:22:41","http://antique-carpets.com/De/LDKQDUHSA3654559/Rech/Zahlungserinnerung/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104554/"
 "104553","2019-01-17 03:22:16","http://fissionmailed.com/ogbpT-G5RN_FSWV-upg/ACH/PaymentInfo/US_us/Need-to-send-the-attachment/","offline","malware_download","emotet,epoch2","https://urlhaus.abuse.ch/url/104553/"
 "104552","2019-01-17 03:22:13","http://life-and-spice.com/UQVVCLISH1323826/Rechnungs-docs/FORM/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104552/"
 "104551","2019-01-17 03:22:11","http://rosimpex.net/OQURYVU5178922/Rechnungs/Fakturierung/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104551/"
@@ -1239,7 +1379,7 @@
 "104539","2019-01-17 03:20:13","http://www.pro-ind.ru/assets/Amazon/Documents/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104539/"
 "104538","2019-01-17 03:20:12","http://zhesa.ir/wp-snapshots/Amazon/Clients_transactions/01_19/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/104538/"
 "104537","2019-01-17 03:20:11","http://ayumi.ishiura.org/Amazon/En/Documents/01_19/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104537/"
-"104536","2019-01-17 03:20:06","http://belovedmotherof13.com/Documents/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104536/"
+"104536","2019-01-17 03:20:06","http://belovedmotherof13.com/Documents/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104536/"
 "104535","2019-01-17 02:05:03","http://lignumpolska.com/Amazon/En/Payments/012019/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/104535/"
 "104534","2019-01-17 01:20:05","http://185.26.31.94:54397/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/104534/"
 "104533","2019-01-17 00:08:05","http://distinctiveblog.ir/Amazon/En/Orders-details/01_19/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/104533/"
@@ -1288,7 +1428,7 @@
 "104490","2019-01-16 23:06:52","http://gephesf.pontocritico.org/De/BADMKD6453501/Rechnungs/Rechnungsanschrift/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104490/"
 "104489","2019-01-16 23:06:50","http://house.testmonday.com/Januar2019/WDADHUUPG7241677/Rechnungs-docs/Hilfestellung/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104489/"
 "104488","2019-01-16 23:06:49","http://kcespolska.pl/De/IYBFFEJT3289859/Rechnungs/Zahlung/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104488/"
-"104487","2019-01-16 23:06:48","http://nhakhoavieta.com/iFWJ-bO_buV-aB0/En/New-order/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104487/"
+"104487","2019-01-16 23:06:48","http://nhakhoavieta.com/iFWJ-bO_buV-aB0/En/New-order/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104487/"
 "104486","2019-01-16 23:06:45","http://cms.berichtvoorjou.nl/Ukwuz-ISKJ_ayT-gf/INV/95099FORPO/89237244008/En/317-71-812077-075-317-71-812077-674/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104486/"
 "104485","2019-01-16 23:06:43","http://www.avtotest-taxi.ru/esZlv-bgQ_jeUEA-ok/Southwire/QJT491798084/En_us/Companies-Invoice-1859353/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104485/"
 "104484","2019-01-16 23:06:42","http://www.festivaldescons.fr/XKKtt-8k_YRYOoQpWv-Sw/INVOICE/01359/OVERPAYMENT/En/Overdue-payment/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104484/"
@@ -1319,11 +1459,11 @@
 "104459","2019-01-16 21:39:16","http://migoshen.org/FNE1TVJjI/","online","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/104459/"
 "104458","2019-01-16 21:39:12","http://ftp.dailyignite.club/YNB95t2/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/104458/"
 "104457","2019-01-16 21:39:11","http://economiadigital.biz/NKq5eOZ/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/104457/"
-"104456","2019-01-16 21:39:08","http://samix-num.com/BcFUhvDr/","online","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/104456/"
+"104456","2019-01-16 21:39:08","http://samix-num.com/BcFUhvDr/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/104456/"
 "104455","2019-01-16 21:39:06","https://www.activartcompany.it/Amazon/EN/Information/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104455/"
 "104454","2019-01-16 21:39:05","http://ldrautovation.co.za/Amazon/EN/Attachments/2019-01/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104454/"
 "104453","2019-01-16 21:39:02","http://domswop.worldcupdeals.net/Amazon/En/Transaction_details/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104453/"
-"104452","2019-01-16 21:39:00","http://www.zonnestroomtilburg.nl/Amazon/EN/Orders-details/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104452/"
+"104452","2019-01-16 21:39:00","http://www.zonnestroomtilburg.nl/Amazon/EN/Orders-details/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104452/"
 "104451","2019-01-16 21:38:59","http://www.idgnet.nl/Amazon/En/Transaction_details/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104451/"
 "104450","2019-01-16 21:38:58","http://www.motoruitjes.nl/Amazon/EN/Transactions-details/01_19/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104450/"
 "104449","2019-01-16 21:38:57","http://ero4790k.com/ftwiofrm_ero4460/Amazon/Details/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104449/"
@@ -1340,7 +1480,7 @@
 "104438","2019-01-16 21:38:26","http://www.cop-rudnik.pl/Amazon/En/Attachments/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104438/"
 "104437","2019-01-16 21:38:25","http://truongland.com/Amazon/Clients_Messages/2019-01/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104437/"
 "104436","2019-01-16 21:38:22","http://stionline.com.ve/Amazon/Clients/2019-01/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104436/"
-"104435","2019-01-16 21:38:17","http://smkn.co.id/Amazon/En/Clients_transactions/01_19/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104435/"
+"104435","2019-01-16 21:38:17","http://smkn.co.id/Amazon/En/Clients_transactions/01_19/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104435/"
 "104434","2019-01-16 21:38:15","http://smtp.stepoutforsuccess.ca/Amazon/Attachments/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104434/"
 "104433","2019-01-16 21:38:13","http://find-me-an-english-book.co.uk/Amazon/En/Payments_details/01_19/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/104433/"
 "104432","2019-01-16 21:38:12","http://www.markerom.ru/Amazon/En/Clients/2019-01/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/104432/"
@@ -1393,7 +1533,7 @@
 "104385","2019-01-16 18:29:23","http://sevenempreenda.com.br/Amazon/En/Details/012019/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104385/"
 "104384","2019-01-16 18:29:20","http://register.srru.ac.th/Amazon/EN/Transactions-details/2019-01/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/104384/"
 "104383","2019-01-16 18:29:17","http://projektuvaldymosistema.eu/Amazon/En/Payments/2019-01/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104383/"
-"104382","2019-01-16 18:29:14","http://pe-co.nl/AMAZON/Orders-details/2019-01/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104382/"
+"104382","2019-01-16 18:29:14","http://pe-co.nl/AMAZON/Orders-details/2019-01/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104382/"
 "104380","2019-01-16 18:29:12","http://leodruker.com/Amazon/EN/Transactions/012019/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104380/"
 "104381","2019-01-16 18:29:12","http://nuagelab.com/Amazon/EN/Payments/01_19/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/104381/"
 "104379","2019-01-16 18:29:10","http://guitare-start.fr/Amazon/Messages/2019-01/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104379/"
@@ -1438,7 +1578,7 @@
 "104340","2019-01-16 18:20:36","http://fossbcn.org/forum/cache/ssj.jpg","offline","malware_download","exe,Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/104340/"
 "104339","2019-01-16 18:20:34","http://cheats4gaming.com/bin.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/104339/"
 "104338","2019-01-16 18:20:33","http://a98n98.xyz/endless.exe","offline","malware_download","exe,ImminentRAT,rat","https://urlhaus.abuse.ch/url/104338/"
-"104337","2019-01-16 18:20:31","http://vuonorganic.com/wp-content/themes/voice/images/admin/ssj.jpg","offline","malware_download","exe,Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/104337/"
+"104337","2019-01-16 18:20:31","http://vuonorganic.com/wp-content/themes/voice/images/admin/ssj.jpg","online","malware_download","exe,Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/104337/"
 "104336","2019-01-16 18:20:18","http://www.embrodownscience.su/copyland.png","offline","malware_download","exe","https://urlhaus.abuse.ch/url/104336/"
 "104334","2019-01-16 18:20:16","http://216.170.123.10/download/doss22.exe","online","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/104334/"
 "104335","2019-01-16 18:20:16","http://piratechickvpn.com/release/PirateChickVPNUpdate.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/104335/"
@@ -1461,11 +1601,11 @@
 "104317","2019-01-16 17:29:04","http://45.62.249.171/d/xd.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/104317/"
 "104316","2019-01-16 17:29:03","http://45.62.249.171/d/xd.x86","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/104316/"
 "104315","2019-01-16 17:19:03","http://78.142.29.110/max.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/104315/"
-"104314","2019-01-16 17:00:04","http://liarla.com/xoozT-AEUvv_lMHMJuaT-4Sk/ACH/PaymentInfo/US/Invoice-Number-919134/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104314/"
+"104314","2019-01-16 17:00:04","http://liarla.com/xoozT-AEUvv_lMHMJuaT-4Sk/ACH/PaymentInfo/US/Invoice-Number-919134/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104314/"
 "104313","2019-01-16 16:55:03","http://help.postsupport.net/jiidnatz.png?bg=sp21","offline","malware_download","exe,geofenced,headersfenced,min-headers,qbot,USA","https://urlhaus.abuse.ch/url/104313/"
 "104312","2019-01-16 16:53:36","http://almazart.ru/wzSetZjEe/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/104312/"
 "104311","2019-01-16 16:53:35","http://prakritikkrishi.org/83FMJzuWm/","online","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/104311/"
-"104310","2019-01-16 16:53:30","http://suglafish.com/fC0W6qf/","online","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/104310/"
+"104310","2019-01-16 16:53:30","http://suglafish.com/fC0W6qf/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/104310/"
 "104309","2019-01-16 16:53:28","http://matadorlovol.com/NRY3KXHi4v/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/104309/"
 "104308","2019-01-16 16:53:20","http://www.vincopoker.com/01xNpqw/","online","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/104308/"
 "104307","2019-01-16 16:53:19","http://aserraderoelaleman.com.ar/Amazon/Attachments/01_19/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104307/"
@@ -1485,7 +1625,7 @@
 "104293","2019-01-16 16:47:08","http://kantova.com/xRVVM3r_gsFZOEnE/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/104293/"
 "104292","2019-01-16 16:47:05","http://www.motoruitjes.nl/BrG_4Tb3uEk0N/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/104292/"
 "104291","2019-01-16 16:46:37","http://radwomenbusinessowners.com/pnKAX_FAi9jc/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/104291/"
-"104290","2019-01-16 16:46:32","http://linkingphase.com/Ye09uJm_1TJzK_0/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/104290/"
+"104290","2019-01-16 16:46:32","http://linkingphase.com/Ye09uJm_1TJzK_0/","offline","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/104290/"
 "104289","2019-01-16 16:46:26","http://intraelectronics.com/9CBQqGip_YBdeLeOmn/","online","malware_download","emotet,epoch2,exe,heodo","https://urlhaus.abuse.ch/url/104289/"
 "104288","2019-01-16 16:46:21","http://www.codienlanhnme.vn/wmfuxxu_bf8c_ccJhM/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104288/"
 "104287","2019-01-16 16:46:17","http://modern-autoparts.com/mfn6gSx_fcDqwb8/","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104287/"
@@ -1503,11 +1643,11 @@
 "104274","2019-01-16 15:57:21","http://thebitcoinengine.crownmanagers.com/Amazon/Attachments/01_19/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104274/"
 "104273","2019-01-16 15:57:20","http://sofathugian.vn/Amazon/EN/Payments/012019/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104273/"
 "104272","2019-01-16 15:57:16","http://mail.gigan.id/cgi-bin/Amazon/En/Messages/2019-01/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/104272/"
-"104271","2019-01-16 15:57:14","http://en.tag.ir/Amazon/Clients_transactions/012019/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104271/"
+"104271","2019-01-16 15:57:14","http://en.tag.ir/Amazon/Clients_transactions/012019/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104271/"
 "104270","2019-01-16 15:57:03","http://alkonaft007.top/AMAZON/Details/01_19/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104270/"
 "104269","2019-01-16 15:56:19","http://waggrouponline.org/ApgMh-p5_TVgsoS-t2/En_us/Invoice-33755029/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104269/"
-"104268","2019-01-16 15:56:14","http://tritonwoodworkers.org.au/tbpDh-5E6X_ktcPl-1j/Inv/5972604980/En_us/Invoice-receipt/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104268/"
-"104267","2019-01-16 15:56:10","http://teamphgermany.org/WAtXg-ELk6b_qxGS-Wx/J36/invoicing/En/Open-invoices/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104267/"
+"104268","2019-01-16 15:56:14","http://tritonwoodworkers.org.au/tbpDh-5E6X_ktcPl-1j/Inv/5972604980/En_us/Invoice-receipt/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104268/"
+"104267","2019-01-16 15:56:10","http://teamphgermany.org/WAtXg-ELk6b_qxGS-Wx/J36/invoicing/En/Open-invoices/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104267/"
 "104266","2019-01-16 15:56:08","http://tajiner.com/ZWqP-zWr_rPDfhbnq-lD/ACH/PaymentInfo/US/New-order/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/104266/"
 "104265","2019-01-16 15:56:07","http://songlinhtran.vn/XCGWN-wc1H_pwyJ-Wu/EXT/PaymentStatus/EN_en/Overdue-payment/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104265/"
 "104264","2019-01-16 15:56:04","http://nsktech.fr/cvvWO-7T_Dpa-52/60131/SurveyQuestionsEn_us/Invoice-for-you/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104264/"
@@ -1516,7 +1656,7 @@
 "104261","2019-01-16 15:53:34","http://www.agentfox.io/Amazon/EN/Transactions/01_19/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104261/"
 "104260","2019-01-16 15:53:32","http://turkishlanguagecourse.com/Amazon/Transaction_details/012019/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104260/"
 "104259","2019-01-16 15:53:30","http://topablaze.com/Amazon/En/Clients_Messages/01_19/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104259/"
-"104258","2019-01-16 15:53:29","http://thegablesofyorkcounty.com/AMAZON/Payments_details/01_19/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104258/"
+"104258","2019-01-16 15:53:29","http://thegablesofyorkcounty.com/AMAZON/Payments_details/01_19/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104258/"
 "104257","2019-01-16 15:53:27","http://receive.winss.es/AMAZON/Orders-details/2019-01/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104257/"
 "104256","2019-01-16 15:53:25","http://razmolana.ir/Amazon/En/Payments_details/01_19/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104256/"
 "104255","2019-01-16 15:53:24","http://qualitybeverages.co.za/Amazon/Clients_transactions/012019/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104255/"
@@ -1530,7 +1670,7 @@
 "104247","2019-01-16 15:53:04","http://dekbedbedrukken.koffie-bekers.nl/Amazon/Clients/01_19/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104247/"
 "104246","2019-01-16 15:53:03","http://azimut-volga.com/Amazon/Payments_details/2019-01/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104246/"
 "104245","2019-01-16 15:47:28","http://www.oculista.com.br/XTrf-wwKF_YilnCf-ZO2/US/Overdue-payment/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104245/"
-"104244","2019-01-16 15:47:24","http://sahlkaran.com/JztlU-mv_PNWYyahoK-Mk/InvoiceCodeChanges/En_us/Paid-Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104244/"
+"104244","2019-01-16 15:47:24","http://sahlkaran.com/JztlU-mv_PNWYyahoK-Mk/InvoiceCodeChanges/En_us/Paid-Invoice/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104244/"
 "104243","2019-01-16 15:47:22","http://mufakkir.com/HvfI-F8Qxb_pTMhJMLJA-hG/Ref/249401426US/Invoice-24326442/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/104243/"
 "104242","2019-01-16 15:47:20","http://modalook.com.tr/cSsTJ-U4uG_oRVOUK-ACD/Ref/6260533274En_us/Invoice/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104242/"
 "104241","2019-01-16 15:47:17","http://lokanou.webinview.com/deCxr-jH5_cCmSmiG-xr/INVOICE/US/Service-Report-0658/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/104241/"
@@ -1607,7 +1747,7 @@
 "104165","2019-01-16 13:31:07","http://www.cnim.mx/v1/plugins/media/GetDataAVK.exe","online","malware_download","exe,Perseus","https://urlhaus.abuse.ch/url/104165/"
 "104163","2019-01-16 13:00:28","http://bluepalm.tech/Amazon/En/Payments_details/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104163/"
 "104162","2019-01-16 13:00:25","http://voldprotekt.com/Amazon/EN/Information/01_19/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104162/"
-"104161","2019-01-16 13:00:24","http://leonardokubrick.com/Amazon/Orders-details/012019/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104161/"
+"104161","2019-01-16 13:00:24","http://leonardokubrick.com/Amazon/Orders-details/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104161/"
 "104160","2019-01-16 13:00:22","http://jameshunt.org/Rechnung/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104160/"
 "104159","2019-01-16 13:00:21","http://casetime.org/Rechnungs/01_19/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104159/"
 "104158","2019-01-16 13:00:17","http://xn--80apaabfhzk7a5ck.xn--p1ai/Rechnung/01_19/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/104158/"
@@ -1689,7 +1829,7 @@
 "104082","2019-01-16 11:35:04","http://fribola.com/tjb189/jsmk1401.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/104082/"
 "104081","2019-01-16 11:08:04","http://michiganmastereltiempo.com/wp-content/themes/bizworx/images/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/104081/"
 "104080","2019-01-16 11:01:05","http://derrysmith.5gbfree.com/man.exe","online","malware_download","exe,nanobot","https://urlhaus.abuse.ch/url/104080/"
-"104079","2019-01-16 10:33:06","http://saintjohnscba.com.ar/Januar2019/DFTPHAQLL6932712/de/RECH/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/104079/"
+"104079","2019-01-16 10:33:06","http://saintjohnscba.com.ar/Januar2019/DFTPHAQLL6932712/de/RECH/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/104079/"
 "104078","2019-01-16 10:28:28","http://a46.bulehero.in/docropool.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/104078/"
 "104077","2019-01-16 10:14:03","http://dw.convertfiles.com/files/0321124001547570957/ups-delivery-notification-1z074y0a0390613255_2019-01-15_19-44%281%29.zip?&rpsnv=83fdc3407ccf68718bfb9aaddefa7cc0e40529db","offline","malware_download","AZORult,zipped-exe","https://urlhaus.abuse.ch/url/104077/"
 "104076","2019-01-16 10:07:04","http://binderkvasa.ru/binderkvasa.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/104076/"
@@ -1819,7 +1959,7 @@
 "103950","2019-01-16 05:15:17","http://www.solusiobatherbal.com/De/LTCYKBNJE5969176/Rechnungs-Details/Rechnungsanschrift/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103950/"
 "103949","2019-01-16 05:15:15","http://www.soloftp.com/HDIFV-71Q_qV-YR/I352/invoicing/US_us/Service-Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103949/"
 "103948","2019-01-16 05:15:14","http://www.seslibiri.com/ujTD-spb15_yKXq-tc/INVOICE/6943/OVERPAYMENT/En/Invoice-79269863-January/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103948/"
-"103947","2019-01-16 05:15:06","http://www.mother-earth.net/SlHp-fmGN_mRr-xC/INV/084073FORPO/57754571425/US/Document-needed/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103947/"
+"103947","2019-01-16 05:15:06","http://www.mother-earth.net/SlHp-fmGN_mRr-xC/INV/084073FORPO/57754571425/US/Document-needed/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103947/"
 "103946","2019-01-16 05:15:03","http://www.ip-tes.com/Dmyh-mMBJE_NVtzfbHtL-7N/455929/SurveyQuestionsUS/Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103946/"
 "103945","2019-01-16 05:15:01","http://www.gonulyayincilik.com/AXEpi-T2s1_FYIx-vv/INV/401997FORPO/5187711320/EN_en/Paid-Invoice/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/103945/"
 "103944","2019-01-16 05:15:00","http://www.glazastiks.ru/BAMXJ-YK_aGuzKvH-8XR/En_us/Companies-Invoice-7729809/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103944/"
@@ -1828,7 +1968,7 @@
 "103941","2019-01-16 05:14:54","http://www.etsybizthai.com/jdiZz-L86x_mPzcmNAF-TNJ/ACH/PaymentAdvice/US_us/Inv-12441-PO-8C586861/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103941/"
 "103940","2019-01-16 05:14:49","http://www.cognitiontraining.com/NCwUm-Mc_JxlgmtFSf-FK/INVOICE/US_us/Sales-Invoice/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103940/"
 "103939","2019-01-16 05:14:48","http://www.citygroupkw.net/Januar2019/INFPPXH9980256/gescanntes-Dokument/Zahlungserinnerung/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103939/"
-"103938","2019-01-16 05:14:45","http://www.antique-carpets.com/De/LDKQDUHSA3654559/Rech/Zahlungserinnerung/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103938/"
+"103938","2019-01-16 05:14:45","http://www.antique-carpets.com/De/LDKQDUHSA3654559/Rech/Zahlungserinnerung/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103938/"
 "103937","2019-01-16 05:14:42","http://www.3dyazicimarket.com.tr/mJAog-5QA5_bMeo-wDQ/PaymentStatus/En_us/Companies-Invoice-3933304/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103937/"
 "103936","2019-01-16 05:14:40","http://weresolve.ca/gQce-5d_fcmkOlhM-IJw/U970/invoicing/US/Need-to-send-the-attachment/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103936/"
 "103935","2019-01-16 05:14:39","http://universobolao.com.br/HpZjv-4CQ_LXBEP-SmH/8246620/SurveyQuestionsEn_us/Invoice/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103935/"
@@ -1856,7 +1996,7 @@
 "103913","2019-01-16 05:13:25","http://lassmeder-service.com/BYTVPDJGYA8152756/Bestellungen/RECH/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103913/"
 "103912","2019-01-16 05:13:24","http://kuhniviva.ru/SDVn-8B_M-Mjo/282349/SurveyQuestionsEN_en/Service-Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103912/"
 "103911","2019-01-16 05:13:23","http://justfinancial.info/QRhq-OHs_vfSbM-iQ/INVOICE/EN_en/Need-to-send-the-attachment/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/103911/"
-"103910","2019-01-16 05:13:21","http://isikbahce.com/sHKfq-PQ_iSVlaWS-b3h/08335/SurveyQuestionsEN_en/Invoice-42509324/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103910/"
+"103910","2019-01-16 05:13:21","http://isikbahce.com/sHKfq-PQ_iSVlaWS-b3h/08335/SurveyQuestionsEN_en/Invoice-42509324/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103910/"
 "103909","2019-01-16 05:13:20","http://hitechlink.com.vn/tmp/yUdX-ooV1T_REegxoY-vkh/Inv/305874329/En_us/Past-Due-Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103909/"
 "103907","2019-01-16 05:13:15","http://greenplastic.com/IlKI-qNW_GeAqCj-L7Q/En/Inv-35271-PO-2G659605/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103907/"
 "103908","2019-01-16 05:13:15","http://hampaweb.com/WRodk-2m_qgTtrkjUi-u58/ACH/PaymentAdvice/En_us/Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103908/"
@@ -1892,7 +2032,7 @@
 "103877","2019-01-16 04:40:04","http://supportwip.com/sharppay/gasby.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/103877/"
 "103876","2019-01-16 04:40:03","http://supportwip.com/fdghfj/sureboy.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/103876/"
 "103875","2019-01-16 04:33:03","http://supportwip.com/fajaymoney/fajey.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/103875/"
-"103874","2019-01-16 03:54:06","http://1.52.84.2:31047/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/103874/"
+"103874","2019-01-16 03:54:06","http://1.52.84.2:31047/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/103874/"
 "103873","2019-01-16 03:18:02","http://down.qm188.com/demo/MyDemo.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/103873/"
 "103872","2019-01-16 03:17:03","http://down.qm188.com/ext/Setup_tbss.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/103872/"
 "103871","2019-01-16 03:16:05","http://5.201.130.81:34903/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/103871/"
@@ -1956,11 +2096,11 @@
 "103813","2019-01-15 23:38:11","http://arteelectronics.cl/GHeSA-uX_sxXfeeo-Cf/PaymentStatus/US/Important-Please-Read/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103813/"
 "103812","2019-01-15 23:38:09","http://www.textilessudamericanos.com/Documents/2019-01/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/103812/"
 "103811","2019-01-15 23:38:08","http://www.customs1.ru/Transactions/01_19/","offline","malware_download","doc,emotet,epoch1","https://urlhaus.abuse.ch/url/103811/"
-"103810","2019-01-15 23:38:06","http://www.belovedmotherof13.com/Documents/012019/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/103810/"
+"103810","2019-01-15 23:38:06","http://www.belovedmotherof13.com/Documents/012019/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/103810/"
 "103809","2019-01-15 23:38:03","http://mail.mfj222.co.za/Documents/012019/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/103809/"
 "103808","2019-01-15 23:37:09","http://hjsanders.nl/Transactions/2019-01/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/103808/"
 "103807","2019-01-15 23:37:08","http://gisa.company/Information/2019-01/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/103807/"
-"103806","2019-01-15 23:37:03","http://aprendercomputacion.com/Clients_Messages/01_19/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/103806/"
+"103806","2019-01-15 23:37:03","http://aprendercomputacion.com/Clients_Messages/01_19/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/103806/"
 "103805","2019-01-15 22:39:05","http://flowers.destructiontrains.host/b4c4699b939766b2580e03cc5734c97657ba4a5e178d5974f6d36b02881fb00dbf3ded.ren","offline","malware_download","exe","https://urlhaus.abuse.ch/url/103805/"
 "103804","2019-01-15 22:06:46","http://garopin-r-01.com/aUUf1TKh/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/103804/"
 "103803","2019-01-15 22:06:43","http://timgiamgia.site/P7p4eo54QB/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/103803/"
@@ -2051,7 +2191,7 @@
 "103718","2019-01-15 18:50:03","http://www.forma-31.ru/x9w0Q_aJ9eUDi_0/","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/103718/"
 "103717","2019-01-15 18:48:38","http://www.ori-motivator.ru/zRxM-ysT2_uDDPAfjn-rb/InvoiceCodeChanges/En_us/Companies-Invoice-34834023/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103717/"
 "103716","2019-01-15 18:48:36","http://hotellakeparadise.com.np/Details/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/103716/"
-"103715","2019-01-15 18:48:35","http://firstclassedu.com.ng/Payment_details/2019-01/","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/103715/"
+"103715","2019-01-15 18:48:35","http://firstclassedu.com.ng/Payment_details/2019-01/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/103715/"
 "103714","2019-01-15 18:48:32","http://www.shopping24horas.com.br/Information/01_19/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/103714/"
 "103713","2019-01-15 18:48:26","http://yarri-mebel.ru/Information/01_19/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/103713/"
 "103712","2019-01-15 18:48:25","http://ra-services.fr/Messages/012019/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/103712/"
@@ -2121,7 +2261,7 @@
 "103643","2019-01-15 15:08:23","http://lemurapparel.cl/log/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/103643/"
 "103642","2019-01-15 15:08:07","http://jpatela.pt/TurkishAirlines.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/103642/"
 "103641","2019-01-15 15:07:37","http://skdjgfbsdkjbfns3423.ru/14/bb_Protected.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/103641/"
-"103640","2019-01-15 15:07:24","http://organicfs.com/wp-admin/css/colors/blue/ssj.jpg","offline","malware_download","exe,Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/103640/"
+"103640","2019-01-15 15:07:24","http://organicfs.com/wp-admin/css/colors/blue/ssj.jpg","online","malware_download","exe,Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/103640/"
 "103639","2019-01-15 15:07:11","https://christolandcompany.com/nil/simple.exe","offline","malware_download","exe,rat,remcos,RemcosRAT","https://urlhaus.abuse.ch/url/103639/"
 "103638","2019-01-15 15:07:06","https://christolandcompany.com/nil/8U.exe","offline","malware_download","exe,rat,remcos,RemcosRAT","https://urlhaus.abuse.ch/url/103638/"
 "103637","2019-01-15 15:06:08","https://webknives.com/wp-content/themes/CherryFramework/js/ssj.jpg","online","malware_download","exe,Ransomware,Shade,Troldesh","https://urlhaus.abuse.ch/url/103637/"
@@ -2193,11 +2333,11 @@
 "103571","2019-01-15 14:04:08","http://www.ukmc.lt/Attachments/01_19/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/103571/"
 "103570","2019-01-15 14:04:06","http://somov-igor.ru/Clients_information/01_19/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/103570/"
 "103569","2019-01-15 14:04:04","http://www.unitepro.mx/PyZTGc_yPRX0x_ik0aFT/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/103569/"
-"103568","2019-01-15 13:56:15","http://variantmag.com/mail/data/_data_/_default_/cache/__/ed/it/editor_variantmag_com/0b/99/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/103568/"
-"103567","2019-01-15 13:56:10","http://variantmag.com/wp-admin/css/colors/blue/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/103567/"
-"103566","2019-01-15 13:54:11","http://variantmag.com/wp-admin/css/colors/blue/zinf.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/103566/"
+"103568","2019-01-15 13:56:15","http://variantmag.com/mail/data/_data_/_default_/cache/__/ed/it/editor_variantmag_com/0b/99/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/103568/"
+"103567","2019-01-15 13:56:10","http://variantmag.com/wp-admin/css/colors/blue/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/103567/"
+"103566","2019-01-15 13:54:11","http://variantmag.com/wp-admin/css/colors/blue/zinf.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/103566/"
 "103565","2019-01-15 13:54:08","http://mcjm.me/legacy/legacy.exe","online","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/103565/"
-"103564","2019-01-15 13:54:05","http://variantmag.com/.well-known/acme-challenge/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/103564/"
+"103564","2019-01-15 13:54:05","http://variantmag.com/.well-known/acme-challenge/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/103564/"
 "103563","2019-01-15 13:39:05","https://www.braecarautos.com/Payment-Confirmation.exe.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/103563/"
 "103562","2019-01-15 13:38:22","http://ssmmbed.com/wp-content/themes/betheme/bbpress/ssj.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/103562/"
 "103561","2019-01-15 13:38:16","http://despa.com.tr/templates/rt_ximenia_responsive/css-compiled/ssj.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/103561/"
@@ -2530,7 +2670,7 @@
 "103234","2019-01-14 20:39:58","http://www.cbhrmf.com.br/Attachments/01_19/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/103234/"
 "103233","2019-01-14 20:39:27","http://www.iain-padangsidimpuan.ac.id/Payment_details/2019-01/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/103233/"
 "103232","2019-01-14 20:39:25","http://www.niman.ru/earD-Ncxsu_AzUmQINO-nSN/ACH/PaymentAdvice/En/Past-Due-Invoices/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/103232/"
-"103231","2019-01-14 20:39:24","http://www.array.com.ua/FRoNw-kdNa_IxRxGQo-ywP/ACH/PaymentAdvice/US/Overdue-payment/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/103231/"
+"103231","2019-01-14 20:39:24","http://www.array.com.ua/FRoNw-kdNa_IxRxGQo-ywP/ACH/PaymentAdvice/US/Overdue-payment/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/103231/"
 "103230","2019-01-14 20:39:23","http://www.standart-uk.ru/rRNb-SmEXz_c-b0F/40041/SurveyQuestionsUS_us/Scan/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/103230/"
 "103229","2019-01-14 20:39:22","http://www.topsource-usa.com/Gmvve-2qQ_eveG-K7/Inv/6724760599/EN_en/Invoice-1239077/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/103229/"
 "103228","2019-01-14 20:39:20","http://www.musthavecats.com/Clients/012019/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/103228/"
@@ -2740,7 +2880,7 @@
 "103018","2019-01-14 14:45:35","http://djeffares.com/Januar2019/TIEOBPUVLE8758156/Scan/RECH/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/103018/"
 "103017","2019-01-14 14:45:05","http://barbudabier.com/ijJip-0G9j_TwEgpcjg-kU/INVOICE/US_us/Inv-327813-PO-7J433604/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103017/"
 "103016","2019-01-14 14:27:29","http://vanminhhotel.com/wp-content/themes/olympusinn/css/_inc/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/103016/"
-"103015","2019-01-14 14:27:15","https://pixelguru.info/wp-content/themes/oshin/ReduxFramework/ReduxCore/assets/css/color-picker/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/103015/"
+"103015","2019-01-14 14:27:15","https://pixelguru.info/wp-content/themes/oshin/ReduxFramework/ReduxCore/assets/css/color-picker/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/103015/"
 "103014","2019-01-14 14:27:10","https://metalstocktrade.com/wp-content/themes/business-kit/template-parts/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/103014/"
 "103013","2019-01-14 14:27:06","http://pusong.id/DE/DPEHYNZA3981886/Rechnungs-Details/Fakturierung/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/103013/"
 "103011","2019-01-14 13:59:06","http://mervenurkaya.com/EZDPQBME2910489/Rechnungskorrektur/Zahlungserinnerung/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/103011/"
@@ -2765,7 +2905,7 @@
 "102992","2019-01-14 13:12:15","http://facingnorthdigital.com/wp-content/themes/mesmerize/inc/general-options/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102992/"
 "102991","2019-01-14 13:12:03","http://upgulf.net/EXPL0RER.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102991/"
 "102990","2019-01-14 13:09:31","http://info.corp.zergaphonetronic.org/CpmwPnsXZL.php","offline","malware_download","AUS,DanaBot,exe,geofenced,headersfenced,Sandiflux","https://urlhaus.abuse.ch/url/102990/"
-"102989","2019-01-14 12:54:09","https://pixelguru.info/wp-content/themes/oshin/ReduxFramework/ReduxCore/assets/css/color-picker/ssj.jpg","offline","malware_download","exe,Shade","https://urlhaus.abuse.ch/url/102989/"
+"102989","2019-01-14 12:54:09","https://pixelguru.info/wp-content/themes/oshin/ReduxFramework/ReduxCore/assets/css/color-picker/ssj.jpg","online","malware_download","exe,Shade","https://urlhaus.abuse.ch/url/102989/"
 "102988","2019-01-14 12:54:05","http://mymercedesdirect.com/wp-content/themes/twentyseventeen/assets/css/ssj.jpg","online","malware_download","exe,Shade","https://urlhaus.abuse.ch/url/102988/"
 "102987","2019-01-14 12:54:03","https://metalstocktrade.com/wp-content/themes/business-kit/template-parts/ssj.jpg","offline","malware_download","exe,Shade","https://urlhaus.abuse.ch/url/102987/"
 "102986","2019-01-14 12:31:03","https://a.uchi.moe/dhlngo.jpg","online","malware_download","exe,NanoCore","https://urlhaus.abuse.ch/url/102986/"
@@ -2828,15 +2968,15 @@
 "102927","2019-01-14 10:52:03","http://lucaguarnieridesign.com/docs/WMr_mg9Cl_lB0bmBz8/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/102927/"
 "102926","2019-01-14 10:51:05","http://mytripland.com/.well-known/pki-validation/ssj.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102926/"
 "102925","2019-01-14 10:51:03","http://techvast-it.com/wp-admin/css/colors/blue/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102925/"
-"102924","2019-01-14 10:49:03","http://eastcampmarketing.iamdevawesome.com/wp-admin/css/colors/blue/ssj.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/102924/"
+"102924","2019-01-14 10:49:03","http://eastcampmarketing.iamdevawesome.com/wp-admin/css/colors/blue/ssj.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102924/"
 "102923","2019-01-14 10:41:26","http://trustrambusinesssolutions.com/mypanel/application/cache/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102923/"
 "102922","2019-01-14 10:41:12","http://cloudtech24.site/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102922/"
 "102921","2019-01-14 10:35:03","https://tamxgroup.co.uk/Cred_Adv043H3287.jar","offline","malware_download","Qealler,rat","https://urlhaus.abuse.ch/url/102921/"
 "102920","2019-01-14 10:33:05","http://tixon.website/0/32065871.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102920/"
 "102919","2019-01-14 10:16:33","http://nongsananhnguyen.com/templates/joomlage/elements/js/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102919/"
-"102918","2019-01-14 10:15:35","http://lotto-generator.jerryboy.com/css/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/102918/"
+"102918","2019-01-14 10:15:35","http://lotto-generator.jerryboy.com/css/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102918/"
 "102917","2019-01-14 10:15:23","http://cloudtech24.site/ssj.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102917/"
-"102916","2019-01-14 10:15:12","http://eastcampmarketing.iamdevawesome.com/wp-admin/css/colors/blue/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/102916/"
+"102916","2019-01-14 10:15:12","http://eastcampmarketing.iamdevawesome.com/wp-admin/css/colors/blue/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102916/"
 "102915","2019-01-14 10:13:33","http://mytripland.com/.well-known/pki-validation/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102915/"
 "102914","2019-01-14 10:13:24","http://giamcansieunhanh.com/wp-content/languages/plugins/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/102914/"
 "102913","2019-01-14 10:13:12","http://daskruelhaus.com/wp-content/themes/Divi/lang/ssj.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102913/"
@@ -2852,19 +2992,19 @@
 "102903","2019-01-14 09:15:04","http://fribola.com/st/loadsmk0901.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/102903/"
 "102902","2019-01-14 09:15:03","http://fribola.com/alias0801/loadsmk0801.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/102902/"
 "102901","2019-01-14 09:15:02","http://fribola.com/1201neljs/1201smk.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/102901/"
-"102900","2019-01-14 09:14:07","http://108.174.198.173/mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/102900/"
-"102899","2019-01-14 09:14:05","http://108.174.198.173/m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/102899/"
-"102898","2019-01-14 09:14:04","http://108.174.198.173/i586","online","malware_download","elf","https://urlhaus.abuse.ch/url/102898/"
-"102897","2019-01-14 09:14:02","http://108.174.198.173/armv6l","online","malware_download","elf","https://urlhaus.abuse.ch/url/102897/"
-"102896","2019-01-14 09:12:08","http://108.174.198.173/mipsel","online","malware_download","elf","https://urlhaus.abuse.ch/url/102896/"
-"102895","2019-01-14 09:12:06","http://108.174.198.173/i686","online","malware_download","elf","https://urlhaus.abuse.ch/url/102895/"
-"102894","2019-01-14 09:12:05","http://108.174.198.173/sparc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102894/"
-"102893","2019-01-14 09:12:03","http://108.174.198.173/sh4","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102893/"
-"102892","2019-01-14 09:11:07","http://108.174.198.173/armv5l","online","malware_download","elf","https://urlhaus.abuse.ch/url/102892/"
-"102891","2019-01-14 09:11:06","http://108.174.198.173/x86","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102891/"
-"102890","2019-01-14 09:11:04","http://108.174.198.173/armv7l","online","malware_download","elf","https://urlhaus.abuse.ch/url/102890/"
-"102889","2019-01-14 09:11:03","http://108.174.198.173/armv4l","online","malware_download","elf","https://urlhaus.abuse.ch/url/102889/"
-"102888","2019-01-14 09:10:04","http://108.174.198.173/powerpc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102888/"
+"102900","2019-01-14 09:14:07","http://108.174.198.173/mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/102900/"
+"102899","2019-01-14 09:14:05","http://108.174.198.173/m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/102899/"
+"102898","2019-01-14 09:14:04","http://108.174.198.173/i586","offline","malware_download","elf","https://urlhaus.abuse.ch/url/102898/"
+"102897","2019-01-14 09:14:02","http://108.174.198.173/armv6l","offline","malware_download","elf","https://urlhaus.abuse.ch/url/102897/"
+"102896","2019-01-14 09:12:08","http://108.174.198.173/mipsel","offline","malware_download","elf","https://urlhaus.abuse.ch/url/102896/"
+"102895","2019-01-14 09:12:06","http://108.174.198.173/i686","offline","malware_download","elf","https://urlhaus.abuse.ch/url/102895/"
+"102894","2019-01-14 09:12:05","http://108.174.198.173/sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102894/"
+"102893","2019-01-14 09:12:03","http://108.174.198.173/sh4","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102893/"
+"102892","2019-01-14 09:11:07","http://108.174.198.173/armv5l","offline","malware_download","elf","https://urlhaus.abuse.ch/url/102892/"
+"102891","2019-01-14 09:11:06","http://108.174.198.173/x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102891/"
+"102890","2019-01-14 09:11:04","http://108.174.198.173/armv7l","offline","malware_download","elf","https://urlhaus.abuse.ch/url/102890/"
+"102889","2019-01-14 09:11:03","http://108.174.198.173/armv4l","offline","malware_download","elf","https://urlhaus.abuse.ch/url/102889/"
+"102888","2019-01-14 09:10:04","http://108.174.198.173/powerpc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102888/"
 "102887","2019-01-14 09:04:04","https://a.uchi.moe/evpdnx.jpg","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/102887/"
 "102886","2019-01-14 09:04:03","http://fribola.com/st/load1101.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/102886/"
 "102885","2019-01-14 09:04:02","http://fribola.com/ksmoke09/ksmk0901.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/102885/"
@@ -3142,7 +3282,7 @@
 "102611","2019-01-12 07:08:04","http://104.248.133.115/bins/unstable.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102611/"
 "102610","2019-01-12 07:08:03","http://142.11.222.125/bins/slav.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102610/"
 "102609","2019-01-12 07:07:02","http://185.52.2.31/Demon.x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102609/"
-"102608","2019-01-12 06:44:03","http://180.76.114.169:8081/Stsz.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102608/"
+"102608","2019-01-12 06:44:03","http://180.76.114.169:8081/Stsz.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/102608/"
 "102607","2019-01-12 06:30:29","http://hezi.91danji.com/baobao/doyo_setup_3074_s.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/102607/"
 "102606","2019-01-12 05:51:10","http://telemagistralinc.info/instadoc/liter.exe","offline","malware_download","smokeloader","https://urlhaus.abuse.ch/url/102606/"
 "102605","2019-01-12 05:51:06","http://philipmro.tk/locales/en/trust.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/102605/"
@@ -3285,9 +3425,9 @@
 "102468","2019-01-11 08:02:06","http://46.8.209.105/mips","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102468/"
 "102467","2019-01-11 08:02:03","http://68.183.116.141/bins/skeet.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102467/"
 "102466","2019-01-11 08:02:02","http://178.128.199.100/bins/hoho.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102466/"
-"102465","2019-01-11 08:01:04","http://185.244.25.221/Yowai.x86","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102465/"
+"102465","2019-01-11 08:01:04","http://185.244.25.221/Yowai.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102465/"
 "102464","2019-01-11 08:01:03","http://199.38.243.9/bins/yakuza.arm7","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102464/"
-"102463","2019-01-11 07:59:04","http://185.244.25.145/bins/Yowai.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102463/"
+"102463","2019-01-11 07:59:04","http://185.244.25.145/bins/Yowai.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102463/"
 "102462","2019-01-11 07:59:03","http://185.244.25.221/bins/Yowai.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102462/"
 "102461","2019-01-11 07:58:03","http://68.183.116.141/bins/skeet.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102461/"
 "102460","2019-01-11 07:44:44","https://paragptfe.com/spo/huaa.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102460/"
@@ -3309,7 +3449,7 @@
 "102444","2019-01-11 07:33:05","https://paragptfe.com/spo/144602079.jpg","offline","malware_download","AZORult,exe,Loki","https://urlhaus.abuse.ch/url/102444/"
 "102443","2019-01-11 07:19:03","http://185.172.110.213/oops.arm4tl","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102443/"
 "102442","2019-01-11 07:19:02","http://185.244.25.145/bins/Yowai.mips","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102442/"
-"102441","2019-01-11 07:18:04","http://185.244.25.221/bins/Yowai.arm5","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102441/"
+"102441","2019-01-11 07:18:04","http://185.244.25.221/bins/Yowai.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102441/"
 "102440","2019-01-11 07:18:03","http://68.183.116.141/bins/skeet.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102440/"
 "102439","2019-01-11 07:18:02","http://178.128.199.100/bins/hoho.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/102439/"
 "102438","2019-01-11 07:16:04","http://185.244.25.145/bins/Yowai.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102438/"
@@ -3333,7 +3473,7 @@
 "102420","2019-01-11 07:10:04","http://178.128.152.57/hellc.arm6","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102420/"
 "102419","2019-01-11 07:10:03","http://178.128.152.57/hellc.sparc","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102419/"
 "102418","2019-01-11 07:08:08","http://185.172.110.213/oops.arm4l","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102418/"
-"102417","2019-01-11 07:08:06","http://185.244.25.221/bins/Yowai.x86","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102417/"
+"102417","2019-01-11 07:08:06","http://185.244.25.221/bins/Yowai.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102417/"
 "102416","2019-01-11 07:08:04","http://185.244.25.145/bins/Yowai.arm6","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102416/"
 "102415","2019-01-11 07:08:03","http://178.128.199.100/bins/hoho.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102415/"
 "102414","2019-01-11 07:07:07","http://185.244.25.221/bins/Yowai.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102414/"
@@ -3342,14 +3482,14 @@
 "102411","2019-01-11 07:06:12","http://68.183.116.141/bins/skeet.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102411/"
 "102410","2019-01-11 07:06:10","http://167.99.164.140/Demon.ppc","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102410/"
 "102409","2019-01-11 07:06:07","http://46.8.209.105/sparc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102409/"
-"102408","2019-01-11 07:06:04","http://185.244.25.221/bins/Yowai.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102408/"
+"102408","2019-01-11 07:06:04","http://185.244.25.221/bins/Yowai.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102408/"
 "102407","2019-01-11 07:05:12","http://178.128.152.57/hellc.x86","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102407/"
 "102406","2019-01-11 07:05:09","http://167.99.164.140/Demon.mips","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102406/"
 "102405","2019-01-11 07:05:07","http://185.244.25.145/bins/Yowai.arm7","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102405/"
 "102404","2019-01-11 07:05:05","http://178.128.152.57/hellc.mpsl","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102404/"
 "102403","2019-01-11 07:04:09","http://clhgoody.xyz/seo.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102403/"
 "102402","2019-01-11 07:03:08","http://185.172.110.213/oops.mpsl","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102402/"
-"102401","2019-01-11 07:03:05","http://185.244.25.221/bins/Yowai.arm6","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102401/"
+"102401","2019-01-11 07:03:05","http://185.244.25.221/bins/Yowai.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102401/"
 "102400","2019-01-11 07:02:07","https://shipmentoutdoorstepup.xyz/usa/456ETED.png","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102400/"
 "102399","2019-01-11 07:02:05","http://167.99.164.140/Demon.arm7","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102399/"
 "102398","2019-01-11 07:02:03","http://68.183.116.141/bins/skeet.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102398/"
@@ -3400,7 +3540,7 @@
 "102353","2019-01-11 00:37:02","http://185.244.25.166/wkomqp","offline","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/102353/"
 "102352","2019-01-11 00:35:14","http://185.244.25.233/AB4g5/Josho.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102352/"
 "102351","2019-01-11 00:35:13","http://185.244.25.233/AB4g5/Josho.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102351/"
-"102350","2019-01-11 00:35:12","http://49.205.99.62:62115/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/102350/"
+"102350","2019-01-11 00:35:12","http://49.205.99.62:62115/.i","offline","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/102350/"
 "102349","2019-01-11 00:35:04","http://185.244.25.233/AB4g5/Josho.x86","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102349/"
 "102348","2019-01-11 00:34:12","http://185.244.25.233/AB4g5/Josho.mips","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102348/"
 "102347","2019-01-11 00:34:08","http://185.244.25.233/AB4g5/Josho.ppc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/102347/"
@@ -3680,7 +3820,7 @@
 "102073","2019-01-08 23:24:13","https://doc-0o-8s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/srihiu23tf7072quthb60pqvar7ig1mm/1546984800000/07335649321361492730/*/1RuqxRG33ctyYvknAmkQZNNNTu05l-5ha?edownloadxa0","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102073/"
 "102072","2019-01-08 22:37:04","https://doc-0o-8s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/srihiu23tf7072quthb60pqvar7ig1mm/1546984800000/07335649321361492730/*/1RuqxRG33ctyYvknAmkQZNNNTu05l-5ha?e=download","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102072/"
 "102071","2019-01-08 21:03:07","http://173.27.128.198:20278/.i","online","malware_download","elf,hajime","https://urlhaus.abuse.ch/url/102071/"
-"102070","2019-01-08 20:19:06","https://top5roachkillers.com/Alg.jpg","online","malware_download","exe,NetWire","https://urlhaus.abuse.ch/url/102070/"
+"102070","2019-01-08 20:19:06","https://top5roachkillers.com/Alg.jpg","offline","malware_download","exe,NetWire","https://urlhaus.abuse.ch/url/102070/"
 "102069","2019-01-08 20:19:03","https://top5roachkillers.com/svchost.jpg","offline","malware_download","exe,NetWire","https://urlhaus.abuse.ch/url/102069/"
 "102068","2019-01-08 20:11:05","https://doc-0o-8s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/av6796esbdujr5hsbb807bl9f33fisvr/1546970400000/07335649321361492730/*/1RuqxRG33ctyYvknAmkQZNNNTu05l-5ha?e=download","offline","malware_download","exe","https://urlhaus.abuse.ch/url/102068/"
 "102067","2019-01-08 19:42:04","https://top5roachkillers.com/svchosts.jpg","offline","malware_download","exe,NetWire,rat","https://urlhaus.abuse.ch/url/102067/"
@@ -3791,18 +3931,18 @@
 "101962","2019-01-07 20:09:03","http://loveisyou.sytes.net/uploads/modules/rofl.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/101962/"
 "101961","2019-01-07 20:05:02","http://167.99.224.50/bins/kalon.x86","offline","malware_download","None","https://urlhaus.abuse.ch/url/101961/"
 "101960","2019-01-07 19:45:05","http://78.142.29.110/b.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/101960/"
-"101959","2019-01-07 19:07:03","http://185.244.25.174/bins/hoho.arm","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101959/"
+"101959","2019-01-07 19:07:03","http://185.244.25.174/bins/hoho.arm","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101959/"
 "101958","2019-01-07 19:05:04","http://18.236.135.84/u.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/101958/"
 "101957","2019-01-07 19:05:02","http://78.142.29.110/u.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/101957/"
-"101955","2019-01-07 18:59:03","http://185.244.25.174/bins/hoho.mips","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101955/"
-"101956","2019-01-07 18:59:03","http://185.244.25.174/bins/hoho.mpsl","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101956/"
-"101954","2019-01-07 18:59:02","http://185.244.25.174/bins/hoho.x86","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101954/"
-"101953","2019-01-07 18:58:04","http://185.244.25.174/bins/hoho.ppc","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101953/"
-"101952","2019-01-07 18:58:03","http://185.244.25.174/bins/hoho.arm5","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101952/"
-"101950","2019-01-07 18:58:02","http://185.244.25.174/bins/hoho.arm7","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101950/"
-"101951","2019-01-07 18:58:02","http://185.244.25.174/bins/hoho.m68k","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101951/"
-"101948","2019-01-07 18:57:02","http://185.244.25.174/bins/hoho.arm6","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101948/"
-"101949","2019-01-07 18:57:02","http://185.244.25.174/bins/hoho.sh4","online","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101949/"
+"101955","2019-01-07 18:59:03","http://185.244.25.174/bins/hoho.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101955/"
+"101956","2019-01-07 18:59:03","http://185.244.25.174/bins/hoho.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101956/"
+"101954","2019-01-07 18:59:02","http://185.244.25.174/bins/hoho.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101954/"
+"101953","2019-01-07 18:58:04","http://185.244.25.174/bins/hoho.ppc","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101953/"
+"101952","2019-01-07 18:58:03","http://185.244.25.174/bins/hoho.arm5","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101952/"
+"101950","2019-01-07 18:58:02","http://185.244.25.174/bins/hoho.arm7","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101950/"
+"101951","2019-01-07 18:58:02","http://185.244.25.174/bins/hoho.m68k","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101951/"
+"101948","2019-01-07 18:57:02","http://185.244.25.174/bins/hoho.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101948/"
+"101949","2019-01-07 18:57:02","http://185.244.25.174/bins/hoho.sh4","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101949/"
 "101947","2019-01-07 18:11:03","http://mcjm.me/endy/endy.exe","online","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/101947/"
 "101946","2019-01-07 18:06:12","http://docsharefile.com/1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/101946/"
 "101945","2019-01-07 18:06:03","http://docsharefile.com/mshta.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/101945/"
@@ -4040,7 +4180,7 @@
 "101712","2019-01-06 07:16:04","http://142.11.219.20/bins/katana.mips","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101712/"
 "101711","2019-01-06 07:16:03","http://142.11.219.20/bins/katana.mpsl","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101711/"
 "101710","2019-01-06 07:15:03","http://104.168.171.186/cron","online","malware_download","bashlite,elf,gafgyt","https://urlhaus.abuse.ch/url/101710/"
-"101709","2019-01-06 05:42:18","http://c.pieshua.com/exe/Setup_402.gif","online","malware_download","exe","https://urlhaus.abuse.ch/url/101709/"
+"101709","2019-01-06 05:42:18","http://c.pieshua.com/exe/Setup_402.gif","offline","malware_download","exe","https://urlhaus.abuse.ch/url/101709/"
 "101708","2019-01-06 04:10:05","http://209.141.57.94/Josho.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/101708/"
 "101707","2019-01-06 04:09:06","http://209.141.57.94/Josho.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/101707/"
 "101706","2019-01-06 04:09:04","http://209.141.57.94/Josho.arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/101706/"
@@ -4113,7 +4253,7 @@
 "101639","2019-01-05 12:38:07","http://www.wwpdubai.com/wp-content/plugins/jav/eml%20-%20PO20180921.doc","offline","malware_download","NanoCore","https://urlhaus.abuse.ch/url/101639/"
 "101637","2019-01-05 12:38:05","http://www.wwpdubai.com/wp-content/plugins/jav/Pro.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/101637/"
 "101636","2019-01-05 11:27:02","http://13207303642.aircq.com/88924438472","offline","malware_download","doc","https://urlhaus.abuse.ch/url/101636/"
-"101635","2019-01-05 09:47:05","http://92.63.197.48/2.exe","offline","malware_download","CoinMiner,exe","https://urlhaus.abuse.ch/url/101635/"
+"101635","2019-01-05 09:47:05","http://92.63.197.48/2.exe","online","malware_download","CoinMiner,exe","https://urlhaus.abuse.ch/url/101635/"
 "101634","2019-01-05 08:47:04","http://206.189.82.107/bins/sora.arm6","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101634/"
 "101633","2019-01-05 08:47:02","http://206.189.82.107/bins/sora.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/101633/"
 "101632","2019-01-05 08:46:07","http://206.189.82.107/bins/sora.x86","offline","malware_download","elf,mirai","https://urlhaus.abuse.ch/url/101632/"
@@ -4210,7 +4350,7 @@
 "101540","2019-01-04 22:45:02","http://randominterest.com/don/jan/money.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/101540/"
 "101539","2019-01-04 22:40:05","http://randominterest.com/don/jan/moneyyy.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/101539/"
 "101538","2019-01-04 19:34:10","http://ksumnole.org/wp-admin/css/colors/blue/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/101538/"
-"101537","2019-01-04 19:18:05","https://debzaccholkonsult.com/rundll.exe","online","malware_download","GandCrab","https://urlhaus.abuse.ch/url/101537/"
+"101537","2019-01-04 19:18:05","https://debzaccholkonsult.com/rundll.exe","offline","malware_download","GandCrab","https://urlhaus.abuse.ch/url/101537/"
 "101536","2019-01-04 18:07:01","http://randominterest.com/sysgen/11882.doc","offline","malware_download","Formbook,RTF","https://urlhaus.abuse.ch/url/101536/"
 "101535","2019-01-04 18:06:03","http://randominterest.com/sysgen/burn.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/101535/"
 "101534","2019-01-04 18:05:04","http://wekiddoos.com/420e580.msi","offline","malware_download","msi","https://urlhaus.abuse.ch/url/101534/"
@@ -4995,7 +5135,7 @@
 "100752","2018-12-31 18:19:03","http://ru-shop.su/2222/7777.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/100752/"
 "100751","2018-12-31 18:18:02","http://ru-shop.su/2222/1111.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/100751/"
 "100750","2018-12-31 18:08:24","https://ru-shop.su/2222/2222.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/100750/"
-"100749","2018-12-31 18:08:21","http://wt.mt30.com/media/kmplayer-wwwppo999.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100749/"
+"100749","2018-12-31 18:08:21","http://wt.mt30.com/media/kmplayer-wwwppo999.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/100749/"
 "100748","2018-12-31 18:00:05","http://workonmemory.com/uploads/Catraca/explorer32.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100748/"
 "100747","2018-12-31 17:51:05","http://ru-shop.su/2222/bin.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/100747/"
 "100746","2018-12-31 17:51:03","http://workonmemory.com/uploads/Felipe/down.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/100746/"
@@ -5087,7 +5227,7 @@
 "100659","2018-12-31 04:46:11","http://148.70.29.77/ccrss.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100659/"
 "100658","2018-12-31 04:46:04","http://148.70.29.77/ccsrr.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100658/"
 "100657","2018-12-31 04:44:04","http://148.70.29.77/Auto.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100657/"
-"100656","2018-12-31 04:06:21","http://nismotek.com/.well-known/acme-challenge/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100656/"
+"100656","2018-12-31 04:06:21","http://nismotek.com/.well-known/acme-challenge/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/100656/"
 "100655","2018-12-31 04:06:13","http://91.98.95.77:26934/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/100655/"
 "100654","2018-12-31 04:01:02","http://nismotek.com/js/animations/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100654/"
 "100653","2018-12-31 04:00:02","http://nismotek.com/content/webdeveloper/css/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100653/"
@@ -5194,7 +5334,7 @@
 "100552","2018-12-30 07:46:13","http://onggiodieuhoa.com/wp-content/themes/yozi/fonts/bootstrap/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/100552/"
 "100551","2018-12-30 07:45:11","http://93.174.93.149/miner.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/100551/"
 "100550","2018-12-30 07:45:06","http://www.realinterview.in/bins/sora.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100550/"
-"100549","2018-12-30 07:45:05","https://longviewlegacy.com/wp-content/themes/Divi/et-pagebuilder/sserv.jpg","online","malware_download","exe","https://urlhaus.abuse.ch/url/100549/"
+"100549","2018-12-30 07:45:05","https://longviewlegacy.com/wp-content/themes/Divi/et-pagebuilder/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100549/"
 "100548","2018-12-30 07:36:02","http://vip163.ga/greentea.wbk","offline","malware_download","None","https://urlhaus.abuse.ch/url/100548/"
 "100547","2018-12-30 07:34:03","http://aqglass.com/984625f.msi","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100547/"
 "100546","2018-12-30 07:23:02","http://46.29.167.55/bash","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100546/"
@@ -5255,7 +5395,7 @@
 "100491","2018-12-30 06:23:39","https://www.chinesedirectimports.com/wp-content/themes/revo/templates/presets/zinf.jpg","offline","malware_download","exe,Shade","https://urlhaus.abuse.ch/url/100491/"
 "100490","2018-12-30 06:23:34","https://onggiodieuhoa.com/wp-content/themes/yozi/inc/assets/images/zinf.jpg","online","malware_download","exe,Shade","https://urlhaus.abuse.ch/url/100490/"
 "100489","2018-12-30 06:23:29","https://naturaltaiwan.asia/wp-content/themes/greensanity/css/zinf.jpg","online","malware_download","exe,Shade","https://urlhaus.abuse.ch/url/100489/"
-"100488","2018-12-30 06:23:25","https://longviewlegacy.com/wp-content/themes/Divi/et-pagebuilder/zinf.jpg","online","malware_download","exe,Shade","https://urlhaus.abuse.ch/url/100488/"
+"100488","2018-12-30 06:23:25","https://longviewlegacy.com/wp-content/themes/Divi/et-pagebuilder/zinf.jpg","offline","malware_download","exe,Shade","https://urlhaus.abuse.ch/url/100488/"
 "100486","2018-12-30 06:23:21","http://en.dralpaslan.com/wp-content/languages/plugins/zinf.jpg","online","malware_download","exe,Shade","https://urlhaus.abuse.ch/url/100486/"
 "100487","2018-12-30 06:23:21","http://schokoladepower.com/wp-includes/ID3/zinf.jpg","offline","malware_download","exe,Shade","https://urlhaus.abuse.ch/url/100487/"
 "100485","2018-12-30 06:23:18","http://cerrahibeyinpedi.com/cgi-bin/test/zinf.jpg","offline","malware_download","exe,Shade","https://urlhaus.abuse.ch/url/100485/"
@@ -5505,7 +5645,7 @@
 "100241","2018-12-28 17:26:03","http://spitlame.free.fr/45gf3/7uf3ref.exe","online","malware_download","Dridex,exe","https://urlhaus.abuse.ch/url/100241/"
 "100240","2018-12-28 17:23:03","http://claudio.locatelli.free.fr/45gf3/7uf3ref.exe","online","malware_download","Dridex,exe","https://urlhaus.abuse.ch/url/100240/"
 "100239","2018-12-28 16:23:09","http://home.mindspring.com/~marvinlzinn1/USPS_20181228.jar","offline","malware_download","Adwind,jSocket,rat","https://urlhaus.abuse.ch/url/100239/"
-"100238","2018-12-28 16:01:05","http://zeusdatabase.com/z/aXM86.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100238/"
+"100238","2018-12-28 16:01:05","http://zeusdatabase.com/z/aXM86.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/100238/"
 "100237","2018-12-28 15:46:03","http://zeusdatabase.com/z/DoBo.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100237/"
 "100236","2018-12-28 15:39:03","http://cnc.junoland.xyz/bins/egg.arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100236/"
 "100235","2018-12-28 15:20:07","http://s.trade27.ru/mhost.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/100235/"
@@ -5542,7 +5682,7 @@
 "100204","2018-12-28 10:50:08","http://177.68.91.128:40041/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100204/"
 "100203","2018-12-28 10:50:04","http://95.140.17.164:26135/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/100203/"
 "100202","2018-12-28 10:14:16","http://siggbienesraices.com/XAVJAV.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100202/"
-"100201","2018-12-28 10:09:07","http://images.tax861.gov.cn/bsdt/Install_Bsdt_DotNet20.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/100201/"
+"100201","2018-12-28 10:09:07","http://images.tax861.gov.cn/bsdt/Install_Bsdt_DotNet20.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100201/"
 "100200","2018-12-28 09:59:03","http://fix-autos.co.uk/doc/exe.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/100200/"
 "100199","2018-12-28 09:26:06","http://185.244.25.174/d/xd.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100199/"
 "100198","2018-12-28 09:26:05","http://185.244.25.174/d/xd.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/100198/"
@@ -5639,7 +5779,7 @@
 "100107","2018-12-28 06:08:04","http://o24o.ru/interes.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/100107/"
 "100106","2018-12-28 06:08:03","http://o24o.ru/dg.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/100106/"
 "100105","2018-12-28 05:54:05","http://o24o.ru/bies.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/100105/"
-"100104","2018-12-28 05:53:10","http://p2.lingpao8.com/Dragoon/20150218_L.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/100104/"
+"100104","2018-12-28 05:53:10","http://p2.lingpao8.com/Dragoon/20150218_L.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/100104/"
 "100103","2018-12-28 05:32:03","https://uploadexe.com/uploads/5c0eea9d8b1caunimat.exe","offline","malware_download","exe,ImminentRAT","https://urlhaus.abuse.ch/url/100103/"
 "100102","2018-12-28 05:28:03","https://uploadexe.com/uploads/5c130869bde72mshta.exe","offline","malware_download","exe,ImminentRAT","https://urlhaus.abuse.ch/url/100102/"
 "100101","2018-12-28 05:27:03","http://upload-exe.me/lT3CWbUKQj.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/100101/"
@@ -5675,7 +5815,7 @@
 "100071","2018-12-27 19:21:05","http://diyngabvouche.ml/date.exe","offline","malware_download","Loki","https://urlhaus.abuse.ch/url/100071/"
 "100070","2018-12-27 19:21:04","http://diyngabvouche.ml/Protected.exe","offline","malware_download","NanoCore","https://urlhaus.abuse.ch/url/100070/"
 "100069","2018-12-27 18:41:12","http://92.63.197.48/3.exe","offline","malware_download","CoinMiner,exe","https://urlhaus.abuse.ch/url/100069/"
-"100068","2018-12-27 18:41:05","http://restlesz.su/t.exe","offline","malware_download","CoinMiner,exe,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/100068/"
+"100068","2018-12-27 18:41:05","http://restlesz.su/t.exe","online","malware_download","CoinMiner,exe,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/100068/"
 "100067","2018-12-27 17:02:08","http://members.iinet.net.au/~sambo75/svvchost.exe","online","malware_download","exe,RemcosRAT","https://urlhaus.abuse.ch/url/100067/"
 "100066","2018-12-27 16:54:14","http://members.iinet.net.au/~sambo75/FedEx-shipping(ecopy)22-3235-44-Labels.jar","online","malware_download","zip","https://urlhaus.abuse.ch/url/100066/"
 "100065","2018-12-27 16:50:06","http://195.123.212.29/worming.png","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/100065/"
@@ -5866,7 +6006,7 @@
 "99879","2018-12-26 12:17:02","http://cdn.discordapp.com/attachments/526358454084960266/526774249990389790/314.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99879/"
 "99878","2018-12-26 12:12:02","http://optimasaludmental.com/Scan173.zip","online","malware_download","Ransomware,RUS,Troldesh,zipped-JS","https://urlhaus.abuse.ch/url/99878/"
 "99877","2018-12-26 11:49:02","http://repo.thehackademy.net/depot_cehv6/CEHv6%20Additional%20Tools/Virus%20reg_text/Reg-List-Dat_Packer2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99877/"
-"99876","2018-12-26 11:48:59","http://dx111.downyouxi.com/qunxiongshishibandichongtu.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99876/"
+"99876","2018-12-26 11:48:59","http://dx111.downyouxi.com/qunxiongshishibandichongtu.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/99876/"
 "99875","2018-12-26 11:48:15","http://repo.thehackademy.net/depot_cehv6/CEHv6%20Module%2008%20Trojans%20and%20Backdoors/Nuclear%20RAT%20Trojan/client.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99875/"
 "99874","2018-12-26 11:48:13","http://dx111.downyouxi.com/sanguozhanjizhengzong2009huiyipian.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99874/"
 "99873","2018-12-26 11:46:23","http://www.softhy.net/softhy.net_down/cs93softhy.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/99873/"
@@ -5875,9 +6015,9 @@
 "99870","2018-12-26 11:40:06","http://alfarius.ru/sites/img.jpg","offline","malware_download","exe,Ransomware,RUS,Troldesh","https://urlhaus.abuse.ch/url/99870/"
 "99869","2018-12-26 11:39:03","https://ktgroup.com.ua/misc/Scan072.zip","offline","malware_download","Ransomware,RUS,Troldesh,zipped-JS","https://urlhaus.abuse.ch/url/99869/"
 "99868","2018-12-26 11:34:03","http://amarasrilankatours.com/inc/lojoi.exe","offline","malware_download","jSocket,NanoCore,rat,XtremeRAT","https://urlhaus.abuse.ch/url/99868/"
-"99867","2018-12-26 11:31:21","http://dx111.downyouxi.com/wujinmaoxianzhilv.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99867/"
+"99867","2018-12-26 11:31:21","http://dx111.downyouxi.com/wujinmaoxianzhilv.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/99867/"
 "99866","2018-12-26 11:29:27","http://repo.thehackademy.net/depot_cehv6/CEHv6%20Module%2008%20Trojans%20and%20Backdoors/Trojan-Dropper.Win32.ZomJoiner.25.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99866/"
-"99865","2018-12-26 11:29:26","http://dx111.downyouxi.com/dnftafangwudibanzhongwenban.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/99865/"
+"99865","2018-12-26 11:29:26","http://dx111.downyouxi.com/dnftafangwudibanzhongwenban.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99865/"
 "99864","2018-12-26 11:29:02","http://repo.thehackademy.net/depot_cehv6/CEHv6%20Module%2016%20Hacking%20Webservers/webdav-gui/webdav-gui.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99864/"
 "99863","2018-12-26 11:27:07","http://www.softhy.net/softhy.net_down/cs4softhy.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/99863/"
 "99861","2018-12-26 11:26:29","http://dx111.downyouxi.com/ailisizhisi3.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/99861/"
@@ -5885,19 +6025,19 @@
 "99860","2018-12-26 11:25:33","http://repo.thehackademy.net/depot_cehv6/CEHv6%20Module%2008%20Trojans%20and%20Backdoors/netbus17/NetBus.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99860/"
 "99859","2018-12-26 11:25:32","http://dx111.downyouxi.com/qinruzhezuozhanxunlian.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/99859/"
 "99858","2018-12-26 11:25:03","http://repo.thehackademy.net/depot_cehv6/CEHv6%20Module%2014%20Denial%20of%20Service/Nuclear%20Bot/Editor.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99858/"
-"99857","2018-12-26 11:15:58","http://dx111.downyouxi.com/qqtangdanjiban.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/99857/"
+"99857","2018-12-26 11:15:58","http://dx111.downyouxi.com/qqtangdanjiban.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99857/"
 "99856","2018-12-26 11:15:02","http://repo.thehackademy.net/depot_cehv6/CEHv6%20Additional%20Tools/sendip%20v%201.5/sendip.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99856/"
-"99855","2018-12-26 11:13:21","http://dx111.downyouxi.com/shishangzuikengdiedieluosifangkuai.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/99855/"
+"99855","2018-12-26 11:13:21","http://dx111.downyouxi.com/shishangzuikengdiedieluosifangkuai.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99855/"
 "99854","2018-12-26 11:13:02","http://repo.thehackademy.net/depot_cehv6/CEHv6%20Module%2007%20System%20Hacking/vanquish-rootkit/vanquish.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99854/"
 "99853","2018-12-26 11:00:03","http://www.mydocumentpdf.com/doc/ttcopy.exe","offline","malware_download","AZORult","https://urlhaus.abuse.ch/url/99853/"
 "99852","2018-12-26 10:59:02","http://repo.thehackademy.net/depot_cehv6/CEHv6%20Module%2009%20Viruses%20and%20Worms/LIFE.SHS.worm.txt.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99852/"
 "99851","2018-12-26 10:54:11","http://sudananews.com/vitality/img.jpg","offline","malware_download","exe,Ransomware,RUS,Troldesh","https://urlhaus.abuse.ch/url/99851/"
 "99850","2018-12-26 10:50:01","http://gurmekan.net/Scan072.zip","offline","malware_download","Ransomware,RUS,Troldesh,zipped-JS","https://urlhaus.abuse.ch/url/99850/"
 "99849","2018-12-26 10:41:33","http://dx111.downyouxi.com/mingxingzhajinhuazhongwenban.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99849/"
-"99848","2018-12-26 10:20:31","http://www.softhy.net/softhy.net_down/cs6softhy.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/99848/"
+"99848","2018-12-26 10:20:31","http://www.softhy.net/softhy.net_down/cs6softhy.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99848/"
 "99847","2018-12-26 10:20:20","http://tantarantantan23.ru/24/a_Protected.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/99847/"
-"99846","2018-12-26 10:18:29","http://www.softhy.net/softhy.net_down/dedesupertabs.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/99846/"
-"99845","2018-12-26 10:09:15","http://www.softhy.net/softhy.net_down/5qq0free.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/99845/"
+"99846","2018-12-26 10:18:29","http://www.softhy.net/softhy.net_down/dedesupertabs.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99846/"
+"99845","2018-12-26 10:09:15","http://www.softhy.net/softhy.net_down/5qq0free.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99845/"
 "99844","2018-12-26 10:07:00","http://tantarantantan23.ru/24/_output55A1800ars.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/99844/"
 "99843","2018-12-26 10:06:30","http://tantarantantan23.ru/24/ajhvguygjhl_signed.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99843/"
 "99842","2018-12-26 10:01:07","http://tantarantantan23.ru/24/r2_Protected.exe","offline","malware_download","exe,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/99842/"
@@ -6350,8 +6490,8 @@
 "99395","2018-12-24 13:09:03","http://netstorage.iar.com/SuppDB/Public/EXAMPLES/013390/ARM_AmbiqMicro_8.32.1_18631.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99395/"
 "99394","2018-12-24 12:58:05","http://netstorage.iar.com/SuppDB/Public/EXAMPLES/013394/ARM_Broadcom_8.32.1_18631.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99394/"
 "99393","2018-12-24 12:21:04","http://slpsrgpsrhojifdij.ru/3.exe","offline","malware_download","CoinMiner,exe","https://urlhaus.abuse.ch/url/99393/"
-"99392","2018-12-24 12:21:03","http://slpsrgpsrhojifdij.ru/2.exe","offline","malware_download","CoinMiner,exe","https://urlhaus.abuse.ch/url/99392/"
-"99391","2018-12-24 12:21:02","http://slpsrgpsrhojifdij.ru/1.exe","offline","malware_download","CoinMiner,exe,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/99391/"
+"99392","2018-12-24 12:21:03","http://slpsrgpsrhojifdij.ru/2.exe","online","malware_download","CoinMiner,exe","https://urlhaus.abuse.ch/url/99392/"
+"99391","2018-12-24 12:21:02","http://slpsrgpsrhojifdij.ru/1.exe","online","malware_download","CoinMiner,exe,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/99391/"
 "99390","2018-12-24 11:52:03","http://exotechfm.com.au/1mllu0/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/99390/"
 "99389","2018-12-24 11:29:04","http://draven.ru/stub.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99389/"
 "99388","2018-12-24 11:16:10","http://45.61.136.193/ps23e","online","malware_download","elf","https://urlhaus.abuse.ch/url/99388/"
@@ -6386,7 +6526,7 @@
 "99347","2018-12-24 09:25:05","http://206.189.225.113/AB4g5/Josho.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99347/"
 "99346","2018-12-24 09:25:03","http://192.99.167.14/vvglma","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99346/"
 "99345","2018-12-24 09:23:04","http://s2lol.com/update/botnet/svchosts.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/99345/"
-"99344","2018-12-24 09:22:11","http://bbs.sundance.com.cn/upfile/upattachment/file/office/xplan_v1.0_setup.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/99344/"
+"99344","2018-12-24 09:22:11","http://bbs.sundance.com.cn/upfile/upattachment/file/office/xplan_v1.0_setup.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/99344/"
 "99343","2018-12-24 09:08:03","http://5.152.177.242/[cpu]","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99343/"
 "99342","2018-12-24 09:06:09","http://5.152.177.242/ntpd","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99342/"
 "99341","2018-12-24 09:06:06","http://192.99.167.14/vtyhat","offline","malware_download","elf","https://urlhaus.abuse.ch/url/99341/"
@@ -7312,7 +7452,7 @@
 "98409","2018-12-20 18:37:26","http://9youwang.com/moban/haomuban1/40/4f918-40.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/98409/"
 "98408","2018-12-20 18:36:47","http://kiriot22.ugu.pl/downloads/Minecraft%20Password%20Manager/Minecraft%20Password%20Manager.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/98408/"
 "98407","2018-12-20 18:36:46","http://9youwang.com/moban/haomuban1/53/4f918-53.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/98407/"
-"98406","2018-12-20 18:36:34","http://9youwang.com/moban/haomuban1/8/4f918-8.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/98406/"
+"98406","2018-12-20 18:36:34","http://9youwang.com/moban/haomuban1/8/4f918-8.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/98406/"
 "98405","2018-12-20 18:34:11","http://104.233.73.35/d/xd.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/98405/"
 "98404","2018-12-20 18:34:10","https://starspoly.edu.ng/js/zdx/key/BTCO.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/98404/"
 "98403","2018-12-20 18:34:05","http://104.233.73.35/d/xd.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/98403/"
@@ -7913,7 +8053,7 @@
 "97805","2018-12-19 14:42:04","http://voapros.com/isPGE-e8cp4EJMV_YOwHSrSvT-i3U/ACH/PaymentInfo/newsletter/US/Invoices-attached/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/97805/"
 "97804","2018-12-19 14:41:29","http://totalcommunicationinc.com/wp-content/uploads/2016/De_de/DBATYGF1305567/Bestellungen/RECHNUNG/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/97804/"
 "97803","2018-12-19 14:41:27","http://thefanembassy.com/CrnCb-7a6PAiKE2_DYSD-gpq/COMET/SIGNS/PAYMENT/NOTIFICATION/12/19/2018/FILE/En_us/Invoices-attached/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/97803/"
-"97802","2018-12-19 14:41:25","http://thedopplershift.co.uk/aOefH-SQEf03g2_C-s3/ACH/PaymentAdvice/INFO/En_us/Need-to-send-the-attachment/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/97802/"
+"97802","2018-12-19 14:41:25","http://thedopplershift.co.uk/aOefH-SQEf03g2_C-s3/ACH/PaymentAdvice/INFO/En_us/Need-to-send-the-attachment/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/97802/"
 "97801","2018-12-19 14:41:24","http://street-fashion-guide.ru/De/XFBMFU6227781/Rechnung/Hilfestellung/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/97801/"
 "97800","2018-12-19 14:41:22","http://sosh47.citycheb.ru/DE_de/NNXSNNL8323484/Rechnungskorrektur/DETAILS/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/97800/"
 "97799","2018-12-19 14:41:21","http://segmentsolutions.com/tjnDE-FuBQhD6b_my-P6N/INVOICE/xerox/En_us/Past-Due-Invoices/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/97799/"
@@ -8780,10 +8920,10 @@
 "96926","2018-12-18 07:29:03","http://68.183.208.152/AB4g5/Josho.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/96926/"
 "96924","2018-12-18 07:22:04","https://amsi.co.za/zzmyc/3AA.exe","offline","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/96924/"
 "96923","2018-12-18 07:17:08","http://mso.services/GlennInternational/PurchaseOrder/PO_141218G.doc","online","malware_download","doc,Loki,threadkit","https://urlhaus.abuse.ch/url/96923/"
-"96922","2018-12-18 07:15:19","http://bd19.52lishi.com/bd49786.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/96922/"
-"96921","2018-12-18 07:14:20","http://bd19.52lishi.com/bd12836.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/96921/"
-"96920","2018-12-18 07:13:21","http://bd19.52lishi.com/bd67489.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/96920/"
-"96919","2018-12-18 07:12:08","http://bd19.52lishi.com/bd49020.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/96919/"
+"96922","2018-12-18 07:15:19","http://bd19.52lishi.com/bd49786.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/96922/"
+"96921","2018-12-18 07:14:20","http://bd19.52lishi.com/bd12836.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/96921/"
+"96920","2018-12-18 07:13:21","http://bd19.52lishi.com/bd67489.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/96920/"
+"96919","2018-12-18 07:12:08","http://bd19.52lishi.com/bd49020.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/96919/"
 "96918","2018-12-18 06:56:04","http://68.183.208.152/AB4g5/Josho.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/96918/"
 "96917","2018-12-18 06:56:04","http://readingtokids.org/ssl/Order%20with%20Item%20samples.rar","online","malware_download","zip","https://urlhaus.abuse.ch/url/96917/"
 "96916","2018-12-18 06:54:06","http://bd19.52lishi.com/bd71150.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/96916/"
@@ -9689,7 +9829,7 @@
 "95985","2018-12-16 19:24:04","http://xeggufhxmczp.tw/ifiwis/79669_03845.html","offline","malware_download","gzip","https://urlhaus.abuse.ch/url/95985/"
 "95984","2018-12-16 19:09:05","http://178.128.196.88/ankit/jno.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/95984/"
 "95983","2018-12-16 19:09:03","http://178.128.196.88/ankit/jno.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/95983/"
-"95982","2018-12-16 18:56:05","http://mxd-1253507133.file.myqcloud.com/exe/2.6.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/95982/"
+"95982","2018-12-16 18:56:05","http://mxd-1253507133.file.myqcloud.com/exe/2.6.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/95982/"
 "95981","2018-12-16 18:15:06","http://151.50.135.79:44225/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/95981/"
 "95980","2018-12-16 17:36:04","http://xixwdnuawkdi.tw/mndbjn/06705_1868335.html","offline","malware_download","gzip","https://urlhaus.abuse.ch/url/95980/"
 "95979","2018-12-16 17:24:02","http://80.211.66.236/bins/sora.arm7","offline","malware_download","elf","https://urlhaus.abuse.ch/url/95979/"
@@ -10675,7 +10815,7 @@
 "94992","2018-12-14 10:41:05","http://nismotek.com/SharatSinha/css/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/94992/"
 "94991","2018-12-14 10:41:02","http://newreport.info/wp-content/themes/twentyseventeen/assets/css/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/94991/"
 "94990","2018-12-14 10:31:07","http://ajosdiegopozo.com/OJhNz-1KuIKUyPnJNp7n_NGyDRsGQM-8d/BIZ/Commercial/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/94990/"
-"94989","2018-12-14 10:25:05","http://a.xiazai163.com/DOWN/RUOKUAIDAMA_ITMOP.COM.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94989/"
+"94989","2018-12-14 10:25:05","http://a.xiazai163.com/DOWN/RUOKUAIDAMA_ITMOP.COM.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/94989/"
 "94987","2018-12-14 10:24:07","http://2.187.39.208:40551/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/94987/"
 "94988","2018-12-14 10:24:07","http://51.254.84.55/updater.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/94988/"
 "94986","2018-12-14 10:24:03","http://93.41.182.249:12228/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/94986/"
@@ -10839,13 +10979,13 @@
 "94828","2018-12-14 04:48:07","http://alistairmccoy.co.uk/hxoMK-0UaFgeRod5GKKy_SDuySbTe-Ars/PAYMENT/US/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/94828/"
 "94827","2018-12-14 04:48:05","http://adsmith.in/Tquk-aYR4R2BT3nsHWV9_HxsuQtsf-GHJ/oamo/Personal/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/94827/"
 "94826","2018-12-14 04:48:04","http://actron.com.my/NQyIS-X74zWR5Y15WIlmU_NDrWyuRth-M58/PAY/US/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/94826/"
-"94825","2018-12-14 04:29:19","http://n.bxacg.com/pc2/cfxfyfasfz_gr.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94825/"
-"94824","2018-12-14 04:28:27","http://n.bxacg.com/PC3/NIZANMFTS_FR.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/94824/"
-"94823","2018-12-14 04:27:08","http://n.bxacg.com/pc3/cfffmkmcq2016.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/94823/"
+"94825","2018-12-14 04:29:19","http://n.bxacg.com/pc2/cfxfyfasfz_gr.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/94825/"
+"94824","2018-12-14 04:28:27","http://n.bxacg.com/PC3/NIZANMFTS_FR.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94824/"
+"94823","2018-12-14 04:27:08","http://n.bxacg.com/pc3/cfffmkmcq2016.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94823/"
 "94822","2018-12-14 04:25:09","http://n.bxacg.com/pc/w3gmaster_gr.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94822/"
 "94821","2018-12-14 04:25:05","http://n.bxacg.com/pc/e4apatch_gr.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94821/"
-"94820","2018-12-14 04:24:55","http://n.bxacg.com/PC3/DZJPYXTB_PC.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94820/"
-"94819","2018-12-14 04:24:06","http://n.bxacg.com/pc3/qqqsggxcxrj_fr.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94819/"
+"94820","2018-12-14 04:24:55","http://n.bxacg.com/PC3/DZJPYXTB_PC.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/94820/"
+"94819","2018-12-14 04:24:06","http://n.bxacg.com/pc3/qqqsggxcxrj_fr.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/94819/"
 "94817","2018-12-14 04:23:15","http://ellajanelane.com/qOCvw-MxK969UQ2LP4sOR_LeqBWXher-IV/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/94817/"
 "94818","2018-12-14 04:23:15","http://vanmook.net/ACH/PaymentAdvice/default/EN_en/Invoices-attached/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/94818/"
 "94816","2018-12-14 04:23:13","http://bendershub.com/LkHNE-qcS2zmmZRzGwCP_yngwsXic-Hp/biz/US/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/94816/"
@@ -10855,14 +10995,14 @@
 "94812","2018-12-14 04:23:06","http://chicagofrozenfreight.com/lMdL-ZfDMrim0wycDN1_YZnoDmqG-Fd/SEP/Personal/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/94812/"
 "94811","2018-12-14 04:23:04","http://gabmonkey.com/MmAF-a8BItBUJm7OT4C_VpUUBfhq-Ta/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/94811/"
 "94810","2018-12-14 04:23:03","http://eikokomiya.com/waIfU-uJVBbau3kwrOouu_KMofejhh-cj/","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/94810/"
-"94809","2018-12-14 04:11:39","http://n.bxacg.com/pc3/scgscfzbt_gr.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/94809/"
+"94809","2018-12-14 04:11:39","http://n.bxacg.com/pc3/scgscfzbt_gr.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94809/"
 "94808","2018-12-14 04:08:50","http://n.bxacg.com/pc3/qqtsvipyjdl_fr.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/94808/"
 "94807","2018-12-14 04:08:35","http://n.bxacg.com/pc3/kmgsxxgq_gr.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/94807/"
 "94806","2018-12-14 04:08:06","http://vanmook.net/ACH/PaymentAdvice/default/EN_en/Invoices-attached","offline","malware_download","doc","https://urlhaus.abuse.ch/url/94806/"
 "94805","2018-12-14 04:08:04","http://ulco.tv/US/Transaction_details/122018/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/94805/"
-"94804","2018-12-14 04:07:29","http://n.bxacg.com/PC3/SJSJZYFZXGQ_FR.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/94804/"
+"94804","2018-12-14 04:07:29","http://n.bxacg.com/PC3/SJSJZYFZXGQ_FR.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94804/"
 "94803","2018-12-14 04:07:02","http://almariku.com/wp-content/plugins/akismet/_inc/img/sserv.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/94803/"
-"94802","2018-12-14 03:53:20","http://n.bxacg.com/pc2/qqxwqmszdtwg_fr.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94802/"
+"94802","2018-12-14 03:53:20","http://n.bxacg.com/pc2/qqxwqmszdtwg_fr.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/94802/"
 "94801","2018-12-14 03:53:17","http://n.bxacg.com/pc2/slipatch_gr.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/94801/"
 "94800","2018-12-14 03:27:01","http://vitalmania.eu/images/oset.exe","offline","malware_download","exe,Smoke Loader","https://urlhaus.abuse.ch/url/94800/"
 "94799","2018-12-14 02:44:19","http://58.218.66.96:37515/se360","offline","malware_download","elf","https://urlhaus.abuse.ch/url/94799/"
@@ -10990,7 +11130,7 @@
 "94677","2018-12-13 23:56:06","http://duvaldigital.com/En_us/Clients_Messages/2018-12/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/94677/"
 "94676","2018-12-13 23:56:04","http://chainboy.com/US/Details/2018-12/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/94676/"
 "94675","2018-12-13 23:56:03","http://budmet-bis.pl/EN_US/Information/122018/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/94675/"
-"94674","2018-12-13 23:27:53","http://wh.2.bxacg.com/RX/JFIPHONE4SSJMN_DWJ.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/94674/"
+"94674","2018-12-13 23:27:53","http://wh.2.bxacg.com/RX/JFIPHONE4SSJMN_DWJ.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94674/"
 "94673","2018-12-13 23:26:02","http://scotterselfstorage.co.uk/pab2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/94673/"
 "94672","2018-12-13 23:03:01","http://playhard.ru/Files/Games/3881/trainers/ap_p13.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94672/"
 "94671","2018-12-13 23:01:02","http://playhard.ru/files/games/1878/nfmwtrn111205.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/94671/"
@@ -11171,7 +11311,7 @@
 "94423","2018-12-13 18:39:08","http://www.cus-vpstest.info/InvoiceCodeChanges/xerox/US_us/778-89-722984-845-778-89-722984-908/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/94423/"
 "94422","2018-12-13 18:39:04","http://consultesistemas.com.br/INVOICE/68704433607083875/OVERPAYMENT/sites/En_us/Invoice/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/94422/"
 "94421","2018-12-13 18:39:02","http://litecoinearn.co.uk/Inv/8068148259/doc/US_us/Past-Due-Invoice","offline","malware_download","doc","https://urlhaus.abuse.ch/url/94421/"
-"94420","2018-12-13 18:16:17","http://59.126.82.23:22684/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/94420/"
+"94420","2018-12-13 18:16:17","http://59.126.82.23:22684/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/94420/"
 "94419","2018-12-13 18:16:12","http://45.61.136.193/do3309","online","malware_download","elf","https://urlhaus.abuse.ch/url/94419/"
 "94418","2018-12-13 18:16:05","http://31.22.214.21:3573/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/94418/"
 "94417","2018-12-13 17:55:04","http://www.itwss.com/wp-content/themes/twentyten/mmg.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/94417/"
@@ -12320,7 +12460,7 @@
 "93242","2018-12-11 18:34:29","http://meunasahkrueng.id/invoices/7879/3634/default/EN_en/Invoice-Number-88876/","offline","malware_download","doc,emotet","https://urlhaus.abuse.ch/url/93242/"
 "93241","2018-12-11 18:34:15","http://meunasahgantung.id/IRS.GOV/IRS/Wage-and-Income-Transcript/","offline","malware_download","doc,emotet","https://urlhaus.abuse.ch/url/93241/"
 "93240","2018-12-11 18:34:03","http://jiedianvip.com/FC966/invoicing/FILE/EN_en/Invoice-Corrections-for-17/76/","offline","malware_download","doc,emotet","https://urlhaus.abuse.ch/url/93240/"
-"93239","2018-12-11 18:31:35","http://a.xiazai163.com/down/jushengwangguan_pj_itmop.com.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/93239/"
+"93239","2018-12-11 18:31:35","http://a.xiazai163.com/down/jushengwangguan_pj_itmop.com.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/93239/"
 "93238","2018-12-11 18:25:48","http://soloprime.com/US/Clients_Messages/2018-12/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/93238/"
 "93237","2018-12-11 18:25:47","http://shreesaasthatextiles.com/US/Details/122018/","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/93237/"
 "93236","2018-12-11 18:25:46","http://support.redbook.aero/wp-includes/US/Details/122018/","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/93236/"
@@ -13309,7 +13449,7 @@
 "92231","2018-12-10 08:37:06","http://childcaretrinity.org/yzzQkMGq/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/92231/"
 "92230","2018-12-10 08:37:03","http://ericleventhal.com/UUDpRAc/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/92230/"
 "92229","2018-12-10 08:31:04","http://voho.amboydelimetuchen.com/pagnom95.php","offline","malware_download","BITS,exe,geofenced,Gozi,headersfenced,ITA,ursnif","https://urlhaus.abuse.ch/url/92229/"
-"92228","2018-12-10 08:31:03","http://docs.alfanoosemiddleeasternnyc.com/jogptfbuu=w?bna=1","offline","malware_download","geofenced,ITA,ursnif,zipped-VBS","https://urlhaus.abuse.ch/url/92228/"
+"92228","2018-12-10 08:31:03","http://docs.alfanoosemiddleeasternnyc.com/jogptfbuu=w?bna=1","online","malware_download","geofenced,ITA,ursnif,zipped-VBS","https://urlhaus.abuse.ch/url/92228/"
 "92212","2018-12-10 08:26:10","http://23.249.167.158/asia/win32.exe","offline","malware_download","AZORult,exe","https://urlhaus.abuse.ch/url/92212/"
 "92206","2018-12-10 08:18:05","http://perfectimg.biz/files/jmjksfnlr.msi","offline","malware_download","exe,Fuery,msi","https://urlhaus.abuse.ch/url/92206/"
 "92204","2018-12-10 08:15:04","http://herbliebermancommunityleadershipaward.org/xjg6c8","offline","malware_download","exe","https://urlhaus.abuse.ch/url/92204/"
@@ -13581,12 +13721,12 @@
 "91939","2018-12-09 06:33:03","http://198.98.55.87/yakuza.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/91939/"
 "91938","2018-12-09 05:29:29","http://212.77.144.84:27552/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/91938/"
 "91937","2018-12-09 05:29:27","http://171.235.136.147:9963/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/91937/"
-"91936","2018-12-09 05:19:05","http://p6.zbjimg.com/task/2010-11/17/pub/4ce336b4661fd.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/91936/"
-"91935","2018-12-09 05:19:03","http://p6.zbjimg.com/task/2010-11/04/pub/4cd2620ce3f10.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/91935/"
-"91934","2018-12-09 05:19:02","http://p6.zbjimg.com/task/2013-09/14/pub/5233384d4c5d8.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/91934/"
+"91936","2018-12-09 05:19:05","http://p6.zbjimg.com/task/2010-11/17/pub/4ce336b4661fd.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/91936/"
+"91935","2018-12-09 05:19:03","http://p6.zbjimg.com/task/2010-11/04/pub/4cd2620ce3f10.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/91935/"
+"91934","2018-12-09 05:19:02","http://p6.zbjimg.com/task/2013-09/14/pub/5233384d4c5d8.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/91934/"
 "91933","2018-12-09 05:18:38","http://p6.zbjimg.com/task/2011-08/11/pub/4e4334b150fcf.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/91933/"
 "91932","2018-12-09 05:18:37","http://p6.zbjimg.com/task/2012-05/21/pub/4fba6242931d5.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/91932/"
-"91931","2018-12-09 05:17:16","http://p6.zbjimg.com/task/2011-10/14/1121109/4e97e74d5dd8e.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/91931/"
+"91931","2018-12-09 05:17:16","http://p6.zbjimg.com/task/2011-10/14/1121109/4e97e74d5dd8e.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/91931/"
 "91930","2018-12-09 05:16:18","http://p6.zbjimg.com/task/2011-07/26/pub/4e2eb9db358fc.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/91930/"
 "91929","2018-12-09 05:06:11","http://p6.zbjimg.com/task/2013-10/10/works/5256b6dab0396.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/91929/"
 "91928","2018-12-09 05:05:07","http://p6.zbjimg.com/task/2010-12/03/519808/4cf8bc6362f34.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/91928/"
@@ -13594,14 +13734,14 @@
 "91926","2018-12-09 03:44:02","http://yolcuinsaatkesan.com/2605/css/IyBG7JXDMt","offline","malware_download","emotet,epoch1","https://urlhaus.abuse.ch/url/91926/"
 "91925","2018-12-09 03:03:03","http://jswlkeji.com/modules/mod_ariimageslidersa/Payment.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/91925/"
 "91924","2018-12-09 03:02:04","http://jswlkeji.com/modules/mod_ariimageslidersa/pop/Proof%20of%20Payment.zipx","online","malware_download","zip","https://urlhaus.abuse.ch/url/91924/"
-"91923","2018-12-09 02:52:08","http://xz.bxacg.com/zgsxmzmpl_gr.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/91923/"
+"91923","2018-12-09 02:52:08","http://xz.bxacg.com/zgsxmzmpl_gr.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/91923/"
 "91922","2018-12-09 02:51:09","http://xz.bxacg.com/slsendss_gr.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/91922/"
-"91921","2018-12-09 02:43:24","http://xz.bxacg.com/yxcs6kzgjfcxgq_gr.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/91921/"
+"91921","2018-12-09 02:43:24","http://xz.bxacg.com/yxcs6kzgjfcxgq_gr.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/91921/"
 "91920","2018-12-09 02:41:34","http://xz.bxacg.com/xloutlink.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/91920/"
 "91919","2018-12-09 02:40:04","http://xz.bxacg.com/LMCQXGQ_GR.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/91919/"
 "91918","2018-12-09 02:31:11","http://xz.bxacg.com/XXZQDJB_GR.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/91918/"
-"91917","2018-12-09 02:23:21","http://xz.bxacg.com/instmobilemgr_beta.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/91917/"
-"91916","2018-12-09 02:21:23","http://xz.bxacg.com/sjdmzs_gr.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/91916/"
+"91917","2018-12-09 02:23:21","http://xz.bxacg.com/instmobilemgr_beta.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/91917/"
+"91916","2018-12-09 02:21:23","http://xz.bxacg.com/sjdmzs_gr.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/91916/"
 "91915","2018-12-09 02:21:22","http://xz.bxacg.com/spc_setup.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/91915/"
 "91914","2018-12-09 01:48:08","http://139.59.44.35/i686","offline","malware_download","elf","https://urlhaus.abuse.ch/url/91914/"
 "91913","2018-12-09 01:48:06","http://139.59.44.35/x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/91913/"
@@ -13633,10 +13773,10 @@
 "91887","2018-12-08 20:15:06","http://anthrohub.org/wp/realme.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/91887/"
 "91886","2018-12-08 20:14:07","http://anthrohub.org/.well-known/dickhead.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/91886/"
 "91885","2018-12-08 17:57:32","http://figen.com/school/gra2329/merrill_lynch.doc","offline","malware_download","doc","https://urlhaus.abuse.ch/url/91885/"
-"91884","2018-12-08 17:57:29","http://xiazai.vosonic.com.cn/xz/f600%B2%FA%C6%B7%C9%FD%BC%B6%CB%B5%C3%F7.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/91884/"
+"91884","2018-12-08 17:57:29","http://xiazai.vosonic.com.cn/xz/f600%B2%FA%C6%B7%C9%FD%BC%B6%CB%B5%C3%F7.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/91884/"
 "91883","2018-12-08 17:56:09","http://qinner.luxeone.cn/Document/US/Invoice-for-you","offline","malware_download","doc","https://urlhaus.abuse.ch/url/91883/"
 "91882","2018-12-08 17:56:05","http://189.135.96.232:60688/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/91882/"
-"91881","2018-12-08 17:55:10","http://p6.zbjimg.com/task/2011-10/22/1164339/4ea2a4c43df54.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/91881/"
+"91881","2018-12-08 17:55:10","http://p6.zbjimg.com/task/2011-10/22/1164339/4ea2a4c43df54.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/91881/"
 "91880","2018-12-08 17:14:03","http://www.stampile-sibiu.ro/ybR/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/91880/"
 "91879","2018-12-08 17:14:02","http://mswebpro.com/YHUFbhGvF/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/91879/"
 "91878","2018-12-08 17:06:03","http://dichvuvesinhcongnghiep.top/IRS.GOV/IRS-Transcript-treasury-gov/Record-of-Account-Transcript/","offline","malware_download","doc","https://urlhaus.abuse.ch/url/91878/"
@@ -13680,7 +13820,7 @@
 "91840","2018-12-08 10:32:06","http://208.97.140.137/bins/ultronfinal.armv6l","offline","malware_download","elf","https://urlhaus.abuse.ch/url/91840/"
 "91839","2018-12-08 10:32:04","http://208.97.140.137/bins/ultronfinal.i586","offline","malware_download","elf","https://urlhaus.abuse.ch/url/91839/"
 "91838","2018-12-08 10:32:03","http://208.97.140.137/bins/ultronfinal.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/91838/"
-"91837","2018-12-08 09:40:14","http://xiazai.vosonic.com.cn/xz/f600%E4%BA%A7%E5%93%81%E5%8D%87%E7%BA%A7%E8%AF%B4%E6%98%8E.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/91837/"
+"91837","2018-12-08 09:40:14","http://xiazai.vosonic.com.cn/xz/f600%E4%BA%A7%E5%93%81%E5%8D%87%E7%BA%A7%E8%AF%B4%E6%98%8E.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/91837/"
 "91836","2018-12-08 09:40:03","http://ih1300437.myihor.ru/pLoader.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/91836/"
 "91835","2018-12-08 09:33:03","http://fortalecergroup.com.br/bals/index.php?o=YmFsczE=","offline","malware_download","Gozi","https://urlhaus.abuse.ch/url/91835/"
 "91834","2018-12-08 09:19:06","http://johnscevolaseo.com/IRS/IRS.gov/Record-of-Account-Transcript/December-07-2018","offline","malware_download","doc","https://urlhaus.abuse.ch/url/91834/"
@@ -13929,7 +14069,7 @@
 "91592","2018-12-07 23:54:34","http://menerga-russia.ru/Document/US_us/New-order","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/91592/"
 "91590","2018-12-07 23:54:33","http://johnnycrap.com/sites/US/Overdue-payment/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/91590/"
 "91589","2018-12-07 23:54:31","http://jobsinlincoln.co.uk/doc/EN_en/Question/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/91589/"
-"91587","2018-12-07 23:54:30","http://hoteleseconomicosacapulco.com/FILE/En/ACH-form/","online","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/91587/"
+"91587","2018-12-07 23:54:30","http://hoteleseconomicosacapulco.com/FILE/En/ACH-form/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/91587/"
 "91588","2018-12-07 23:54:30","http://jobsinlincoln.co.uk/doc/EN_en/Question","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/91588/"
 "91586","2018-12-07 23:54:29","http://heke.net/default/US/Outstanding-Invoices/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/91586/"
 "91585","2018-12-07 23:54:26","http://gueben.es/wp-admin/Corporation/EN_en/Question/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/91585/"
@@ -14882,10 +15022,10 @@
 "90638","2018-12-06 23:57:05","http://kottonhood.com/IRS.GOV/IRS-Online-Center/Verification-of-Non-filing-Letter/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/90638/"
 "90637","2018-12-06 23:57:04","http://friisweb.dk/IRS/Internal-Revenue-Service-Online/Tax-Return-Transcript/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/90637/"
 "90636","2018-12-06 23:57:02","http://core-tech.com/Corporation/En_us/Invoices-attached","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/90636/"
-"90635","2018-12-06 23:48:07","http://209.141.42.145/yakuza.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/90635/"
-"90634","2018-12-06 23:48:06","http://209.141.42.145/yakuza.mpsl","offline","malware_download","elf","https://urlhaus.abuse.ch/url/90634/"
-"90633","2018-12-06 23:48:04","http://209.141.42.145/yakuza.i586","offline","malware_download","elf","https://urlhaus.abuse.ch/url/90633/"
-"90632","2018-12-06 23:48:02","http://209.141.42.145/yakuza.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/90632/"
+"90635","2018-12-06 23:48:07","http://209.141.42.145/yakuza.sh4","online","malware_download","elf","https://urlhaus.abuse.ch/url/90635/"
+"90634","2018-12-06 23:48:06","http://209.141.42.145/yakuza.mpsl","online","malware_download","elf","https://urlhaus.abuse.ch/url/90634/"
+"90633","2018-12-06 23:48:04","http://209.141.42.145/yakuza.i586","online","malware_download","elf","https://urlhaus.abuse.ch/url/90633/"
+"90632","2018-12-06 23:48:02","http://209.141.42.145/yakuza.ppc","online","malware_download","elf","https://urlhaus.abuse.ch/url/90632/"
 "90631","2018-12-06 23:46:26","http://waus.net/IRS-Transcript-treasury-gov/Tax-Return-Transcript/December-06-2018","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/90631/"
 "90630","2018-12-06 23:46:21","http://alphasecurity.mobi/Download/US_us/Invoice-for-l/l-12/07/2018","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/90630/"
 "90629","2018-12-06 23:46:18","http://centropardilho.pt/Dec2018/En/Past-Due-Invoices","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/90629/"
@@ -14940,11 +15080,11 @@
 "90580","2018-12-06 23:23:02","http://www.nasa.ekpaideusi.gr/DHL-Express","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/90580/"
 "90579","2018-12-06 23:22:11","http://vanhauvinpearl.com/payment","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/90579/"
 "90578","2018-12-06 23:22:04","http://hnsyxf.com/Invoices-Overdue-02/07/2018","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/90578/"
-"90577","2018-12-06 23:21:04","http://209.141.42.145/yakuza.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/90577/"
-"90576","2018-12-06 23:21:03","http://209.141.42.145/yakuza.arm6","offline","malware_download","elf","https://urlhaus.abuse.ch/url/90576/"
-"90575","2018-12-06 23:20:07","http://209.141.42.145/yakuza.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/90575/"
-"90574","2018-12-06 23:20:05","http://209.141.42.145/yakuza.x32","offline","malware_download","elf","https://urlhaus.abuse.ch/url/90574/"
-"90573","2018-12-06 23:20:03","http://209.141.42.145/yakuza.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/90573/"
+"90577","2018-12-06 23:21:04","http://209.141.42.145/yakuza.m68k","online","malware_download","elf","https://urlhaus.abuse.ch/url/90577/"
+"90576","2018-12-06 23:21:03","http://209.141.42.145/yakuza.arm6","online","malware_download","elf","https://urlhaus.abuse.ch/url/90576/"
+"90575","2018-12-06 23:20:07","http://209.141.42.145/yakuza.mips","online","malware_download","elf","https://urlhaus.abuse.ch/url/90575/"
+"90574","2018-12-06 23:20:05","http://209.141.42.145/yakuza.x32","online","malware_download","elf","https://urlhaus.abuse.ch/url/90574/"
+"90573","2018-12-06 23:20:03","http://209.141.42.145/yakuza.x86","online","malware_download","elf","https://urlhaus.abuse.ch/url/90573/"
 "90572","2018-12-06 23:11:05","http://lencheeseman.com/O2F0sX4yF/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/90572/"
 "90571","2018-12-06 23:11:03","http://203.146.208.208/drago/images/.ssh/p.txt","online","malware_download","None","https://urlhaus.abuse.ch/url/90571/"
 "90570","2018-12-06 23:00:04","http://warapunga.ch/INFO/En_us/Paid-Invoice","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/90570/"
@@ -16494,9 +16634,9 @@
 "89025","2018-12-04 22:45:09","http://artst12345.nichost.ru/scan/US_us/ACH-form","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/89025/"
 "89024","2018-12-04 22:45:08","http://ptgut.co.id/Corporation/EN_en/999-88-805311-816-999-88-805311-384","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/89024/"
 "89023","2018-12-04 22:45:06","http://bratech.co.jp/lpo/m/mfp/tmp/doc/En_us/Invoice-for-you","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/89023/"
-"89022","2018-12-04 22:45:03","https://linkprotect.cudasvc.com/url?a=http://jjtphoto.com/scan/En/Paid-Invoice-Credit-Card-Receipt&c=E","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/89022/"
+"89022","2018-12-04 22:45:03","https://linkprotect.cudasvc.com/url?a=http://jjtphoto.com/scan/En/Paid-Invoice-Credit-Card-Receipt&c=E","online","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/89022/"
 "89021","2018-12-04 22:36:05","http://ars-internationals.com/INFO/EN_en/Invoice-7592660","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/89021/"
-"89020","2018-12-04 22:20:18","http://a.xiazai163.com/down/cyspysrj_itmop.com.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/89020/"
+"89020","2018-12-04 22:20:18","http://a.xiazai163.com/down/cyspysrj_itmop.com.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/89020/"
 "89019","2018-12-04 22:20:07","http://jaylonimpex.com/LAYEDED/hush/ASKJHGFGHJ.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/89019/"
 "89018","2018-12-04 22:20:04","http://franceslin.com/xerox/En_us/Past-Due-Invoices/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/89018/"
 "89017","2018-12-04 22:05:26","http://jaylonimpex.com/LAYEDED/hush/KKKAMM.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/89017/"
@@ -16551,8 +16691,8 @@
 "88968","2018-12-04 18:41:03","http://jointhegoodcampaign.com/Dec2018/En_us/Invoices-Overdue","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/88968/"
 "88967","2018-12-04 18:27:30","http://wcy.xiaoshikd.com/doc88xzgj.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/88967/"
 "88966","2018-12-04 18:27:02","http://stijnbiemans.nl/FILE/US/Outstanding-Invoices","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/88966/"
-"88964","2018-12-04 18:19:03","http://nono.antoniospizzeriaelmhurst.com/jogptfbuu=w?bba=1","offline","malware_download","geofenced,ITA,ursnif,zipped-VBS","https://urlhaus.abuse.ch/url/88964/"
-"88965","2018-12-04 18:19:03","http://yesmy.amurajapanesecuisine.com/pagnom94.php","offline","malware_download","BITS,exe,geofenced,Gozi,headersfenced,ITA,ursnif","https://urlhaus.abuse.ch/url/88965/"
+"88964","2018-12-04 18:19:03","http://nono.antoniospizzeriaelmhurst.com/jogptfbuu=w?bba=1","online","malware_download","geofenced,ITA,ursnif,zipped-VBS","https://urlhaus.abuse.ch/url/88964/"
+"88965","2018-12-04 18:19:03","http://yesmy.amurajapanesecuisine.com/pagnom94.php","online","malware_download","BITS,exe,geofenced,Gozi,headersfenced,ITA,ursnif","https://urlhaus.abuse.ch/url/88965/"
 "88963","2018-12-04 17:46:05","http://lapakdaging.com/wp-content/uploads/2018/12/034.doc","offline","malware_download","doc,Trickbot","https://urlhaus.abuse.ch/url/88963/"
 "88961","2018-12-04 17:32:04","http://77.48.28.233:2330/iyk.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/88961/"
 "88962","2018-12-04 17:32:04","http://77.48.28.233:2330/pro.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/88962/"
@@ -16590,7 +16730,7 @@
 "88929","2018-12-04 16:11:04","http://vcube-vvp.com/0Tfl6UZQ","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/88929/"
 "88928","2018-12-04 16:00:03","http://tom-steed.com/3708605SRQOW/PAY/Smallbusiness","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/88928/"
 "88927","2018-12-04 15:59:11","https://f.coka.la/GXEACu.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/88927/"
-"88926","2018-12-04 15:59:10","http://a.xiazai163.com/down/ghojingxianganzhuangqiwin10_itmop.com.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/88926/"
+"88926","2018-12-04 15:59:10","http://a.xiazai163.com/down/ghojingxianganzhuangqiwin10_itmop.com.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/88926/"
 "88925","2018-12-04 15:59:02","https://f.coka.la/3vnnZy.jpg","offline","malware_download","exe,NetWire","https://urlhaus.abuse.ch/url/88925/"
 "88924","2018-12-04 15:45:40","https://ruforum.uonbi.ac.ke/wp-content/uploads/8A/PAY/Commercial/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/88924/"
 "88923","2018-12-04 15:45:38","http://bemsar.tevci.org/files/Scan/DETAILS/Rech-IES-22-82270/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/88923/"
@@ -16731,7 +16871,7 @@
 "88788","2018-12-04 11:49:04","http://ellajanelane.com/xphPvmXOzwPSMv/biz/Service-Center","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/88788/"
 "88787","2018-12-04 11:48:03","http://185.162.10.225/update_453234/upl/upd34.exe","offline","malware_download","Gozi,ursnif","https://urlhaus.abuse.ch/url/88787/"
 "88786","2018-12-04 11:44:07","https://laqis.com/privacy/members.php2","offline","malware_download","AUS,exe,Gozi,ursnif","https://urlhaus.abuse.ch/url/88786/"
-"88785","2018-12-04 11:44:05","https://axisplumbingptyltd-my.sharepoint.com/:u:/g/personal/sally_axisplumbingact_com_au/EQM7fgZiIfNNkMsokEqYJDAB5u-5GJSzg0bgUNwPvhOoWg?e=M1nCxM&download=1","online","malware_download","AUS,ursnif,zipped-VBS","https://urlhaus.abuse.ch/url/88785/"
+"88785","2018-12-04 11:44:05","https://axisplumbingptyltd-my.sharepoint.com/:u:/g/personal/sally_axisplumbingact_com_au/EQM7fgZiIfNNkMsokEqYJDAB5u-5GJSzg0bgUNwPvhOoWg?e=M1nCxM&download=1","offline","malware_download","AUS,ursnif,zipped-VBS","https://urlhaus.abuse.ch/url/88785/"
 "88784","2018-12-04 11:37:04","http://www.bendemail.com/js/ckeditor/plugins/image/images/calc.exe","offline","malware_download","exe,Retefe","https://urlhaus.abuse.ch/url/88784/"
 "88783","2018-12-04 11:35:04","http://www.entasiradio.tuc.gr/wp-content/plugins/js_composer/assets/lib/bower/imagesloaded/calc.exe","offline","malware_download","exe,Retefe","https://urlhaus.abuse.ch/url/88783/"
 "88782","2018-12-04 11:25:07","https://intervention123.com/published/simply.php2","offline","malware_download","exe,GBR,ursnif","https://urlhaus.abuse.ch/url/88782/"
@@ -17420,7 +17560,7 @@
 "88080","2018-12-03 01:44:04","http://cataract.ru/b/wiremoney.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/88080/"
 "88079","2018-12-03 01:36:03","http://blog.gothicangelclothing.co.uk/89.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/88079/"
 "88078","2018-12-03 01:08:09","http://198.44.250.45:8888/qqz","offline","malware_download","elf","https://urlhaus.abuse.ch/url/88078/"
-"88077","2018-12-03 01:07:08","http://a.xiazai163.com/down/chuangyiQQliaotianjiluchakanqi_itmop.com.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/88077/"
+"88077","2018-12-03 01:07:08","http://a.xiazai163.com/down/chuangyiQQliaotianjiluchakanqi_itmop.com.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/88077/"
 "88076","2018-12-03 01:06:05","http://snoopy64.000webhostapp.com/bypass.zip","offline","malware_download","exe","https://urlhaus.abuse.ch/url/88076/"
 "88075","2018-12-03 01:06:03","http://snoopy64.000webhostapp.com/update.zip","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/88075/"
 "88074","2018-12-03 00:56:05","http://188.166.59.85/bins/sora.sh4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/88074/"
@@ -18048,7 +18188,7 @@
 "87449","2018-11-30 11:55:21","http://body90.com/3BL/PAYROLL/Smallbusiness","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/87449/"
 "87448","2018-11-30 11:55:20","http://interurbansa.com/En/CM2018","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/87448/"
 "87447","2018-11-30 11:55:18","http://adamenterprisesinc.com/EN/CM2018","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/87447/"
-"87446","2018-11-30 11:55:16","http://dichvuvesinhcongnghiep.top/EN/CM2018-COUPONS/index.php.alert","online","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/87446/"
+"87446","2018-11-30 11:55:16","http://dichvuvesinhcongnghiep.top/EN/CM2018-COUPONS/index.php.alert","offline","malware_download","emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/87446/"
 "87445","2018-11-30 11:44:20","http://xplorar.com.br/VP4vdxIq/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/87445/"
 "87444","2018-11-30 11:44:17","http://teknotown.com/kboOF6KH/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/87444/"
 "87443","2018-11-30 11:41:57","http://dagliprints.com/images/Payment.scr","offline","malware_download","NanoCore","https://urlhaus.abuse.ch/url/87443/"
@@ -19237,7 +19377,7 @@
 "86254","2018-11-28 11:39:06","http://goomark.com.br/default/Rechnungs-docs/Fakturierung/RechnungsDetails-OGM-46-34540","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/86254/"
 "86253","2018-11-28 11:39:04","http://siamnatural.com/5769OLDEF/com/Commercial","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/86253/"
 "86252","2018-11-28 11:39:02","http://westickit.be/39670QD/SWIFT/Smallbusiness","offline","malware_download","emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/86252/"
-"86251","2018-11-28 11:30:14","http://xzb.198424.com/XXGSJYWGXRJ.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/86251/"
+"86251","2018-11-28 11:30:14","http://xzb.198424.com/XXGSJYWGXRJ.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/86251/"
 "86250","2018-11-28 11:30:04","http://178.156.202.127/woah.x64","offline","malware_download","elf","https://urlhaus.abuse.ch/url/86250/"
 "86248","2018-11-28 11:30:03","http://178.156.202.127/woah.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/86248/"
 "86249","2018-11-28 11:30:03","http://178.156.202.127/woah.spc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/86249/"
@@ -19247,7 +19387,7 @@
 "86244","2018-11-28 11:29:02","http://178.156.202.127/woah.arm4","offline","malware_download","elf","https://urlhaus.abuse.ch/url/86244/"
 "86243","2018-11-28 11:28:04","http://178.156.202.127/woah.m68","offline","malware_download","elf","https://urlhaus.abuse.ch/url/86243/"
 "86242","2018-11-28 11:28:03","http://178.156.202.127/woah.mips64","offline","malware_download","elf","https://urlhaus.abuse.ch/url/86242/"
-"86241","2018-11-28 11:14:05","http://xzb.198424.com/cfdanbantoushi.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/86241/"
+"86241","2018-11-28 11:14:05","http://xzb.198424.com/cfdanbantoushi.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/86241/"
 "86240","2018-11-28 11:13:02","http://129.arentuspecial.com/8064","offline","malware_download","lnk,Loader,Nymaim,pwd:1234,zip","https://urlhaus.abuse.ch/url/86240/"
 "86239","2018-11-28 11:01:04","http://142.93.49.204/AB4g5/Josho.m68k","offline","malware_download","elf","https://urlhaus.abuse.ch/url/86239/"
 "86238","2018-11-28 11:01:03","http://209.141.34.113/yakuza.x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/86238/"
@@ -19628,7 +19768,7 @@
 "85862","2018-11-27 23:22:02","http://amerpoint.nichost.ru/YPjEZy7/","offline","malware_download","exe,heodo","https://urlhaus.abuse.ch/url/85862/"
 "85861","2018-11-27 23:21:03","http://jamesoutland.net/US/Coupons","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/85861/"
 "85860","2018-11-27 23:20:03","https://cloud.allsync.com/s/s5sr8jFcHpTmdwK/download","offline","malware_download","zip","https://urlhaus.abuse.ch/url/85860/"
-"85859","2018-11-27 23:16:03","http://ssofhoseuegsgrfnu.ru/t.exe","offline","malware_download","CoinMiner,exe,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/85859/"
+"85859","2018-11-27 23:16:03","http://ssofhoseuegsgrfnu.ru/t.exe","online","malware_download","CoinMiner,exe,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/85859/"
 "85858","2018-11-27 23:15:03","http://ayamgeprekidola.com/849191IK/biz/Business/","offline","malware_download","doc","https://urlhaus.abuse.ch/url/85858/"
 "85857","2018-11-27 23:15:03","https://doc-0s-68-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/lmb0thmeqvo9vhvg6uqm94aa5aplvrap/1543334400000/05984462313861663074/*/19esASJydhkMq-f80TgNobrTh0yUDmgzy","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/85857/"
 "85856","2018-11-27 23:09:03","http://90.253.136.180:51438/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/85856/"
@@ -21855,7 +21995,7 @@
 "83599","2018-11-21 19:20:53","http://www.kudteplo.ru/r1/xls/2014/WARM.TOPL.Q1.2014.xls","online","malware_download","None","https://urlhaus.abuse.ch/url/83599/"
 "83598","2018-11-21 19:20:52","https://svn.cc.jyu.fi/srv/svn/officek09/vesal11/trunk/koontilomake2011.xls","online","malware_download","None","https://urlhaus.abuse.ch/url/83598/"
 "83597","2018-11-21 19:20:47","http://energocompleks.ru/docs/FORM3.1.2014.xls","online","malware_download","None","https://urlhaus.abuse.ch/url/83597/"
-"83596","2018-11-21 19:20:47","http://s-pl.ru/import/price.xls","online","malware_download","None","https://urlhaus.abuse.ch/url/83596/"
+"83596","2018-11-21 19:20:47","http://s-pl.ru/import/price.xls","offline","malware_download","None","https://urlhaus.abuse.ch/url/83596/"
 "83595","2018-11-21 19:20:27","http://notes.town.tillsonburg.on.ca/suiteresponse/egenda%205.0%20ga/egenda50.nsf/7f5bfa3a3fc0a7378525682b0076016d/63c705bc3e8a5bec8525760900520f77/$file/fi083204%20tillsonburg%20t.xls","online","malware_download","None","https://urlhaus.abuse.ch/url/83595/"
 "83592","2018-11-21 19:07:03","https://livedemo00.template-help.com/28736_site/HoeflerText.font.com","offline","malware_download","chthonic,exe","https://urlhaus.abuse.ch/url/83592/"
 "83591","2018-11-21 19:07:02","http://aktifmak.com/wp-admin/EN_US/Attachments/092018","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/83591/"
@@ -22855,7 +22995,7 @@
 "82589","2018-11-19 19:52:22","http://kinapsis.cl/wp-content/uploads/0JDFWGPWS/ACH/Personal/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/82589/"
 "82587","2018-11-19 19:51:51","http://kft.sk/007MNXV/identity/US/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/82587/"
 "82588","2018-11-19 19:51:51","http://khmedia.org/Corporation/XNF8531688JM/3400155/QQ-AZLZ/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/82588/"
-"82586","2018-11-19 19:51:50","http://kdjf.guzaosf.com/xyxd/NBA&%E4%B9%90%E6%B8%B8%E7%9B%92%E5%AD%90_12@128595.exe","online","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/82586/"
+"82586","2018-11-19 19:51:50","http://kdjf.guzaosf.com/xyxd/NBA&%E4%B9%90%E6%B8%B8%E7%9B%92%E5%AD%90_12@128595.exe","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/82586/"
 "82585","2018-11-19 19:51:33","http://kaz.shariki1.kz/Corporation/US/Overdue-payment/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/82585/"
 "82584","2018-11-19 19:51:32","http://katy.voyagemg.net/Document/En/Paid-Invoices/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/82584/"
 "82583","2018-11-19 19:51:26","http://kathamangal.com/1U/BIZ/Business/","offline","malware_download","emotet,heodo","https://urlhaus.abuse.ch/url/82583/"
@@ -24579,7 +24719,7 @@
 "80770","2018-11-15 10:22:09","http://da-amici.com/K0laIZI/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/80770/"
 "80769","2018-11-15 10:22:08","http://rumpunbudiman.com/mTb56a9M/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/80769/"
 "80768","2018-11-15 10:22:06","http://159.65.172.17/4p2PEWnb/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/80768/"
-"80767","2018-11-15 10:22:04","http://www.gauff.co.ug/8nTTllUXDC/","online","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/80767/"
+"80767","2018-11-15 10:22:04","http://www.gauff.co.ug/8nTTllUXDC/","offline","malware_download","emotet,epoch1,exe,heodo","https://urlhaus.abuse.ch/url/80767/"
 "80766","2018-11-15 10:04:08","http://uniquebhutan.com/hrM","offline","malware_download","exe,heodo","https://urlhaus.abuse.ch/url/80766/"
 "80765","2018-11-15 10:04:05","http://selfgifted.pt/OW","offline","malware_download","exe,heodo","https://urlhaus.abuse.ch/url/80765/"
 "80764","2018-11-15 10:04:03","http://jovive.es/Rbd9Y09","offline","malware_download","exe,heodo","https://urlhaus.abuse.ch/url/80764/"
@@ -28702,7 +28842,7 @@
 "76538","2018-11-08 05:06:04","http://raidking.com/EN_US/Payments/112018/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/76538/"
 "76537","2018-11-08 05:06:03","http://pornbeam.com/En_us/Clients_transactions/2018-11/","online","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/76537/"
 "76536","2018-11-08 05:05:02","http://artpowerlist.com/wp-content/EN_US/Information/2018-11/","offline","malware_download","doc,emotet,epoch1,heodo","https://urlhaus.abuse.ch/url/76536/"
-"76535","2018-11-08 04:59:06","http://73.57.94.1:54304/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/76535/"
+"76535","2018-11-08 04:59:06","http://73.57.94.1:54304/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/76535/"
 "76534","2018-11-08 04:59:04","http://24.161.45.223:48976/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/76534/"
 "76533","2018-11-08 04:58:06","http://107.155.153.179/despise.i586","offline","malware_download","elf","https://urlhaus.abuse.ch/url/76533/"
 "76532","2018-11-08 04:58:04","http://107.155.153.179/despise.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/76532/"
@@ -32117,7 +32257,7 @@
 "73098","2018-11-01 11:44:26","http://centralcarqocn.com/jay/Exploit.doc","offline","malware_download","doc","https://urlhaus.abuse.ch/url/73098/"
 "73095","2018-11-01 11:44:24","http://bespokeutilitysolutions.co.uk/sun.sets","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/73095/"
 "73094","2018-11-01 11:44:22","http://aseprom.com/sun.sets","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/73094/"
-"73093","2018-11-01 11:44:19","http://sanliurfakarsiyakataksi.com/theme/nafown.jpg","online","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/73093/"
+"73093","2018-11-01 11:44:19","http://sanliurfakarsiyakataksi.com/theme/nafown.jpg","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/73093/"
 "73092","2018-11-01 11:44:18","https://dealertrafficgenerator.com/Mazi/Revised%20PI.exe","offline","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/73092/"
 "73091","2018-11-01 11:44:15","https://dealertrafficgenerator.com/Mazi/1/Revised%20PI.doc","offline","malware_download","doc","https://urlhaus.abuse.ch/url/73091/"
 "73090","2018-11-01 11:44:13","http://iesagradafamiliapalestina.edu.co/ee.png","offline","malware_download","AZORult,exe,rat","https://urlhaus.abuse.ch/url/73090/"
@@ -33599,7 +33739,7 @@
 "71606","2018-10-27 22:21:02","http://site.2zzz.ru/stat/2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/71606/"
 "71605","2018-10-27 22:08:32","http://hnphqvlmtdcihkk.usa.cc/YrVpRnnsqwq8oEt.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/71605/"
 "71604","2018-10-27 20:57:06","http://balwelstores.com/templates/enmasse_18/html/com_users/login/chrome.jpg","offline","malware_download","exe","https://urlhaus.abuse.ch/url/71604/"
-"71603","2018-10-27 19:56:02","http://188.36.121.184:13746/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/71603/"
+"71603","2018-10-27 19:56:02","http://188.36.121.184:13746/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/71603/"
 "71602","2018-10-27 19:12:03","http://69.202.198.255:62733/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/71602/"
 "71601","2018-10-27 19:11:03","http://81.43.101.247:2187/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/71601/"
 "71600","2018-10-27 18:26:20","http://konstar.hk/imgs/product/cleaner.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/71600/"
@@ -38289,7 +38429,7 @@
 "66864","2018-10-12 01:58:04","http://46.29.166.34/cc9mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/66864/"
 "66863","2018-10-12 01:58:03","http://46.29.166.34/cc9x86","offline","malware_download","elf","https://urlhaus.abuse.ch/url/66863/"
 "66862","2018-10-12 01:58:02","http://46.29.166.34/cc9ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/66862/"
-"66861","2018-10-12 01:52:11","http://soft.114lk.com/wdxtbh.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/66861/"
+"66861","2018-10-12 01:52:11","http://soft.114lk.com/wdxtbh.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/66861/"
 "66860","2018-10-12 00:37:02","http://pleasureingold.de/union.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66860/"
 "66858","2018-10-12 00:27:02","http://pleasureingold.de/documento.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66858/"
 "66859","2018-10-12 00:27:02","http://pleasureingold.de/img00806.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66859/"
@@ -38347,12 +38487,12 @@
 "66806","2018-10-11 15:18:07","http://dx1.qqtn.com/qq/qqdlq.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66806/"
 "66805","2018-10-11 15:15:06","http://dx1.qqtn.com/qq/ddz.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66805/"
 "66804","2018-10-11 15:06:08","http://d1.gamersky.net/updata13/04/gamersky_singularity.1.1.0.trainer.8.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66804/"
-"66803","2018-10-11 15:05:07","http://dx1.qqtn.com/qq/csoldl.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66803/"
+"66803","2018-10-11 15:05:07","http://dx1.qqtn.com/qq/csoldl.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66803/"
 "66802","2018-10-11 14:58:02","http://cascinadellemele.it/uCpTB/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/66802/"
 "66801","2018-10-11 14:57:03","http://sfbotvinnik.icu/folua/dwrite.exe","offline","malware_download","exe,Smoke Loader","https://urlhaus.abuse.ch/url/66801/"
 "66800","2018-10-11 14:56:07","http://dx1.qqtn.com/qq/qqpetnurse.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66800/"
 "66799","2018-10-11 14:47:08","http://dx1.qqtn.com/qq/kjzb.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66799/"
-"66798","2018-10-11 14:39:09","http://dx1.qqtn.com/qq/qqmfkp.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66798/"
+"66798","2018-10-11 14:39:09","http://dx1.qqtn.com/qq/qqmfkp.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66798/"
 "66797","2018-10-11 14:33:05","http://d1.gamersky.net/gamersky/updata/070902fxiankeyouhua.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66797/"
 "66796","2018-10-11 14:27:02","http://185.244.25.200/bins/gemini.arm","offline","malware_download","elf","https://urlhaus.abuse.ch/url/66796/"
 "66795","2018-10-11 14:22:04","http://stroysfera.com.ua/93-78520502289-7208613143877289106.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66795/"
@@ -38381,10 +38521,10 @@
 "66772","2018-10-11 10:54:10","http://www.bygoldi.com/wp-content/themes/wipi/includes/chrome.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/66772/"
 "66771","2018-10-11 10:54:05","http://ashifrifat.com/wp-content/themes/agama/includes/chrome.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/66771/"
 "66770","2018-10-11 10:52:02","http://104.244.76.210/bins/dark.arm5","offline","malware_download","elf","https://urlhaus.abuse.ch/url/66770/"
-"66769","2018-10-11 10:45:18","http://dxdown.2cto.com/ware/201307/0719qqzcrqckq.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66769/"
+"66769","2018-10-11 10:45:18","http://dxdown.2cto.com/ware/201307/0719qqzcrqckq.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66769/"
 "66768","2018-10-11 10:43:03","http://dxdown.2cto.com/ware/0739/macdzsmq.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66768/"
 "66767","2018-10-11 10:42:18","http://dxdown.2cto.com/ware/774710/netbox.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66767/"
-"66766","2018-10-11 10:36:11","http://dxdown.2cto.com/ware/9/skiller3.6.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66766/"
+"66766","2018-10-11 10:36:11","http://dxdown.2cto.com/ware/9/skiller3.6.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66766/"
 "66765","2018-10-11 10:35:21","http://dxdown.2cto.com/ware/201603/office2016KMSpico.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66765/"
 "66764","2018-10-11 10:29:27","http://pay.aqiu6.com/download/WeiPay.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/66764/"
 "66763","2018-10-11 10:29:11","http://dxdown.2cto.com/ware/77471226/Bosskey5.0.0.2cr.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66763/"
@@ -38750,17 +38890,17 @@
 "66392","2018-10-10 00:51:03","http://dx2.qqtn.com/qq/XXHZW2.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66392/"
 "66391","2018-10-10 00:50:12","http://dx2.qqtn.com/QQ/llkxuser.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66391/"
 "66390","2018-10-10 00:50:10","http://gallery.mailchimp.com/e5e323f8390ddd27a48e175ca/files/Factura_Crezcamos.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66390/"
-"66389","2018-10-10 00:50:07","http://dx2.qqtn.com/QQ/QQPetNurse3.01_Beta1.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66389/"
+"66389","2018-10-10 00:50:07","http://dx2.qqtn.com/QQ/QQPetNurse3.01_Beta1.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66389/"
 "66388","2018-10-10 00:45:04","https://gallery.mailchimp.com/30bdf0edb8faf4fb164f8c865/files/WBINBOUNDS.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66388/"
 "66387","2018-10-10 00:38:03","http://gallery.mailchimp.com/5182e3ac85debb9b3b14915a4/files/Swift_Copy.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66387/"
 "66386","2018-10-10 00:37:07","http://dx2.qqtn.com/QQ/olaQQddz1.37.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66386/"
 "66385","2018-10-10 00:37:04","http://dx2.qqtn.com/QQ2/xxjpq.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66385/"
-"66384","2018-10-10 00:37:03","http://dx2.qqtn.com/qq2/jywgxrj.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66384/"
+"66384","2018-10-10 00:37:03","http://dx2.qqtn.com/qq2/jywgxrj.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66384/"
 "66383","2018-10-10 00:36:07","http://gallery.mailchimp.com/8fda4e1d3758c37f74f3de96d/files/inv0ice_0019936.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66383/"
-"66382","2018-10-10 00:36:05","http://dx2.qqtn.com/qq3/bdjpq.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66382/"
+"66382","2018-10-10 00:36:05","http://dx2.qqtn.com/qq3/bdjpq.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66382/"
 "66381","2018-10-10 00:29:10","http://198.1.188.107/ys808e","offline","malware_download","elf","https://urlhaus.abuse.ch/url/66381/"
-"66380","2018-10-10 00:29:08","http://dx2.qqtn.com/qq3/qqlogins.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/66380/"
-"66379","2018-10-10 00:29:06","http://dx2.qqtn.com/qq3/x5lydt.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66379/"
+"66380","2018-10-10 00:29:08","http://dx2.qqtn.com/qq3/qqlogins.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/66380/"
+"66379","2018-10-10 00:29:06","http://dx2.qqtn.com/qq3/x5lydt.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/66379/"
 "66378","2018-10-10 00:28:07","http://dx2.qqtn.com/qq/qq4ddz1.10.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/66378/"
 "66377","2018-10-09 23:40:04","https://luckswatch.com/manageaccount/159AL42425-order-status-fulfilled","offline","malware_download","lnk,sLoad,zip","https://urlhaus.abuse.ch/url/66377/"
 "66376","2018-10-09 23:40:03","https://peoplewithai.com/manageaccount/09D2I543-order-status-fulfilled","offline","malware_download","lnk,sLoad,zip","https://urlhaus.abuse.ch/url/66376/"
@@ -41429,7 +41569,7 @@
 "63678","2018-10-02 15:44:07","http://us.cdn.persiangig.com/dl/eFcspg/vjakfree.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/63678/"
 "63677","2018-10-02 15:44:04","http://us.cdn.persiangig.com/dl/b0HEoI/test.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/63677/"
 "63676","2018-10-02 15:44:03","http://beyondedu.in/En_us/Transaction_details/10_18/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/63676/"
-"63675","2018-10-02 15:36:10","http://bd18.52lishi.com/bd65146.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/63675/"
+"63675","2018-10-02 15:36:10","http://bd18.52lishi.com/bd65146.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/63675/"
 "63674","2018-10-02 15:34:15","http://bd12.52lishi.com/bd64813.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/63674/"
 "63673","2018-10-02 15:22:45","http://thewagelaws.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/63673/"
 "63672","2018-10-02 15:22:39","http://thesecuritieslaws.com","offline","malware_download","None","https://urlhaus.abuse.ch/url/63672/"
@@ -41505,7 +41645,7 @@
 "63602","2018-10-02 14:01:03","http://www.acilisbalon.com/zDLorjW/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/63602/"
 "63601","2018-10-02 14:01:02","http://jany.be/UsCX/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/63601/"
 "63600","2018-10-02 13:58:07","http://bd11.52lishi.com/bd55878.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/63600/"
-"63599","2018-10-02 13:57:05","http://bd11.52lishi.com/bd11536.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/63599/"
+"63599","2018-10-02 13:57:05","http://bd11.52lishi.com/bd11536.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/63599/"
 "63598","2018-10-02 13:45:03","http://anonupload.net/uploads/poipkgde/WindowsFormsApp1.exe","offline","malware_download","exe,ImminentRAT","https://urlhaus.abuse.ch/url/63598/"
 "63597","2018-10-02 13:04:03","http://23.94.53.164/e5rnad8bjk.exe","offline","malware_download","exe,Gozi","https://urlhaus.abuse.ch/url/63597/"
 "63596","2018-10-02 12:19:12","http://ptpjm.co.id/updd/ggp.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/63596/"
@@ -44243,7 +44383,7 @@
 "60814","2018-09-26 10:29:02","https://waraboo.com/US/Clients/092018","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/60814/"
 "60813","2018-09-26 10:21:05","http://142.93.202.209/yakuza.ppc","offline","malware_download","elf","https://urlhaus.abuse.ch/url/60813/"
 "60812","2018-09-26 10:20:07","http://23.249.161.109/chf/vbc.exe","offline","malware_download","exe,NetWire","https://urlhaus.abuse.ch/url/60812/"
-"60811","2018-09-26 10:03:07","https://illdy.azteam.vn/scan/En/Inv-148849-PO-7J428541/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/60811/"
+"60811","2018-09-26 10:03:07","https://illdy.azteam.vn/scan/En/Inv-148849-PO-7J428541/","online","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/60811/"
 "60810","2018-09-26 09:33:08","http://217.160.51.208/Profilo.zip?Applicazione=92616712=info@ideacasacamping.itProfilo.Pdf________________________________________________________________.exe","online","malware_download","zip","https://urlhaus.abuse.ch/url/60810/"
 "60809","2018-09-26 09:33:03","http://a.doko.moe/ukzkkg.dat","offline","malware_download","exe","https://urlhaus.abuse.ch/url/60809/"
 "60808","2018-09-26 09:25:06","https://a.doko.moe/jvcyaf.jpg","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/60808/"
@@ -44962,7 +45102,7 @@
 "60085","2018-09-25 04:01:26","http://xa.yimg.com/kq/groups/18629250/771649578/name/66smedley.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/60085/"
 "60084","2018-09-25 04:01:18","http://jentokonsult.com/Download/US/Invoice-Number-763477","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/60084/"
 "60083","2018-09-25 04:01:09","http://authenzatrading.org/purchase/po.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/60083/"
-"60082","2018-09-25 03:45:15","http://xzc.198424.com/CIJIZHANCZHUZHUXIA.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/60082/"
+"60082","2018-09-25 03:45:15","http://xzc.198424.com/CIJIZHANCZHUZHUXIA.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/60082/"
 "60081","2018-09-25 03:45:06","http://authenzatrading.org/payment/paymentslip.arj","offline","malware_download","rar","https://urlhaus.abuse.ch/url/60081/"
 "60080","2018-09-25 03:37:04","http://78.142.19.78/yakuza.mips","offline","malware_download","elf","https://urlhaus.abuse.ch/url/60080/"
 "60079","2018-09-25 03:26:06","https://xa.yimg.com/kq/groups/18039257/67004241/name/DFr.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/60079/"
@@ -45124,7 +45264,7 @@
 "59921","2018-09-24 18:02:07","http://domberu.ru/US/CLIENTS/09_18/","offline","malware_download","emotet,heodo,macro,word doc","https://urlhaus.abuse.ch/url/59921/"
 "59920","2018-09-24 18:02:05","http://depierresenpierres-maconnerie.com/En_us/ATTACHMENTS/092018/","offline","malware_download","emotet,heodo,macro,word doc","https://urlhaus.abuse.ch/url/59920/"
 "59919","2018-09-24 18:02:04","http://corpusjurisindia.com/US/CLIENTS/09_18/","offline","malware_download","emotet,heodo,macro,word doc","https://urlhaus.abuse.ch/url/59919/"
-"59918","2018-09-24 17:57:04","http://dx.qqtn.com/qq/qqup.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/59918/"
+"59918","2018-09-24 17:57:04","http://dx.qqtn.com/qq/qqup.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59918/"
 "59917","2018-09-24 17:56:14","https://uploader.sx/uploads/2018/5b9fb272.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59917/"
 "59916","2018-09-24 17:56:13","http://dx.qqtn.com/QQ/qqmcshzs.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/59916/"
 "59915","2018-09-24 17:56:07","http://www.winmend.com/pad/download/WinMend-Registry-Defrag.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59915/"
@@ -45132,7 +45272,7 @@
 "59913","2018-09-24 17:55:06","http://uploader.sx/uploads/2018/5b8f1783.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59913/"
 "59912","2018-09-24 17:42:04","http://uploader.sx/uploads/2018/5b9fe536.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/59912/"
 "59911","2018-09-24 17:41:32","http://dx.qqtn.com/qq1/mfqzsprj.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59911/"
-"59910","2018-09-24 17:41:30","http://dx.qqtn.com/qq1/weibollq.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/59910/"
+"59910","2018-09-24 17:41:30","http://dx.qqtn.com/qq1/weibollq.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59910/"
 "59909","2018-09-24 17:41:09","http://gmina.barlinek.sisco.info/zalaczniki/997/Regulamin_4D.doc","offline","malware_download","doc","https://urlhaus.abuse.ch/url/59909/"
 "59908","2018-09-24 17:41:06","http://www.winmend.com/pad/download/WinMend-Auto-Shutdown.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59908/"
 "59907","2018-09-24 17:40:05","http://gmina.barlinek.sisco.info/zalaczniki/863/UCHWALA_NR_XXVI_202_2004.doc","offline","malware_download","doc","https://urlhaus.abuse.ch/url/59907/"
@@ -45156,10 +45296,10 @@
 "59889","2018-09-24 17:22:06","http://192.64.116.236/owiinnilog.doc","offline","malware_download","RTF","https://urlhaus.abuse.ch/url/59889/"
 "59888","2018-09-24 17:22:01","http://uploader.sx/uploads/2018/imgcorp.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/59888/"
 "59887","2018-09-24 17:21:03","https://uploader.sx/uploads/2018/5b901b20.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/59887/"
-"59886","2018-09-24 17:20:19","http://dx.qqtn.com/qq2/qqxwfmjc.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59886/"
+"59886","2018-09-24 17:20:19","http://dx.qqtn.com/qq2/qqxwfmjc.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/59886/"
 "59885","2018-09-24 17:20:11","http://uploader.sx/uploads/2018/sessionvp.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/59885/"
 "59884","2018-09-24 17:20:07","http://uploader.sx/uploads/2018/5b4e2af8.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59884/"
-"59883","2018-09-24 17:07:13","http://dx.qqtn.com/qq1/vdwlyzxt.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59883/"
+"59883","2018-09-24 17:07:13","http://dx.qqtn.com/qq1/vdwlyzxt.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/59883/"
 "59882","2018-09-24 17:06:06","http://uploader.sx/uploads/2018/5b8e507f.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59882/"
 "59881","2018-09-24 17:05:09","http://dx.qqtn.com/qq4/ttrl.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59881/"
 "59880","2018-09-24 17:00:24","http://24.14.188.26/","offline","malware_download","emotet,exe","https://urlhaus.abuse.ch/url/59880/"
@@ -45784,7 +45924,7 @@
 "59259","2018-09-23 17:48:14","http://hy.xz7.com/2013/wenjianchachong.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/59259/"
 "59258","2018-09-23 17:46:46","https://cld.pt/dl/download/6b023368-c760-4f8a-89b5-3236f9801a81/CR0001-30523.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59258/"
 "59257","2018-09-23 17:46:45","http://down.didiwl.com/JXL/QQMBSQ_GR.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/59257/"
-"59256","2018-09-23 17:43:11","http://down.didiwl.com/CL/CNOS_GR.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/59256/"
+"59256","2018-09-23 17:43:11","http://down.didiwl.com/CL/CNOS_GR.ZIP","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59256/"
 "59255","2018-09-23 17:32:06","http://shop.irpointcenter.com/default/En/Jul2018/Invoice-3611200","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59255/"
 "59254","2018-09-23 17:28:11","http://hy.xz7.com/200803/SocksKingPro-CNGR.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/59254/"
 "59253","2018-09-23 17:27:17","http://dl1.mqego.com/LX/WANNJZZH.ZIP","online","malware_download","zip","https://urlhaus.abuse.ch/url/59253/"
@@ -45901,7 +46041,7 @@
 "59141","2018-09-23 05:02:04","http://chantellelouiseweddings.com/695NNPAYMENT/LX51530188546XFIGDR/72360062132/IN-ILB-Aug-10-2018","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59141/"
 "59140","2018-09-23 04:54:04","http://familiekoning.net/Past-Due-Invoices","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59140/"
 "59139","2018-09-23 04:39:21","http://dx.qqtn.com/qq5/qqkjgzmz.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59139/"
-"59138","2018-09-23 04:39:18","http://dx.qqtn.com/qq1/fluxay.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59138/"
+"59138","2018-09-23 04:39:18","http://dx.qqtn.com/qq1/fluxay.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/59138/"
 "59137","2018-09-23 04:38:05","http://rosirs-edu.com/4508U/biz/Business/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59137/"
 "59136","2018-09-23 04:37:03","http://familiekoning.net/FILE/Invoice","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59136/"
 "59135","2018-09-23 04:27:03","http://docs.qualva.io/files/EN_en/Service-Invoice/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59135/"
@@ -45909,11 +46049,11 @@
 "59133","2018-09-23 04:07:08","http://dx.qqtn.com/qq1/mxqqyxdk.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/59133/"
 "59132","2018-09-23 03:56:15","http://dx.qqtn.com/QQ2/360wifiqdq.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/59132/"
 "59131","2018-09-23 03:56:03","http://fs13n5.sendspace.com/dlpro/866d5b214ab497633660248c3c141018/5b9b7e6d/1n6zes/GEMSYS.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59131/"
-"59130","2018-09-23 03:55:07","http://dx.qqtn.com/qq5/163mailgszcj.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59130/"
-"59129","2018-09-23 03:54:09","http://dx.qqtn.com/qq3/lxqqgjx.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59129/"
+"59130","2018-09-23 03:55:07","http://dx.qqtn.com/qq5/163mailgszcj.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/59130/"
+"59129","2018-09-23 03:54:09","http://dx.qqtn.com/qq3/lxqqgjx.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/59129/"
 "59128","2018-09-23 03:53:08","http://dx.qqtn.com/QQ2/xqddxxzzdhq.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59128/"
 "59127","2018-09-23 03:52:02","http://familiekoning.net/Invoice-May","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59127/"
-"59126","2018-09-23 03:43:09","http://dx.qqtn.com/qq/qzone5jihua.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/59126/"
+"59126","2018-09-23 03:43:09","http://dx.qqtn.com/qq/qzone5jihua.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/59126/"
 "59125","2018-09-23 03:06:12","http://172.245.173.145/openssh","offline","malware_download","elf","https://urlhaus.abuse.ch/url/59125/"
 "59124","2018-09-23 03:06:05","http://arena-jer.co.il/9454386CO/oamo/Personal","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59124/"
 "59123","2018-09-23 02:57:05","http://172.245.173.145/pftp","offline","malware_download","elf","https://urlhaus.abuse.ch/url/59123/"
@@ -46033,8 +46173,8 @@
 "59009","2018-09-22 08:22:02","http://beautifulbritain.co.uk/archived_jigsaws/month8/surprise1m8_117.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/59009/"
 "59008","2018-09-22 08:21:03","http://dw.58wangdun.com/sf5/sf.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/59008/"
 "59007","2018-09-22 08:18:09","http://www.ultigamer.com/wp-admin/includes/doc/En_us/OVERDUE-ACCOUNT/Customer-Invoice-SA-43907422","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59007/"
-"59006","2018-09-22 08:12:07","http://dw.58wangdun.com/sf5/sf9.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59006/"
-"59005","2018-09-22 08:11:32","http://dw.58wangdun.com/sf5/rgcom.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59005/"
+"59006","2018-09-22 08:12:07","http://dw.58wangdun.com/sf5/sf9.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/59006/"
+"59005","2018-09-22 08:11:32","http://dw.58wangdun.com/sf5/rgcom.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/59005/"
 "59004","2018-09-22 08:10:43","http://dw.58wangdun.com/sf5/testsf6.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/59004/"
 "59003","2018-09-22 08:10:25","http://www.ultigamer.com/wp-admin/includes/default/En/Aug2018/Payment/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/59003/"
 "59002","2018-09-22 08:10:20","http://dw.58wangdun.com/sf5/testsf8.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/59002/"
@@ -46042,11 +46182,11 @@
 "59000","2018-09-22 08:06:08","http://focuscapitalcorp.com/2082567.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/59000/"
 "58999","2018-09-22 07:55:07","https://gitlab.com/Hazk9382777/natureresourses/raw/master/eric1.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58999/"
 "58998","2018-09-22 07:55:03","http://beautifulbritain.co.uk/archived_jigsaws/month9/surprise17m9_120.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58998/"
-"58997","2018-09-22 07:54:33","http://dw.58wangdun.com/sf5/testssjz.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58997/"
+"58997","2018-09-22 07:54:33","http://dw.58wangdun.com/sf5/testssjz.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/58997/"
 "58996","2018-09-22 07:51:06","http://51.68.120.61/real.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58996/"
 "58995","2018-09-22 07:50:03","http://habarimoto24.com/34147LUV/ACH/Business/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/58995/"
 "58994","2018-09-22 07:49:06","http://focuscapitalcorp.com/3151500668.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58994/"
-"58993","2018-09-22 07:42:08","http://dw.58wangdun.com/sf5/testrgcom.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58993/"
+"58993","2018-09-22 07:42:08","http://dw.58wangdun.com/sf5/testrgcom.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/58993/"
 "58992","2018-09-22 06:50:08","http://dongybavi.com/wp-includes/FILE/US/Open-invoices","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/58992/"
 "58991","2018-09-22 06:26:06","http://millenniumusic.com/1461739.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58991/"
 "58990","2018-09-22 06:24:06","http://zeanhxxjotpqfeu.usa.cc/ex.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58990/"
@@ -46179,7 +46319,7 @@
 "58863","2018-09-21 18:14:07","http://www.skayweb.com/8i.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/58863/"
 "58862","2018-09-21 18:13:25","http://d1.paopaoche.net/x1/huoyanqixi.rar","online","malware_download","rar","https://urlhaus.abuse.ch/url/58862/"
 "58861","2018-09-21 18:12:03","http://gaun.de/typo3conf/files/US/Paid-Invoice-Credit-Card-Receipt","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/58861/"
-"58860","2018-09-21 18:11:23","http://dx114.downyouxi.com/mingxingzhajinhuazhongwenban.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/58860/"
+"58860","2018-09-21 18:11:23","http://dx114.downyouxi.com/mingxingzhajinhuazhongwenban.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58860/"
 "58859","2018-09-21 18:05:29","http://123.249.71.230/svchost.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58859/"
 "58858","2018-09-21 18:05:27","http://d1.paopaoche.net/x1/NinjaGo.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/58858/"
 "58857","2018-09-21 18:04:30","http://d1.paopaoche.net/x1/zhanzhengkuangnu.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/58857/"
@@ -46387,7 +46527,7 @@
 "58652","2018-09-21 11:26:15","http://blog.51cto.com/attachment/201206/4594712_1338695549.rar","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58652/"
 "58651","2018-09-21 11:26:07","http://blog.51cto.com/attachment/201206/4594712_1339300909.rar","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58651/"
 "58650","2018-09-21 11:19:08","http://blog.51cto.com/attachment/201206/4594712_1339560294.rar","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58650/"
-"58649","2018-09-21 11:16:20","http://bd1.52lishi.com/bd60861.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58649/"
+"58649","2018-09-21 11:16:20","http://bd1.52lishi.com/bd60861.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/58649/"
 "58648","2018-09-21 11:15:55","http://wt1.9ht.com/pw/yingloups.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/58648/"
 "58647","2018-09-21 11:14:05","http://wt1.9ht.com/zy/m3k4edit.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58647/"
 "58646","2018-09-21 11:13:14","http://wt1.9ht.com/pw/qqsm.gjfq_9ht.com.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58646/"
@@ -46408,7 +46548,7 @@
 "58628","2018-09-21 10:53:04","http://blog.51cto.com/attachment/201206/4594712_1339387163.rar","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58628/"
 "58627","2018-09-21 10:52:06","http://wt1.9ht.com/zy/moshouzhengbaxgq.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58627/"
 "58626","2018-09-21 10:51:10","http://blog.51cto.com/attachment/201206/4594712_1338868258.rar","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58626/"
-"58625","2018-09-21 10:51:08","http://bd1.52lishi.com/bd79504.zip","offline","malware_download","zip","https://urlhaus.abuse.ch/url/58625/"
+"58625","2018-09-21 10:51:08","http://bd1.52lishi.com/bd79504.zip","online","malware_download","zip","https://urlhaus.abuse.ch/url/58625/"
 "58624","2018-09-21 10:51:04","http://blog.51cto.com/attachment/201205/4594712_1337853814.rar","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58624/"
 "58623","2018-09-21 10:46:14","http://blog.51cto.com/attachment/201205/4594712_1338090141.rar","offline","malware_download","exe","https://urlhaus.abuse.ch/url/58623/"
 "58622","2018-09-21 10:46:09","http://wt1.9ht.com/pw/BATfanbianyiqi.rar","offline","malware_download","rar","https://urlhaus.abuse.ch/url/58622/"
@@ -47119,7 +47259,7 @@
 "57894","2018-09-19 09:32:08","http://rdsviewer.co.in/baby892374.jpg","offline","malware_download","exe,rtfkit","https://urlhaus.abuse.ch/url/57894/"
 "57893","2018-09-19 09:29:08","https://gfss.com.my/php/set.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/57893/"
 "57892","2018-09-19 09:16:42","http://stat.postame.org/wsdtnfivso.exe","offline","malware_download","AUS,DanaBot,geofenced,Sandiflux","https://urlhaus.abuse.ch/url/57892/"
-"57891","2018-09-19 08:55:06","http://78.187.81.159:14460/.i","online","malware_download","elf","https://urlhaus.abuse.ch/url/57891/"
+"57891","2018-09-19 08:55:06","http://78.187.81.159:14460/.i","offline","malware_download","elf","https://urlhaus.abuse.ch/url/57891/"
 "57890","2018-09-19 08:26:07","http://lse-my.asia/servfbtmi.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/57890/"
 "57889","2018-09-19 08:26:06","http://lse-my.asia/dotvmptee.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/57889/"
 "57888","2018-09-19 08:26:04","http://xn----dtbhbqh9ajceeeg2m.org/media/com_finder/matarazzi/F3.exe","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/57888/"
@@ -47440,7 +47580,7 @@
 "57570","2018-09-18 18:39:03","http://dmldrivers.co.uk/Sep2018/EN_en/Invoice-for-y/r-09/14/2018/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/57570/"
 "57569","2018-09-18 18:38:05","http://134.175.189.57/8.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/57569/"
 "57567","2018-09-18 18:37:08","http://92.63.197.48/vnc.exe","offline","malware_download","exe,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/57567/"
-"57566","2018-09-18 18:37:02","http://92.63.197.48/t.exe","offline","malware_download","AZORult,CoinMiner,exe,phorpiex,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/57566/"
+"57566","2018-09-18 18:37:02","http://92.63.197.48/t.exe","online","malware_download","AZORult,CoinMiner,exe,phorpiex,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/57566/"
 "57565","2018-09-18 18:36:15","http://92.63.197.48/o.exe","offline","malware_download","CoinMiner,exe,Ransomware.GandCrab,Smoke Loader","https://urlhaus.abuse.ch/url/57565/"
 "57564","2018-09-18 18:36:08","http://92.63.197.48/v.exe","offline","malware_download","exe,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/57564/"
 "57563","2018-09-18 18:36:03","http://magikgraphics.com/scan/EN_en/5-Past-Due-Invoices","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/57563/"
@@ -48890,7 +49030,7 @@
 "56090","2018-09-13 08:02:14","https://medicalfarmitalia.it/themes/theme1197/modules/blockcurrencies/translations/files/oki.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/56090/"
 "56089","2018-09-13 08:02:11","https://medicalfarmitalia.it/themes/theme1197/modules/blockcurrencies/translations/files/smith.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/56089/"
 "56088","2018-09-13 08:02:09","https://medicalfarmitalia.it/themes/theme1197/modules/blockcurrencies/translations/files/ygx.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/56088/"
-"56087","2018-09-13 08:02:06","https://medicalfarmitalia.it/themes/theme1197/modules/blockcurrencies/translations/files/zyt.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/56087/"
+"56087","2018-09-13 08:02:06","https://medicalfarmitalia.it/themes/theme1197/modules/blockcurrencies/translations/files/zyt.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/56087/"
 "56086","2018-09-13 08:02:05","https://medicalfarmitalia.it/themes/theme1197/modules/blockcurrencies/translations/files/zyt.doc","offline","malware_download","None","https://urlhaus.abuse.ch/url/56086/"
 "56085","2018-09-13 08:02:03","https://medicalfarmitalia.it/themes/theme1197/modules/blockcurrencies/translations/files/ygx.doc","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/56085/"
 "56084","2018-09-13 08:01:57","https://medicalfarmitalia.it/themes/theme1197/modules/blockcurrencies/translations/files/smith.doc","offline","malware_download","None","https://urlhaus.abuse.ch/url/56084/"
@@ -50221,7 +50361,7 @@
 "54731","2018-09-11 07:21:06","http://faithcompassion.com/61165QWIQMQGI/WIRE/Business","offline","malware_download","doc,heodo,macro","https://urlhaus.abuse.ch/url/54731/"
 "54730","2018-09-11 07:21:04","http://designforstartups.co.uk/Download/EN_en/Open-invoices","offline","malware_download","doc,heodo,macro","https://urlhaus.abuse.ch/url/54730/"
 "54729","2018-09-11 07:17:20","http://learning.myworldandi.co.uk/53989DK/SWIFT/Business/","offline","malware_download","doc,heodo","https://urlhaus.abuse.ch/url/54729/"
-"54728","2018-09-11 07:02:55","http://medicalfarmitalia.it/themes/theme1197/modules/blockcurrencies/translations/files/zyt.exe","offline","malware_download","exe,razy","https://urlhaus.abuse.ch/url/54728/"
+"54728","2018-09-11 07:02:55","http://medicalfarmitalia.it/themes/theme1197/modules/blockcurrencies/translations/files/zyt.exe","offline","malware_download","AgentTesla,exe,razy","https://urlhaus.abuse.ch/url/54728/"
 "54727","2018-09-11 07:02:54","http://medicalfarmitalia.it/themes/theme1197/modules/blockcurrencies/translations/files/zyt.doc","offline","malware_download","downloader,RTF,sc","https://urlhaus.abuse.ch/url/54727/"
 "54726","2018-09-11 07:02:53","http://medicalfarmitalia.it/themes/theme1197/modules/blockcurrencies/translations/files/ygx.exe","offline","malware_download","AgentTesla,exe,razy","https://urlhaus.abuse.ch/url/54726/"
 "54725","2018-09-11 07:02:51","http://medicalfarmitalia.it/themes/theme1197/modules/blockcurrencies/translations/files/ygx.doc","offline","malware_download","AgentTesla,downloader,RTF,sc","https://urlhaus.abuse.ch/url/54725/"
@@ -54012,7 +54152,7 @@
 "50882","2018-09-03 06:59:34","http://hwy11-17-hwy582tocoughlin.com/wp-includes/images/file/whe.exe","offline","malware_download","exe,tesla","https://urlhaus.abuse.ch/url/50882/"
 "50881","2018-09-03 06:59:33","http://hwy11-17-hwy582tocoughlin.com/wp-includes/images/file/whe.doc","offline","malware_download","AgentTesla,downloader,RTF","https://urlhaus.abuse.ch/url/50881/"
 "50880","2018-09-03 06:59:32","http://hwy11-17-hwy582tocoughlin.com/wp-includes/images/file/thai.exe","offline","malware_download","AgentTesla,exe,tesla","https://urlhaus.abuse.ch/url/50880/"
-"50878","2018-09-03 06:59:30","http://hwy11-17-hwy582tocoughlin.com/wp-includes/images/file/sodo.exe","offline","malware_download","exe,tesla","https://urlhaus.abuse.ch/url/50878/"
+"50878","2018-09-03 06:59:30","http://hwy11-17-hwy582tocoughlin.com/wp-includes/images/file/sodo.exe","offline","malware_download","AgentTesla,exe,tesla","https://urlhaus.abuse.ch/url/50878/"
 "50879","2018-09-03 06:59:30","http://hwy11-17-hwy582tocoughlin.com/wp-includes/images/file/thai.doc","offline","malware_download","AgentTesla,downloader,RTF","https://urlhaus.abuse.ch/url/50879/"
 "50876","2018-09-03 06:59:28","http://hwy11-17-hwy582tocoughlin.com/wp-includes/images/file/okl.exe","offline","malware_download","AgentTesla,exe,tesla","https://urlhaus.abuse.ch/url/50876/"
 "50877","2018-09-03 06:59:28","http://hwy11-17-hwy582tocoughlin.com/wp-includes/images/file/sodo.doc","offline","malware_download","downloader,RTF","https://urlhaus.abuse.ch/url/50877/"
@@ -54260,7 +54400,7 @@
 "50632","2018-09-01 12:03:35","http://northoutdoors.com/22742093-309559-1878-Nr.zip","offline","malware_download","DEU,Nymaim","https://urlhaus.abuse.ch/url/50632/"
 "50631","2018-09-01 12:03:32","http://www.shataikok.com/28-305465207776-0462-BILL.zip","offline","malware_download","DEU,Nymaim","https://urlhaus.abuse.ch/url/50631/"
 "50630","2018-09-01 12:03:30","http://usanin.info/wp-content/upgrade/578876211073-0047-BILL.zip","offline","malware_download","DEU,Nymaim","https://urlhaus.abuse.ch/url/50630/"
-"50629","2018-09-01 12:03:28","http://consciousbutterfly.com/43-08597550089755-Nummer.zip","online","malware_download","DEU,Nymaim","https://urlhaus.abuse.ch/url/50629/"
+"50629","2018-09-01 12:03:28","http://consciousbutterfly.com/43-08597550089755-Nummer.zip","offline","malware_download","DEU,Nymaim","https://urlhaus.abuse.ch/url/50629/"
 "50628","2018-09-01 12:03:25","http://www.strollingwithus.com/91-9016132358595-Nummer.zip","offline","malware_download","DEU,Nymaim","https://urlhaus.abuse.ch/url/50628/"
 "50627","2018-09-01 12:03:24","http://www.diaoc12h.xyz/036924983713-5530-Buchung.zip","offline","malware_download","DEU,Nymaim","https://urlhaus.abuse.ch/url/50627/"
 "50626","2018-09-01 12:03:20","http://anoopav.com/871211340721-9430-Nummer.zip","offline","malware_download","DEU,Nymaim","https://urlhaus.abuse.ch/url/50626/"
@@ -54415,7 +54555,7 @@
 "50477","2018-09-01 05:29:12","http://jppygfot.sha58.me/d239ec5a21e71059cb8106851869b7a6/LkV8/9NAbz/eitczeqhbw10054.apk","offline","malware_download","zip","https://urlhaus.abuse.ch/url/50477/"
 "50476","2018-09-01 05:29:10","http://umzdjymq.sha58.me/3cbbc9e91d9d5571823ef933a357f371/SVb3/h953p/catsannubl10080.apk","offline","malware_download","zip","https://urlhaus.abuse.ch/url/50476/"
 "50475","2018-09-01 05:29:06","http://caferaa.com/CcCaDi.html","offline","malware_download","None","https://urlhaus.abuse.ch/url/50475/"
-"50474","2018-09-01 05:29:01","http://down10b.zol.com.cn/zoldownload/rdvideo8.2at81_327255.exe","online","malware_download","exe,Fuery","https://urlhaus.abuse.ch/url/50474/"
+"50474","2018-09-01 05:29:01","http://down10b.zol.com.cn/zoldownload/rdvideo8.2at81_327255.exe","offline","malware_download","exe,Fuery","https://urlhaus.abuse.ch/url/50474/"
 "50473","2018-09-01 05:28:51","http://180.153.105.169/dlied6.qq.com/invc/conn_android/drivers/PhoneDockInstaller_5.8.0.6.exe?mkey=5b70c60f0219b226&f=a122&c=0&p=.exe","online","malware_download","exe","https://urlhaus.abuse.ch/url/50473/"
 "50472","2018-09-01 05:28:36","http://6ip.us/","offline","malware_download","None","https://urlhaus.abuse.ch/url/50472/"
 "50471","2018-09-01 05:28:29","http://down.wlds.net/mtv_setup.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/50471/"
@@ -54430,8 +54570,8 @@
 "50461","2018-09-01 05:26:58","http://uebhyhxw.afgktv.cn/1/44278-C01","online","malware_download","zip","https://urlhaus.abuse.ch/url/50461/"
 "50460","2018-09-01 05:26:50","http://iuwrwcvz.applekid.cn/1/44217-C01","offline","malware_download","zip","https://urlhaus.abuse.ch/url/50460/"
 "50459","2018-09-01 05:26:44","http://aimmvqsf.ahhxdl.cn/1/42062-C01","offline","malware_download","zip","https://urlhaus.abuse.ch/url/50459/"
-"50458","2018-09-01 05:26:37","http://xblbnlws.appdoit.cn/1/42046-C01","offline","malware_download","zip","https://urlhaus.abuse.ch/url/50458/"
-"50457","2018-09-01 05:26:23","http://aygwzxqa.applekid.cn/1/42046-C01","offline","malware_download","zip","https://urlhaus.abuse.ch/url/50457/"
+"50458","2018-09-01 05:26:37","http://xblbnlws.appdoit.cn/1/42046-C01","online","malware_download","zip","https://urlhaus.abuse.ch/url/50458/"
+"50457","2018-09-01 05:26:23","http://aygwzxqa.applekid.cn/1/42046-C01","online","malware_download","zip","https://urlhaus.abuse.ch/url/50457/"
 "50456","2018-09-01 05:26:10","http://tpjsgq.loan/","offline","malware_download","None","https://urlhaus.abuse.ch/url/50456/"
 "50455","2018-09-01 05:26:06","http://one.wing138.info/glib","offline","malware_download","None","https://urlhaus.abuse.ch/url/50455/"
 "50454","2018-09-01 05:26:01","http://r06.yunshangduan.cn/sg_p465761.psd","offline","malware_download","None","https://urlhaus.abuse.ch/url/50454/"
@@ -54453,7 +54593,7 @@
 "50439","2018-09-01 05:25:09","http://transport.watra.com.pl/22DTLLC/MQ2348645ZK/Aug-09-2018-6232055038/WHDR-SEANQ-Aug-09-2018/","offline","malware_download","None","https://urlhaus.abuse.ch/url/50439/"
 "50437","2018-09-01 05:25:07","http://www.stahuj.cz/primo/downloader/08971501a37d30eab99f9d3df0fd9830/facebook-messenger-seznam-listicka.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/50437/"
 "50436","2018-09-01 05:25:07","http://www.stahuj.cz/primo/downloader/c96b0d6647da782d30d847050617c9a0/minecraft-seznam-listicka.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/50436/"
-"50435","2018-09-01 05:25:06","http://download.glzip.cn:80/n/tui/update_agency/v1.0.3.0/kzupdateagency-2.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/50435/"
+"50435","2018-09-01 05:25:06","http://download.glzip.cn:80/n/tui/update_agency/v1.0.3.0/kzupdateagency-2.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/50435/"
 "50434","2018-09-01 05:24:57","http://srjrgd.loan/","offline","malware_download","None","https://urlhaus.abuse.ch/url/50434/"
 "50433","2018-09-01 05:24:52","http://dfsd.actfans.com/jkm/44217.apk","offline","malware_download","None","https://urlhaus.abuse.ch/url/50433/"
 "50432","2018-09-01 05:24:41","http://www.vwqze.info/","offline","malware_download","None","https://urlhaus.abuse.ch/url/50432/"
@@ -54926,7 +55066,7 @@
 "49962","2018-08-31 05:11:36","http://denuchoco.com/88710RK/PAY/Personal","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/49962/"
 "49961","2018-08-31 05:11:32","http://creativdental.com/files/US/Invoice-4114426/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/49961/"
 "49960","2018-08-31 05:11:31","http://cradiant.com/xerox/En/Invoice-84096752/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/49960/"
-"49959","2018-08-31 05:11:29","http://congresorecursoshumanos.com/files/US/Document-needed/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/49959/"
+"49959","2018-08-31 05:11:29","http://congresorecursoshumanos.com/files/US/Document-needed/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/49959/"
 "49958","2018-08-31 05:11:21","http://comagape.com/scan/En/Need-to-send-the-attachment/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/49958/"
 "49957","2018-08-31 05:11:19","http://cogeainternational.com/sites/EN_en/261-03-099628-581-261-03-099628-966/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/49957/"
 "49956","2018-08-31 05:11:17","http://cialisonline-bestoffer.com/INFO/US/Need-to-send-the-attachment/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/49956/"
@@ -56341,7 +56481,7 @@
 "48527","2018-08-28 08:30:16","http://www.saudenatural.ml/518831247.zip","offline","malware_download","DEU,Nymaim","https://urlhaus.abuse.ch/url/48527/"
 "48526","2018-08-28 08:30:14","http://aaparth.com/css/syntax/630986507.zip","offline","malware_download","DEU,Nymaim","https://urlhaus.abuse.ch/url/48526/"
 "48525","2018-08-28 08:30:11","http://www.innerspace.in/047960408.zip","offline","malware_download","DEU,Nymaim","https://urlhaus.abuse.ch/url/48525/"
-"48524","2018-08-28 08:30:07","http://newarkpdmonitor.com/wp-includes/theme-compat/2489162.zip","offline","malware_download","DEU,Nymaim","https://urlhaus.abuse.ch/url/48524/"
+"48524","2018-08-28 08:30:07","http://newarkpdmonitor.com/wp-includes/theme-compat/2489162.zip","online","malware_download","DEU,Nymaim","https://urlhaus.abuse.ch/url/48524/"
 "48523","2018-08-28 08:30:01","http://updates.traksoftwaresolutions.com/DesignerTrak/5286658013.zip","offline","malware_download","DEU,Nymaim","https://urlhaus.abuse.ch/url/48523/"
 "48522","2018-08-28 08:29:58","http://systemy-sterowania.pl/phpmyadmin/doc/html/942459850.zip","offline","malware_download","DEU,Nymaim","https://urlhaus.abuse.ch/url/48522/"
 "48521","2018-08-28 08:29:56","http://kdkonline.com/banner/Buchungsnummer-529731617.zip","offline","malware_download","DEU,Nymaim","https://urlhaus.abuse.ch/url/48521/"
@@ -56654,7 +56794,7 @@
 "48210","2018-08-28 04:09:22","http://demicolon.com/dvrguru_revoerror/image/0615694GSH/SEP/Commercial/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/48210/"
 "48209","2018-08-28 04:09:19","http://daffodilssurguja.com/Aug2018/En/Invoice-83372590-August/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/48209/"
 "48208","2018-08-28 04:09:18","http://d.techmartbd.com/3RFBV/com/Business/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/48208/"
-"48207","2018-08-28 04:09:15","http://congresorecursoshumanos.com/INFO/En_us/Invoices-Overdue/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/48207/"
+"48207","2018-08-28 04:09:15","http://congresorecursoshumanos.com/INFO/En_us/Invoices-Overdue/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/48207/"
 "48206","2018-08-28 04:09:13","http://conacero.org/4812JYVNDGJ/PAYROLL/Business/","offline","malware_download","doc,emotet","https://urlhaus.abuse.ch/url/48206/"
 "48205","2018-08-28 04:09:12","http://cjmont41.fr/313FA/PAYMENT/US","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/48205/"
 "48204","2018-08-28 04:09:10","http://cio-spb.ru/051205UFNFBO/ACH/Business/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/48204/"
@@ -62451,8 +62591,8 @@
 "42379","2018-08-14 04:27:57","http://profsouz55.ru/187TEQCorporation/GU414658JP/6889361/UT-BJFB/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/42379/"
 "42378","2018-08-14 04:27:56","http://portraitworkshop.com/7YLLC/PT89473QKBDR/Aug-10-2018-418457584/TF-RVZCN/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/42378/"
 "42377","2018-08-14 04:27:54","http://platgesdetossa.com/9MVPAY/PM7479962OYV/13317/BDR-SZVGQ-Aug-10-2018/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/42377/"
-"42376","2018-08-14 04:27:53","http://pink99.com/logsite/694JDOC/OLKZ41786YBM/Aug-09-2018-90671945734/SBS-ZOMVI-Aug-09-2018/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/42376/"
-"42375","2018-08-14 04:27:04","http://pink99.com/logsite/0LDDOC/TKA1833163913SOXCJH/Aug-11-2018-06005952849/NVS-VJXV/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/42375/"
+"42376","2018-08-14 04:27:53","http://pink99.com/logsite/694JDOC/OLKZ41786YBM/Aug-09-2018-90671945734/SBS-ZOMVI-Aug-09-2018/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/42376/"
+"42375","2018-08-14 04:27:04","http://pink99.com/logsite/0LDDOC/TKA1833163913SOXCJH/Aug-11-2018-06005952849/NVS-VJXV/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/42375/"
 "42374","2018-08-14 04:26:51","http://piksel-studio.pl/007TIRACH/QUD25084044VDMPQ/Aug-10-2018-174081/HW-WKS/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/42374/"
 "42373","2018-08-14 04:26:49","http://pfbadminton.com.au/1UIIFILE/GY5467080510LEGO/Aug-10-2018-90553567917/PZO-INY/","offline","malware_download","doc,emotet","https://urlhaus.abuse.ch/url/42373/"
 "42372","2018-08-14 04:26:48","http://petertretter.com/65ZCICorporation/UOJC64092DCTETK/053537/CYEK-JBUA-Aug-11-2018/","offline","malware_download","doc,emotet","https://urlhaus.abuse.ch/url/42372/"
@@ -70166,7 +70306,7 @@
 "34572","2018-07-19 18:07:07","http://supplierslip.com/Q10/c15281bd2de23ae948749934ea5ef7a650308.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/34572/"
 "34571","2018-07-19 18:07:06","http://supplierslip.com/Q10/c1528ea1562a3659bbafa665defc1665bd279.exe","offline","malware_download","exe,HawkEye","https://urlhaus.abuse.ch/url/34571/"
 "34570","2018-07-19 18:07:05","http://legrand.ba/typo3conf/ext/7878.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/34570/"
-"34569","2018-07-19 18:04:13","http://lhzs.923yx.com/others/down/lhzs2323yx.exe","online","malware_download","exe,Fuery,trojan","https://urlhaus.abuse.ch/url/34569/"
+"34569","2018-07-19 18:04:13","http://lhzs.923yx.com/others/down/lhzs2323yx.exe","offline","malware_download","exe,Fuery,trojan","https://urlhaus.abuse.ch/url/34569/"
 "34568","2018-07-19 17:49:04","http://uploadtops.is/3/T/2u8uYBb","offline","malware_download","exe,NetWire","https://urlhaus.abuse.ch/url/34568/"
 "34567","2018-07-19 17:32:06","http://daytonohseo.com/new.qz","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/34567/"
 "34566","2018-07-19 17:32:04","http://clevelandohseo.com/new.qz","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/34566/"
@@ -73548,7 +73688,7 @@
 "31106","2018-07-12 02:35:38","http://innadesign.pl/sites/US/ACCOUNT/022125/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/31106/"
 "31104","2018-07-12 02:35:36","http://hanzadetekstil.com/sites/US/Statement/Invoice-1698882/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/31104/"
 "31105","2018-07-12 02:35:36","http://ilsaspreiter.com/newsletter/En/OVERDUE-ACCOUNT/641708/","offline","malware_download","doc,emotet,epoch2","https://urlhaus.abuse.ch/url/31105/"
-"31103","2018-07-12 02:35:34","http://gubremontpc.ru/doc/Rechnungs-Details/Rechnungsanschrift/Fakturierung-TY-97-53438/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/31103/"
+"31103","2018-07-12 02:35:34","http://gubremontpc.ru/doc/Rechnungs-Details/Rechnungsanschrift/Fakturierung-TY-97-53438/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/31103/"
 "31102","2018-07-12 02:35:33","http://flcquynhon.net/files/En_us/Order/ACCOUNT83766794/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/31102/"
 "31101","2018-07-12 02:35:29","http://e-xposure.com/newsletter/US_us/Payment-and-address/Customer-Invoice-IM-72456115/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/31101/"
 "31100","2018-07-12 02:35:27","http://event-flower.ru/default/US_us/Statement/49211/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/31100/"
@@ -74085,7 +74225,7 @@
 "30561","2018-07-11 04:16:35","http://www.sirotrade.com/DE/Fakturierung/Rech-0072-852/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30561/"
 "30560","2018-07-11 04:16:34","http://www.simurgkusyuvasi.org/default/US/ACCOUNT/Customer-Invoice-LQ-50698164/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30560/"
 "30559","2018-07-11 04:16:33","http://www.simplicitylondon.com/Jul2018/US/Purchase/Invoice-8989120/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30559/"
-"30558","2018-07-11 04:16:32","http://www.simblissity.co.uk/sites/En/FILE/Invoice-36067213276-07-10-2018/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30558/"
+"30558","2018-07-11 04:16:32","http://www.simblissity.co.uk/sites/En/FILE/Invoice-36067213276-07-10-2018/","online","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30558/"
 "30557","2018-07-11 04:16:31","http://www.shrimahaveerinfrastate.in/doc/US/INVOICE-STATUS/Invoice/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30557/"
 "30556","2018-07-11 04:16:30","http://www.shortinspirationalstories.com/DE_de/Zahlung/in-Rechnung-gestellt-038-533/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30556/"
 "30555","2018-07-11 04:16:29","http://www.shoreshot.photos/pdf/US/DOC/Invoice-5296301984-07-10-2018/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/30555/"
@@ -74855,7 +74995,7 @@
 "29771","2018-07-10 08:01:02","http://idontknow.moe/files/xzeihw","offline","malware_download","exe","https://urlhaus.abuse.ch/url/29771/"
 "29770","2018-07-10 07:59:03","http://idontknow.moe/files/giotzr","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/29770/"
 "29769","2018-07-10 07:59:03","https://u.teknik.io/RuMP7.hta","offline","malware_download","hta","https://urlhaus.abuse.ch/url/29769/"
-"29768","2018-07-10 07:58:02","http://ngyusa.com/payment/htanelson.hta","offline","malware_download","hta","https://urlhaus.abuse.ch/url/29768/"
+"29768","2018-07-10 07:58:02","http://ngyusa.com/payment/htanelson.hta","online","malware_download","hta","https://urlhaus.abuse.ch/url/29768/"
 "29767","2018-07-10 07:55:18","https://lomale.xyz/shaq999999.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/29767/"
 "29765","2018-07-10 07:43:03","http://idontknow.moe/files/fjnfhx","offline","malware_download","exe,Formbook","https://urlhaus.abuse.ch/url/29765/"
 "29766","2018-07-10 07:43:03","http://idontknow.moe/files/injwgl","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/29766/"
@@ -75617,7 +75757,7 @@
 "29004","2018-07-06 17:34:06","http://www.shelleylamb.com/TKf2J/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/29004/"
 "29003","2018-07-06 17:34:05","http://www.stmlenergy.co.uk/JxbI/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/29003/"
 "29002","2018-07-06 17:34:05","http://www.stonedesigncenter.es/Yk2wT89/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/29002/"
-"29001","2018-07-06 17:34:04","http://www.simblissity.co.uk/D8zsDLV/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/29001/"
+"29001","2018-07-06 17:34:04","http://www.simblissity.co.uk/D8zsDLV/","online","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/29001/"
 "29000","2018-07-06 17:34:03","http://www.shangrila-escapes.com/4Z69ffL/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/29000/"
 "28999","2018-07-06 17:29:06","http://miraclementordisc.com/yg2/test/obi.exe","offline","malware_download","Barys,exe,HawkEye","https://urlhaus.abuse.ch/url/28999/"
 "28998","2018-07-06 17:29:03","http://miraclementordisc.com/yg2/test/obi.doc","offline","malware_download","CVE201711882,downloader,HawkEye,RTF","https://urlhaus.abuse.ch/url/28998/"
@@ -79674,7 +79814,7 @@
 "24888","2018-06-28 11:47:16","https://lokipanelhostingnew.cf/wordpress/wp-includes/images/wlw/suu2.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/24888/"
 "24887","2018-06-28 11:25:03","http://electrofluxequipmentspvtltd.com/pl.bin","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/24887/"
 "24886","2018-06-28 11:23:04","http://goloramltd.com/pl.bin","offline","malware_download","exe,Trickbot","https://urlhaus.abuse.ch/url/24886/"
-"24885","2018-06-28 10:46:03","http://ngyusa.com/systems/htazeco.hta","offline","malware_download","hta","https://urlhaus.abuse.ch/url/24885/"
+"24885","2018-06-28 10:46:03","http://ngyusa.com/systems/htazeco.hta","online","malware_download","hta","https://urlhaus.abuse.ch/url/24885/"
 "24884","2018-06-28 10:45:26","http://zkke2.usa.cc/rec/Invo.exe","offline","malware_download","exe,Loki,Pony","https://urlhaus.abuse.ch/url/24884/"
 "24883","2018-06-28 10:45:23","https://dkb-agbs.com/securessl/internet.exe","offline","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/24883/"
 "24882","2018-06-28 10:45:21","http://www.sabarasourcing.com/mo.bin","offline","malware_download",",emotet","https://urlhaus.abuse.ch/url/24882/"
@@ -79772,7 +79912,7 @@
 "24790","2018-06-28 08:11:03","http://jessicalinden.net/wp-ftp/hg.exe","online","malware_download","exe,lokibot","https://urlhaus.abuse.ch/url/24790/"
 "24789","2018-06-28 08:11:02","http://jessicalinden.net/wp-ftp/ghh.exe","online","malware_download","exe,Loki,lokibot","https://urlhaus.abuse.ch/url/24789/"
 "24784","2018-06-28 08:06:04","http://mail.transmisiones.pe/contactlist/likethat.exe","offline","malware_download","AgentTesla,exe","https://urlhaus.abuse.ch/url/24784/"
-"24783","2018-06-28 08:02:02","http://ngyusa.com/systems/htanelson.hta","offline","malware_download","hta","https://urlhaus.abuse.ch/url/24783/"
+"24783","2018-06-28 08:02:02","http://ngyusa.com/systems/htanelson.hta","online","malware_download","hta","https://urlhaus.abuse.ch/url/24783/"
 "24782","2018-06-28 07:52:10","http://busanopen.org/Club/FOUR.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/24782/"
 "24781","2018-06-28 07:49:03","http://131.153.38.125/pacbell.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/24781/"
 "24780","2018-06-28 07:48:03","http://www.fpmtutomobili.com/infos.exe","offline","malware_download","exe","https://urlhaus.abuse.ch/url/24780/"
@@ -79789,7 +79929,7 @@
 "24769","2018-06-28 07:14:05","http://www.staging.michaelpeachey.com.au/ZcVc/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/24769/"
 "24768","2018-06-28 07:14:02","http://www.bathoff.ru/Xfj9H/","offline","malware_download","emotet,exe,heodo","https://urlhaus.abuse.ch/url/24768/"
 "24767","2018-06-28 07:08:03","http://arasscofood.com/b/a.exe","offline","malware_download","exe,Formbook,graftor","https://urlhaus.abuse.ch/url/24767/"
-"24766","2018-06-28 06:25:03","http://ngyusa.com/systems/htabukas.hta","offline","malware_download","hta","https://urlhaus.abuse.ch/url/24766/"
+"24766","2018-06-28 06:25:03","http://ngyusa.com/systems/htabukas.hta","online","malware_download","hta","https://urlhaus.abuse.ch/url/24766/"
 "24765","2018-06-28 06:20:05","http://82.146.45.146/2ndhand1.exe","offline","malware_download","exe,Loki","https://urlhaus.abuse.ch/url/24765/"
 "24764","2018-06-28 05:50:28","http://mail.who-paid-more.com/facture/","offline","malware_download","tinynuke,zip","https://urlhaus.abuse.ch/url/24764/"
 "24763","2018-06-28 05:50:23","http://mail.wework-austria.com/facture/","offline","malware_download","tinynuke,zip","https://urlhaus.abuse.ch/url/24763/"
@@ -84740,7 +84880,7 @@
 "19702","2018-06-15 15:29:25","http://numaipartners.com/Invoices-Overdue/","offline","malware_download","None","https://urlhaus.abuse.ch/url/19702/"
 "19701","2018-06-15 15:29:24","http://nothingreally.com/Invoice-194489-83545/","offline","malware_download","None","https://urlhaus.abuse.ch/url/19701/"
 "19700","2018-06-15 15:29:22","http://kenroof.com/wmv4j-zn355-fokat/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/19700/"
-"19699","2018-06-15 15:29:20","http://hrigeneva.com/_private/download4049/","online","malware_download","None","https://urlhaus.abuse.ch/url/19699/"
+"19699","2018-06-15 15:29:20","http://hrigeneva.com/_private/download4049/","offline","malware_download","None","https://urlhaus.abuse.ch/url/19699/"
 "19698","2018-06-15 15:29:19","http://itrenaissance.com/INVOICE-234436-28819/","offline","malware_download","None","https://urlhaus.abuse.ch/url/19698/"
 "19697","2018-06-15 15:29:17","http://groupschina.com/ssfm/MOL-94-89104-doc-May-05-2017/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/19697/"
 "19696","2018-06-15 15:29:15","http://elitesignsonline.com/Mv7s-K58-T/","offline","malware_download","heodo","https://urlhaus.abuse.ch/url/19696/"
@@ -87481,7 +87621,7 @@
 "16891","2018-06-08 15:20:06","http://92.63.197.60/o.exe","offline","malware_download","CoinMiner,Fuerboos,heodo,IRCbot,Neurevt,phorpiex,Pony,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/16891/"
 "16889","2018-06-08 15:20:05","http://92.63.197.60/m.exe","offline","malware_download","AZORult,CoinMiner,heodo,IRCbot,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/16889/"
 "16890","2018-06-08 15:20:05","http://92.63.197.60/r.exe","offline","malware_download","IRCbot,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/16890/"
-"16888","2018-06-08 15:20:03","http://92.63.197.60/t.exe","offline","malware_download","AZORult,CoinMiner,Fuerboos,Fuery,IRCbot,phorpiex,Pony,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/16888/"
+"16888","2018-06-08 15:20:03","http://92.63.197.60/t.exe","online","malware_download","AZORult,CoinMiner,Fuerboos,Fuery,IRCbot,phorpiex,Pony,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/16888/"
 "16887","2018-06-08 15:20:02","http://92.63.197.60/c.exe","offline","malware_download","Fuerboos,IRCbot,Pony,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/16887/"
 "16886","2018-06-08 15:14:08","http://hotedeals.co.uk/Outstanding-Invoices-June/07/2018/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/16886/"
 "16885","2018-06-08 15:14:06","http://allisonbessblog.com/Past-Due-Invoices-June/","offline","malware_download","doc,emotet,epoch2,heodo","https://urlhaus.abuse.ch/url/16885/"
@@ -92981,44 +93121,44 @@
 "11105","2018-05-18 12:17:25","http://www.vesinee.com/coli1.exe","offline","malware_download","Loki","https://urlhaus.abuse.ch/url/11105/"
 "11104","2018-05-18 12:17:13","http://www.vesinee.com/ben.exe","offline","malware_download","Loki","https://urlhaus.abuse.ch/url/11104/"
 "11103","2018-05-18 12:16:47","http://mine.zarabotaibitok.ru/download/autonomic/ServerHS.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/11103/"
-"11102","2018-05-18 12:12:18","http://mine.zarabotaibitok.ru/Downloads/Servise/Instaler.zip","online","malware_download","None","https://urlhaus.abuse.ch/url/11102/"
-"11101","2018-05-18 12:11:53","http://mine.zarabotaibitok.ru/Downloads/Servise/System.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/11101/"
-"11100","2018-05-18 12:11:13","http://mine.zarabotaibitok.ru/Downloads/Servise/Updater.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/11100/"
-"11099","2018-05-18 12:10:29","http://mine.zarabotaibitok.ru/Downloads/Servise/Updater1.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/11099/"
-"11098","2018-05-18 12:09:51","http://mine.zarabotaibitok.ru/Downloads/Servise/jusched_srv.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/11098/"
-"11097","2018-05-18 12:08:44","http://mine.zarabotaibitok.ru/Downloads/Servise/jusched_srv13.exe","online","malware_download","Ransomware.GandCrab","https://urlhaus.abuse.ch/url/11097/"
-"11096","2018-05-18 12:08:06","http://mine.zarabotaibitok.ru/Downloads/Servise/jusched_srv14.exe","online","malware_download","AgentTesla,njRAT","https://urlhaus.abuse.ch/url/11096/"
-"11095","2018-05-18 12:07:17","http://mine.zarabotaibitok.ru/Downloads/Servise/jusched_srv16.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/11095/"
+"11102","2018-05-18 12:12:18","http://mine.zarabotaibitok.ru/Downloads/Servise/Instaler.zip","offline","malware_download","None","https://urlhaus.abuse.ch/url/11102/"
+"11101","2018-05-18 12:11:53","http://mine.zarabotaibitok.ru/Downloads/Servise/System.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/11101/"
+"11100","2018-05-18 12:11:13","http://mine.zarabotaibitok.ru/Downloads/Servise/Updater.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/11100/"
+"11099","2018-05-18 12:10:29","http://mine.zarabotaibitok.ru/Downloads/Servise/Updater1.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/11099/"
+"11098","2018-05-18 12:09:51","http://mine.zarabotaibitok.ru/Downloads/Servise/jusched_srv.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/11098/"
+"11097","2018-05-18 12:08:44","http://mine.zarabotaibitok.ru/Downloads/Servise/jusched_srv13.exe","offline","malware_download","Ransomware.GandCrab","https://urlhaus.abuse.ch/url/11097/"
+"11096","2018-05-18 12:08:06","http://mine.zarabotaibitok.ru/Downloads/Servise/jusched_srv14.exe","offline","malware_download","AgentTesla,njRAT","https://urlhaus.abuse.ch/url/11096/"
+"11095","2018-05-18 12:07:17","http://mine.zarabotaibitok.ru/Downloads/Servise/jusched_srv16.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/11095/"
 "11094","2018-05-18 12:06:24","http://mine.zarabotaibitok.ru/Downloads/Servise/reneme_run.bat","offline","malware_download","None","https://urlhaus.abuse.ch/url/11094/"
-"11093","2018-05-18 12:06:22","http://mine.zarabotaibitok.ru/Downloads/Servise/Instaler.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/11093/"
-"11092","2018-05-18 12:05:23","http://mine.zarabotaibitok.ru/Downloads/Rundll/instsrv.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/11092/"
-"11091","2018-05-18 12:05:21","http://mine.zarabotaibitok.ru/Downloads/Rundll/new.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/11091/"
-"11090","2018-05-18 12:04:30","http://mine.zarabotaibitok.ru/Downloads/Rundll/srvany.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/11090/"
-"11089","2018-05-18 12:04:28","http://mine.zarabotaibitok.ru/Downloads/Modul/Clean.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/11089/"
+"11093","2018-05-18 12:06:22","http://mine.zarabotaibitok.ru/Downloads/Servise/Instaler.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/11093/"
+"11092","2018-05-18 12:05:23","http://mine.zarabotaibitok.ru/Downloads/Rundll/instsrv.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/11092/"
+"11091","2018-05-18 12:05:21","http://mine.zarabotaibitok.ru/Downloads/Rundll/new.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/11091/"
+"11090","2018-05-18 12:04:30","http://mine.zarabotaibitok.ru/Downloads/Rundll/srvany.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/11090/"
+"11089","2018-05-18 12:04:28","http://mine.zarabotaibitok.ru/Downloads/Modul/Clean.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/11089/"
 "11088","2018-05-18 12:04:20","http://mine.zarabotaibitok.ru/Downloads/Modul/Clean.vbs","offline","malware_download","None","https://urlhaus.abuse.ch/url/11088/"
 "11087","2018-05-18 12:04:13","http://mine.zarabotaibitok.ru/Downloads/Modul/SystemNT.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/11087/"
 "11086","2018-05-18 12:03:20","http://mine.zarabotaibitok.ru/Downloads/Modul/SystemNT.zip","offline","malware_download","None","https://urlhaus.abuse.ch/url/11086/"
-"11085","2018-05-18 12:02:26","http://mine.zarabotaibitok.ru/Downloads/Modul/load.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/11085/"
+"11085","2018-05-18 12:02:26","http://mine.zarabotaibitok.ru/Downloads/Modul/load.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/11085/"
 "11084","2018-05-18 12:01:53","http://mine.zarabotaibitok.ru/Downloads/Modul/load.zip","offline","malware_download","None","https://urlhaus.abuse.ch/url/11084/"
 "11083","2018-05-18 12:01:40","http://mine.zarabotaibitok.ru/Downloads/Modul/load1.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/11083/"
 "11082","2018-05-18 12:00:58","http://mine.zarabotaibitok.ru/Downloads/Modul/load_old.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/11082/"
 "11081","2018-05-18 12:00:19","http://mine.zarabotaibitok.ru/Downloads/Miner_Xmrig/X86/SystemNT.exe","offline","malware_download","AgentTesla,Gozi","https://urlhaus.abuse.ch/url/11081/"
-"11080","2018-05-18 11:59:14","http://mine.zarabotaibitok.ru/Downloads/Miner_Xmrig/X86/SystemNT.zip","online","malware_download","None","https://urlhaus.abuse.ch/url/11080/"
-"11079","2018-05-18 11:58:47","http://mine.zarabotaibitok.ru/Downloads/Miner_Xmrig/X64/SystemNT.zip","online","malware_download","None","https://urlhaus.abuse.ch/url/11079/"
+"11080","2018-05-18 11:59:14","http://mine.zarabotaibitok.ru/Downloads/Miner_Xmrig/X86/SystemNT.zip","offline","malware_download","None","https://urlhaus.abuse.ch/url/11080/"
+"11079","2018-05-18 11:58:47","http://mine.zarabotaibitok.ru/Downloads/Miner_Xmrig/X64/SystemNT.zip","offline","malware_download","None","https://urlhaus.abuse.ch/url/11079/"
 "11078","2018-05-18 11:58:32","http://mine.zarabotaibitok.ru/Downloads/Miner_Xmrig/X64/SystemNT.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/11078/"
 "11077","2018-05-18 11:57:49","http://mine.zarabotaibitok.ru/Downloads/KM_HS/hostdll.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/11077/"
-"11076","2018-05-18 11:56:41","http://mine.zarabotaibitok.ru/Downloads/KM_GS/svhost.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/11076/"
-"11075","2018-05-18 11:53:42","http://mine.zarabotaibitok.ru/Downloads/KM_GS/GS_Svc.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/11075/"
-"11074","2018-05-18 11:51:12","http://mine.zarabotaibitok.ru/Downloads/worms/nc.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/11074/"
+"11076","2018-05-18 11:56:41","http://mine.zarabotaibitok.ru/Downloads/KM_GS/svhost.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/11076/"
+"11075","2018-05-18 11:53:42","http://mine.zarabotaibitok.ru/Downloads/KM_GS/GS_Svc.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/11075/"
+"11074","2018-05-18 11:51:12","http://mine.zarabotaibitok.ru/Downloads/worms/nc.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/11074/"
 "11073","2018-05-18 11:51:07","http://mine.zarabotaibitok.ru/Downloads/XP/Secyrityi_IE.vbs","offline","malware_download","None","https://urlhaus.abuse.ch/url/11073/"
-"11072","2018-05-18 11:46:24","http://mine.zarabotaibitok.ru/Downloads/XP/Secyrityi_IE.exe","online","malware_download","None","https://urlhaus.abuse.ch/url/11072/"
+"11072","2018-05-18 11:46:24","http://mine.zarabotaibitok.ru/Downloads/XP/Secyrityi_IE.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/11072/"
 "11071","2018-05-18 11:46:17","http://mine.zarabotaibitok.ru/Downloads/bat.bat","offline","malware_download","None","https://urlhaus.abuse.ch/url/11071/"
 "11070","2018-05-18 11:46:16","http://mine.zarabotaibitok.ru/Downloads/111.zip","offline","malware_download","None","https://urlhaus.abuse.ch/url/11070/"
 "11067","2018-05-18 11:45:39","http://dhm-mhn.com/floyd/htadbabas2.hta","offline","malware_download","None","https://urlhaus.abuse.ch/url/11067/"
 "11068","2018-05-18 11:45:39","http://dhm-mhn.com/floyd/htanyinwa.hta","offline","malware_download","None","https://urlhaus.abuse.ch/url/11068/"
 "11066","2018-05-18 11:45:38","http://dhm-mhn.com/floyd/dbabs2.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/11066/"
 "11065","2018-05-18 11:45:15","http://dhm-mhn.com/floyd/anyinwa.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/11065/"
-"11064","2018-05-18 11:44:53","http://mine.zarabotaibitok.ru/Downloads/instller.exe","online","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/11064/"
+"11064","2018-05-18 11:44:53","http://mine.zarabotaibitok.ru/Downloads/instller.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/11064/"
 "11063","2018-05-18 11:44:17","http://mine.zarabotaibitok.ru/Downloads/Commentary.exe","offline","malware_download","None","https://urlhaus.abuse.ch/url/11063/"
 "11062","2018-05-18 11:43:39","http://mine.zarabotaibitok.ru/Downloads/Miner_zec/nheqminer.exe","offline","malware_download","AgentTesla","https://urlhaus.abuse.ch/url/11062/"
 "11061","2018-05-18 11:43:02","http://mine.zarabotaibitok.ru/Downloads/Miner_zec/cpu_tromp_SSE2.dll","offline","malware_download","None","https://urlhaus.abuse.ch/url/11061/"
@@ -94099,7 +94239,7 @@
 "9955","2018-05-14 18:36:38","http://czeppel.de/0nazhAOqz16YlX/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/9955/"
 "9954","2018-05-14 18:36:26","http://topazdigitalmedia.com/BmMqJHqUmRWg/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/9954/"
 "9953","2018-05-14 18:36:14","http://arpacigroup.com/aAo6bfH6446/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/9953/"
-"9952","2018-05-14 18:36:04","http://divergentsight.net/vlOshurOl/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/9952/"
+"9952","2018-05-14 18:36:04","http://divergentsight.net/vlOshurOl/","online","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/9952/"
 "9951","2018-05-14 18:35:52","http://detss.com/j4PYEqU/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/9951/"
 "9950","2018-05-14 18:35:42","http://davidzink.com/wDV1rWDbF28/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/9950/"
 "9949","2018-05-14 18:35:35","http://axiscook.com/Re0hajZKHmu/","offline","malware_download","doc,emotet,heodo","https://urlhaus.abuse.ch/url/9949/"
@@ -94326,10 +94466,10 @@
 "9716","2018-05-11 16:49:39","http://67.20.76.108/~kikkerdo/images/angello.exe","offline","malware_download","downloader,exe","https://urlhaus.abuse.ch/url/9716/"
 "9715","2018-05-11 16:47:52","http://app.fbdownload.top/1052.exe","offline","malware_download","exe,Pony","https://urlhaus.abuse.ch/url/9715/"
 "9714","2018-05-11 14:27:42","http://medleysoup.com/wp-content/plugins/comicpress-manager/3","offline","malware_download","None","https://urlhaus.abuse.ch/url/9714/"
-"9713","2018-05-11 14:27:36","http://victoryoutreachvallejo.com/wp-content/plugins/regenerate-thumbnails/includes/3","online","malware_download","None","https://urlhaus.abuse.ch/url/9713/"
+"9713","2018-05-11 14:27:36","http://victoryoutreachvallejo.com/wp-content/plugins/regenerate-thumbnails/includes/3","offline","malware_download","None","https://urlhaus.abuse.ch/url/9713/"
 "9712","2018-05-11 14:27:14","http://medleysoup.com/wp-content/plugins/comicpress-manager/2","offline","malware_download","None","https://urlhaus.abuse.ch/url/9712/"
-"9711","2018-05-11 14:27:11","http://victoryoutreachvallejo.com/wp-content/plugins/regenerate-thumbnails/includes/2","online","malware_download","None","https://urlhaus.abuse.ch/url/9711/"
-"9710","2018-05-11 14:26:41","http://victoryoutreachvallejo.com/wp-content/plugins/regenerate-thumbnails/includes/1","online","malware_download","None","https://urlhaus.abuse.ch/url/9710/"
+"9711","2018-05-11 14:27:11","http://victoryoutreachvallejo.com/wp-content/plugins/regenerate-thumbnails/includes/2","offline","malware_download","None","https://urlhaus.abuse.ch/url/9711/"
+"9710","2018-05-11 14:26:41","http://victoryoutreachvallejo.com/wp-content/plugins/regenerate-thumbnails/includes/1","offline","malware_download","None","https://urlhaus.abuse.ch/url/9710/"
 "9709","2018-05-11 14:26:05","http://medleysoup.com/wp-content/plugins/comicpress-manager/1","offline","malware_download","None","https://urlhaus.abuse.ch/url/9709/"
 "9708","2018-05-11 13:56:36","http://youngstownautocredit.com/update.php","offline","malware_download","AgentTesla,GandCrab,heodo,Loki,Ransomware,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/9708/"
 "9707","2018-05-11 13:56:16","http://www.xploresydney.com/update.php","offline","malware_download","AgentTesla,GandCrab,Loki,Ransomware,Ransomware.GandCrab","https://urlhaus.abuse.ch/url/9707/"
diff --git a/urlhaus-filter.txt b/urlhaus-filter.txt
index 3eaf864f..8947be13 100644
--- a/urlhaus-filter.txt
+++ b/urlhaus-filter.txt
@@ -1,5 +1,5 @@
 ! Title: abuse.ch URLhaus Malicious URL Blocklist
-! Updated: Sat, 19 Jan 2019 00:23:06 UTC
+! Updated: Sat, 19 Jan 2019 12:22:15 UTC
 ! Expires: 1 day (update frequency)
 ! Repo: https://gitlab.com/curben/urlhaus-filter
 ! License: https://creativecommons.org/publicdomain/zero/1.0/
@@ -7,14 +7,17 @@
 0qixri.thule.su
 1.247.157.184
 1.254.80.184
+1.34.159.106
 1.34.159.137
 1.34.220.200
+1.52.84.2
 1.54.30.138
 1.almaz13.z8.ru
 101.200.214.249
 101.96.10.47
 103.100.209.198
 103.109.57.221
+103.51.249.64
 104.168.171.186
 104.232.39.151
 104.248.165.108
@@ -26,13 +29,13 @@
 107.172.3.102
 107.173.104.150
 108.170.112.46
-108.174.198.173
 108.190.193.1
 108.220.3.201
 108.46.227.234
 108.58.16.83
 108.74.200.87
 109.121.195.237
+109.205.143.207
 109.74.64.155
 11.gxdx2.crsky.com
 110.139.168.235
@@ -53,6 +56,7 @@
 118.99.239.217
 12.25.14.44
 120.52.51.13
+121.177.239.68
 121.189.114.4
 122.100.82.30
 122.114.246.145
@@ -108,12 +112,14 @@
 175.206.117.74
 177.189.220.179
 177.191.248.119
+177.206.121.57
 178.173.147.1
 179.110.22.175
 179.98.240.107
 18.188.218.228
 180.153.105.169
 180.66.68.39
+180.76.114.169
 181.174.166.164
 181.174.57.207
 182.235.29.89
@@ -135,7 +141,6 @@
 185.244.25.147
 185.244.25.153
 185.244.25.168
-185.244.25.174
 185.244.25.206
 185.244.25.221
 185.244.25.228
@@ -148,11 +153,11 @@
 186.32.176.32
 187.134.165.63
 187.171.165.162
+187.175.42.227
 187.2.17.29
 187.62.179.28
 188.152.2.151
 188.191.31.49
-188.36.121.184
 188mbnews.com
 189.100.19.38
 189.198.67.249
@@ -203,6 +208,7 @@
 2077707.ru
 208.51.63.150
 209.141.33.154
+209.141.42.145
 209.141.43.15
 209.141.46.133
 209.141.54.9
@@ -284,11 +290,12 @@
 46.97.21.166
 46.97.21.194
 46.97.76.190
+47.186.74.215
 49.159.104.121
 49.159.8.123
-49.205.99.62
 49.255.48.5
 4pointinspection.net
+5.167.53.163
 5.201.128.15
 5.201.129.174
 5.201.130.81
@@ -300,7 +307,6 @@
 51.15.97.49
 51.38.186.179
 58.230.89.42
-59.126.82.23
 59.127.1.67
 59.29.160.214
 59.29.178.187
@@ -322,15 +328,12 @@
 67.205.129.169
 68.183.141.219
 68.183.47.77
-69.163.33.84
 69.202.198.255
-69.45.19.254
 72.186.139.38
 72.224.106.247
 73.138.179.173
 73.159.230.89
 73.237.175.222
-73.57.94.1
 73.91.254.184
 74.222.1.38
 74.90.172.182
@@ -341,7 +344,6 @@
 77.139.74.206
 777ton.ru
 78.142.29.110
-78.187.81.159
 78.38.31.88
 78.96.20.79
 79.39.88.20
@@ -367,6 +369,7 @@
 83.40.11.203
 84.108.209.36
 84.183.153.108
+84.214.54.35
 85.105.255.143
 85.185.20.69
 85.222.91.82
@@ -385,7 +388,6 @@
 89.144.174.153
 89.34.26.118
 89.46.223.247
-91.205.215.13
 91.234.27.27
 91.236.140.236
 91.238.117.163
@@ -394,6 +396,8 @@
 92.44.62.174
 92.63.197.143
 92.63.197.153
+92.63.197.48
+92.63.197.60
 93.174.93.149
 93.33.203.168
 93.41.182.249
@@ -410,6 +414,7 @@
 9youwang.com
 a-kiss.ru
 a.uchi.moe
+a.xiazai163.com
 a46.bulehero.in
 abbottech-my.sharepoint.com
 abmtrust.org
@@ -426,6 +431,7 @@ adarma.xyz
 add3565office.com
 adornacream.com
 advantechnologies.com
+advavoltiberica.com
 aeco.ir
 aervoes.com
 affinity7.com
@@ -436,6 +442,7 @@ afspatna.com
 agentfox.io
 agkiyamedia.com
 ahmadalhanandeh.com
+ahmic.pro
 aimypie.com
 airmanship.nl
 airmasterbh.com
@@ -461,6 +468,7 @@ allloveseries.com
 allopizzanuit.fr
 allseasons-investments.com
 almahsiri.ps
+almasoodgroup.com
 alovakiil.com
 alpha.intouchreminder.com
 alsahagroup.com
@@ -478,10 +486,10 @@ andam3in1.com
 andonia.com
 andrewsalmon.co.uk
 angullar.com.br
+animoderne.com
 ansabstud.com
 anthinhland.onlinenhadat.net
 antigua.aguilarnoticias.com
-antique-carpets.com
 antoine-maubon.fr
 anvietpro.com
 anwalt-mediator.com
@@ -498,7 +506,6 @@ apoolcondo.com
 appliancestalk.com
 appliano.com
 application.cravingsgroup.com
-aprendercomputacion.com
 apresearch.in
 aptigence.com.au
 aquasalar.com
@@ -506,7 +513,6 @@ ar.caginerhastanesi.com.tr
 ar.dralpaslan.com
 ara.desa.id
 arcanadevgroup.com
-arcencieltour.ma
 architecturalsignidentity.com
 archiware.ir
 arendatelesti.ro
@@ -515,6 +521,7 @@ arifcagan.com
 aristodiyeti.com.tr
 armbuddy.co.za
 arneck-rescue.com
+array.com.ua
 arsenal-rk.ru
 arstecne.net
 art.nfile.net
@@ -522,6 +529,7 @@ arteelectronics.cl
 aryahospitalksh.com
 ashifrifat.com
 asiapointpl.com
+askhenry.co.uk
 asndjqwnewq.com
 astra-empress.com.ve
 astra-tv-hellas.xyz
@@ -533,6 +541,7 @@ audihd.be
 aujardindevalentine.com
 aulist.com
 auminhtriet.com
+aussietruffles.com
 ausvest-my.sharepoint.com
 authenticrooftiles.com
 ava-group.us
@@ -541,13 +550,14 @@ avirtualassistant.net
 avstrust.org
 avuctekintekstil.com
 awbghana.com
-axisplumbingptyltd-my.sharepoint.com
 aygunlersigorta.000webhostapp.com
+aygwzxqa.applekid.cn
 ayokerja.org
 aysemanay.com
 ayumi.ishiura.org
 aztel.ca
 b7center.com
+babyparrots.it
 bachaosubsy.com
 backuptest.tomward.org.uk
 balajisewasamiti.org
@@ -561,12 +571,13 @@ barhat.info
 batdongsan3b.com
 batdongsanbamien24h.com
 baza-dekora.ru
-bbs.sundance.com.cn
 bbs.sunwy.org
 bbsfile.co188.com
 bd1.52lishi.com
 bd10.52lishi.com
+bd11.52lishi.com
 bd12.52lishi.com
+bd18.52lishi.com
 bd19.52lishi.com
 bd2.paopaoche.net
 beautymakeup.ca
@@ -576,7 +587,6 @@ beirdon.com
 bekamp3.com
 bellevega.com
 belnagroup.com
-belovedmotherof13.com
 bem.hukum.ub.ac.id
 benomconsult.com
 bepgroup.com.hk
@@ -626,7 +636,6 @@ bureauproximo.com.br
 butgoviet.com
 bv7a5s.myraidbox.de
 bylw.zknu.edu.cn
-c.pieshua.com
 cache.windowsdefenderhost.com
 cadencespa.net
 camerathongminh.com.vn
@@ -646,7 +655,6 @@ cbc-platform.org
 cbrrbdy.gq
 cbsr.com.pk
 cbup1.cache.wps.cn
-cccb-dz.org
 ccowan.com
 ccshh.org
 ceo.org.my
@@ -685,11 +693,9 @@ clarisse-hervouet.fr
 claudio.locatelli.free.fr
 clean.crypt24.in
 clickara.com
-clinicainnovate.com.br
 clinicasense.com
 cloudme.com
 cloudresemblao.top
-clubdirectors.tv
 clubmestre.com
 cmnmember.coachmohdnoor.com
 cms.berichtvoorjou.nl
@@ -716,8 +722,6 @@ conectacontualma.com
 coneymedia.com
 config.cqhbkjzx.com
 config.cqmjkjzx.com
-congresorecursoshumanos.com
-consciousbutterfly.com
 conseil-btp.fr
 constructiis3.ro
 construction.nucleus.odns.fr
@@ -736,10 +740,10 @@ crittersbythebay.com
 cryptovoip.in
 crystalmind.ru
 csetv.net
-csrcampaign.com
 ctwabenefits.com
 cu-gong.com
 cuahangstore.com
+cumbrehambrecero.com
 currencyavenue.com
 d1.gamersky.net
 d1.paopaoche.net
@@ -756,7 +760,6 @@ danisasellers.com
 daocoxachilangnam.org.vn
 daoudi-services.com
 dar-sana.com
-darkksource.x10.mx
 darmoviesnepal.com
 dasaero.com
 dash.simplybackers.com
@@ -766,7 +769,6 @@ datos.com.tw
 dayahblang.id
 ddd2.pc6.com
 ddup.kaijiaweishi.com
-debzaccholkonsult.com
 deeperwants.com
 deimplant.com
 dekhsongshere.com
@@ -786,6 +788,7 @@ depraetere.net
 derrysmith.5gbfree.com
 desensespa.com
 destinarotravels.com
+destinyheightsnetwork.org
 dev.umasterov.org
 dgecolesdepolice.bf
 dgpratomo.com
@@ -811,6 +814,7 @@ distinctiveblog.ir
 district.vi-bus.com
 ditec.com.my
 divametalart.com
+divergentsight.net
 dkck.com.tw
 dl.008.net
 dl.bypass.network
@@ -819,6 +823,7 @@ dl1.mqego.com
 dlainzyniera.pl
 dld.jxwan.com
 dmsta.com
+docs.alfanoosemiddleeasternnyc.com
 doctor.fpik.ub.ac.id
 dog.502ok.com
 doithuong.info
@@ -841,13 +846,16 @@ down.wifigx.com
 down1.arpun.com
 down1.greenxf.com
 down1.topsadon1.com
-down10b.zol.com.cn
 down5.mqego.com
+downfile2019.com
+downfilepro.com
 download.adamas.ai
 download.cardesales.com
 download.doumaibiji.cn
 download.fixdown.com
 download.fsyuran.com
+download.glzip.cn
+download.instalki.org
 download.mtu.com
 download.pdf00.cn
 download.ttrar.com
@@ -859,12 +867,12 @@ dplogistics.com.pl
 drapart.org
 draqusor.hi2.ro
 drcarrico.com.br
-drdoorbin.com
 dreammaster-uae.com
 dronesremote.com
 droobedu.com
 druzim.freewww.biz
 dsltech.co.uk
+dtprocure.com
 dua-anggrek.net
 duandojiland-sapphire.com
 duratransgroup.com
@@ -875,11 +883,10 @@ dx.qqtn.com
 dx.qqyewu.com
 dx1.qqtn.com
 dx111.downyouxi.com
-dx114.downyouxi.com
 dx2.qqtn.com
+dx93.downyouxi.com
 dxdown.2cto.com
 dynamictechnologies.in
-eastcampmarketing.iamdevawesome.com
 easydown.stnts.com
 easydown.workday360.cn
 ec2-13-126-174-234.ap-south-1.compute.amazonaws.com
@@ -887,7 +894,6 @@ ecenurtercume.com
 eclairesuits.com
 ecochinc.xsrv.jp
 editocom.info
-edmthing.com
 eg-concept.com
 eirak.co
 eitchendie.com
@@ -900,11 +906,9 @@ eliteseamless.com
 eliteviewsllc.com
 ellallc.org
 elsgroup.mk
-eminencewomensforum.org
 eminyhr.com
 emmanuelboos.info
 en.dralpaslan.com
-en.tag.ir
 en.worthfind.com
 endigo.ru
 energocompleks.ru
@@ -949,6 +953,7 @@ fantastika.in.ua
 farukyilmaz.com.tr
 fastimmo.fr
 fastsolutions-france.com
+faternegar.ir
 fatma-bouchiha-psychologue.fr
 fatmike.net
 fayzi-khurshed.tj
@@ -967,7 +972,7 @@ filehhhost.ru
 files.zzattack.org
 files6.uludagbilisim.com
 firephonesex.com
-firstclassedu.com.ng
+firstzone.download
 fishfanatics.co.za
 fjorditservices.com
 flasharts.de
@@ -975,6 +980,7 @@ flechabusretiro.com.ar
 flemingtonosteopathy-my.sharepoint.com
 flipagrom.ga
 flsmidhtmaaggear.com
+flycourierservice.com
 flz.keygen.ru
 fm.centeredinself.com
 fm963.top
@@ -1006,12 +1012,10 @@ gacdn.ru
 game.baihanxiao.com
 ganapatihelp.com
 ganic.be
-gauff.co.ug
 gawefawef114.com
 gazenap.ru
 gd2.greenxf.com
 geckochairs.com
-gemco-geo.com
 gemriverside-datxanh.xyz
 general.it
 gernetic.ca
@@ -1035,12 +1039,12 @@ goodtogreat.co.th
 gops2.home.pl
 gostar.vn
 gowriensw-my.sharepoint.com
-grantkulinar.ru
 graphee.cafe24.com
 greatmobiles.co.uk
 greenwhitegranit.com
 ground-africa.com
 grouper.ieee.org
+gubremontpc.ru
 gudonly.apzlab.com
 gulfexpresshome.co
 gulzarhomestay.com
@@ -1071,6 +1075,7 @@ heartseasealpacas.com
 heartware.dk
 heatingkentucky.com
 help.postsupport.net
+hembacka.fi
 hezi.91danji.com
 hhicchurch.org
 hhjfffjsahsdbqwe.com
@@ -1093,8 +1098,8 @@ hopeswithin.org
 horizont.az
 horoscoposbrasil.com
 host.gomencom.website
+host.workskillsweb.net
 hostelegant.com
-hoteleseconomicosacapulco.com
 hotelikswidwin.pl
 hotelplayaelagua.com
 hotelsbreak.com
@@ -1102,7 +1107,6 @@ hotelus.xyz
 hotrosieunhanh.com
 hotshot.com.tr
 housesittingreference.com
-hrigeneva.com
 htxl.cn
 hungryman.vi-bus.com
 hwasungchem.co.kr
@@ -1118,14 +1122,15 @@ iapjalisco.org.mx
 ibnkhaldun.edu.my
 icases.pro
 icmcce.net
+id14.good-gid.ru
 idealse.com.br
 idgnet.nl
 idontknow.moe
 iepedacitodecielo.edu.co
 ighighschool.edu.bd
 ihl.co.nz
+illdy.azteam.vn
 illmob.org
-images.tax861.gov.cn
 imf.ru
 img.martatovaglieri.com
 img19.vikecn.com
@@ -1141,6 +1146,7 @@ ini.58qz.com
 ini.egkj.com
 innio.biz
 int-tcc.com
+integramultimedia.com.mx
 intelligintion.com
 interbizservices.eu
 intercity-tlt.ru
@@ -1157,7 +1163,6 @@ iplb.ir
 iquestcon-my.sharepoint.com
 irenecairo.com
 irsoradio.nl
-isikbahce.com
 isis.com.ar
 isoblogs.ir
 isolve-id.com
@@ -1230,7 +1235,6 @@ karavantekstil.com
 karmaniaaoffroad.com
 kbfqatar.org
 kcespolska.pl
-kdjf.guzaosf.com
 kennyandka.com
 ketout.com
 kevinjonasonline.com
@@ -1238,6 +1242,7 @@ kheiriehsalehin.com
 kiber-soft.net
 kiber-soft.ru
 kids-education-support.com
+kientrucdep.club
 kientrucviet24h.com
 kienvangvungtau.com
 kikakeus.nl
@@ -1252,6 +1257,7 @@ kleveremart.com
 knaufdanoline.cf
 kngcenter.com
 kodip.nfile.net
+kolejskilmentari.edu.my
 komedhold.com
 komsima.org
 koppemotta.com.br
@@ -1295,7 +1301,6 @@ lead.vision
 leaflet-map-generator.com
 learnbuddy.com
 lebanonturismo.com.br
-legalisir.fib.uns.ac.id
 lemurapparel.cl
 leodruker.com
 leonardokubrick.com
@@ -1303,10 +1308,8 @@ leptokurtosis.com
 lespetitsloupsmaraichers.fr
 letoilerestaurant.com
 letspartyharrisburg.com
-lexfort.ru
+leviathan.rs
 lfenjoy.com
-lhzs.923yx.com
-liarla.com
 libertyict.nl
 liceulogoga.ro
 lifestylebycaroline.com
@@ -1315,7 +1318,6 @@ lightpower.dk
 lignumpolska.com
 limancnc.com
 lineageforum.ru
-linkingphase.com
 lists.ibiblio.org
 lists.reading.ac.uk
 littlepeonyphotos.ru
@@ -1332,10 +1334,8 @@ lokahifishing.com
 lokanou.webinview.com
 lokeronline.net
 lonesomerobot.com
-longviewlegacy.com
 looktravel.ge
 lostri-o.com
-lotto-generator.jerryboy.com
 louiskazan.com
 lrprealestate.vi-bus.com
 lstasshdy.cf
@@ -1344,12 +1344,12 @@ lutuyeindonesia.com
 luyenthitoefl.net
 lvajnczdy.cf
 m-onefamily.com
-mabruuk.ridvxn.site
 mackleyn.com
 macsoft.shop
 madarpoligrafia.pl
 maf-orleans.fr
 magicienalacarte.com
+mahsew.com
 mail.buligbugto.org
 mail.learntoberich.vn
 maionline.co.uk
@@ -1364,9 +1364,9 @@ marina-marini.de
 marioallwyn.info
 marisel.com.ua
 marsandbarzini.com
-marshalstar.com.ng
 mary-shops.ru
 masjedkong.ir
+masswheyshop.com
 matel.p.lodz.pl
 mathcontest.info
 maverick-advisory.fr
@@ -1408,8 +1408,8 @@ migoascoran.com
 migoshen.org
 miketec.com.hk
 milagro.com.co
+milimetrikistanbul.com
 mimiabner.com
-mine.zarabotaibitok.ru
 minerways.xyz
 mingroups.vn
 miniboone.com
@@ -1432,16 +1432,15 @@ mmms.at
 mobilhondakalbar.com
 modalook.com.tr
 modern-autoparts.com
+molministries.org
 montbreuil.com
 monteglobal.co
 monumentcleaning.co.uk
 moradoor.com
 morganceken.se
-mother-earth.net
 mozarthof.com
 mr-digitalmarketing.com
 mrhinkydink.com
-mroffers.co.ke
 mskala2.rise-up.nsk.ru
 mso.services
 msobrasciviles.cl
@@ -1450,9 +1449,7 @@ mtt.nichost.ru
 mukhtaraindonesiawisata.com
 muzikgunlugu.com
 mv360.net
-mxd-1253507133.file.myqcloud.com
 my-health-guide.org
-mycv.fsm.undip.ac.id
 mymachinery.ca
 mymercedesdirect.com
 myphamhanbok.com
@@ -1481,6 +1478,7 @@ nesbbc.top
 nestadvance.com
 netmansoft.com
 nevadacomputer.com
+newarkpdmonitor.com
 newbiecontest.org
 newcanadianmedia.ca
 newwater-my.sharepoint.com
@@ -1493,17 +1491,19 @@ ngmaservice.com
 ngobito.net
 ngtcclub.org
 nguyenthanhriori.com
-nhakhoavieta.com
+ngyusa.com
 niaa.org.au
 nidea-photography.com
 nigeriafasbmbcongress.futminna.edu.ng
 nisanbilgisayar.net
+nismotek.com
 nitadd.com
 niteshagrico.com
 nizhalgalsociety.com
 njeas.futminna.edu.ng
 nklj.com
 nobleartproject.pl
+nono.antoniospizzeriaelmhurst.com
 noplu.de
 norsterra.cn
 northernpost.in
@@ -1549,6 +1549,7 @@ optima.easiere.com
 optimasaludmental.com
 orclei.com.br
 orderauto.es
+organicfs.com
 osdsoft.com
 ossi4.51cto.com
 ostappnp.myjino.ru
@@ -1561,10 +1562,11 @@ owwwc.com
 oxatools.de
 p.owwwa.com
 p1.lingpao8.com
+p2.lingpao8.com
 p3.zbjimg.com
 p6.zbjimg.com
 pagasahora.com
-panlierhu.com
+panafspace.com
 parsintelligent.com
 pasakoyluagirnakliyat.com
 pastelcolors.in
@@ -1578,20 +1580,17 @@ pay.aqiu6.com
 pc6.down.123ch.cn
 pcokey.ru
 pcsoft.down.123ch.cn
-pe-co.nl
 penfocus.com
 perminas.com.ni
-petersatherley.live
 petparents.com.br
 phantasy-ent.com
 pharmaesourcing.technoexam.com
 phattrienviet.com.vn
 phelieuasia.com
-phihungmobile.net
 photomoura.ir
 pickmycamp.com
-pink99.com
 pivmag02.ru
+pixelguru.info
 pjbuys.co.za
 pkmsolutions.com.my
 placarepiatra.ro
@@ -1599,6 +1598,7 @@ playhard.ru
 pleasureingold.de
 pmcorporation.fr
 pmracing.it
+pnneuroeducacao.pt
 pocketmate.com
 pojbez31.ru
 pokorassociates.com
@@ -1614,9 +1614,11 @@ powerwield.com
 ppfc.com.br
 pracowniaroznosci.pl
 prakritikkrishi.org
+pramlee.com.my
 preladoprisa.com
 prithvigroup.net
 private.cgex.in
+privatpolicy.ttentionenergy.com
 pro-ind.ru
 proinstalco.ro
 projectonebuilding.com.au
@@ -1630,7 +1632,6 @@ proxy-ipv4.com
 psakpk.com
 ptmskonuco.me.gob.ve
 pwpami.pl
-qeducacional.com.br
 qhoteloldcity.com
 qigong-gironde.fr
 qsongchihotel.com
@@ -1639,6 +1640,7 @@ quebrangulo.al.gov.br
 quentinberra.fr
 quimitorres.com
 qweoiqwndqw.net
+rabhomes.com
 radintrader.com
 radugaru.com
 rahkarinoo.com
@@ -1669,9 +1671,8 @@ replorient.fr
 rescuereinvented.org
 resortmasters.com
 restaurantelataperiadel10.com
+restlesz.su
 reviewzaap.azurewebsites.net
-revistarevival.com
-ria.krasnorechie.org
 riaztex.com
 rkverify.securestudies.com
 rnexpress.ir
@@ -1692,7 +1693,6 @@ rostudios.ca
 roteirobrasil.com
 routetomarketsolutions.co.uk
 roytransfer.com
-rozwijamy.biz
 rrrradkqwdojnqwd.com
 ruforum.uonbi.ac.ke
 rumahsuluh.or.id
@@ -1702,7 +1702,6 @@ rusc-rd.ru
 russellmcdougal.com
 rvloans.in
 ryleco.com
-s-pl.ru
 s.51shijuan.com
 s.trade27.ru
 s2lol.com
@@ -1714,11 +1713,11 @@ sael.kz
 sagliklibedenim.com
 sahathaikasetpan.com
 saheemnet.com
+sahlkaran.com
 saigon24h.net
 saigonthinhvuong.net
 sainashabake.com
 saint-mike.com
-saintjohnscba.com.ar
 salah.mobiilat.com
 salam-ngo.ir
 salecar2.muasam360.com
@@ -1728,7 +1727,6 @@ samet-celik.com
 samix-num.com
 samjonesrepairs.co.uk
 sandau.biz
-sanliurfakarsiyakataksi.com
 sanmarengenharia.com.br
 sarahleighroddis.com
 sareestore.vworks.in
@@ -1806,11 +1804,9 @@ slk.solarinstalacoes.eng.br
 small.962.net
 smartdogsshop.com
 smarteraccounts365-my.sharepoint.com
-smkn.co.id
 smpadvance.com
 smplmods-ru.1gb.ru
 smsfgoldbullion.com.au
-smsin.site
 smsold401.smsold.com
 snkpk.fkip.uns.ac.id
 sobrancelhascassiana.com.br
@@ -1818,6 +1814,7 @@ soccer4peaceacademy.com
 socco.nl
 sofathugian.vn
 sofrehgard.com
+soft.114lk.com
 soft.duote.com.cn
 soft.mgyun.com
 soft2.mgyun.com
@@ -1825,8 +1822,8 @@ softhy.net
 software.rasekhoon.net
 sohointeriors.org
 solarium.energy
+solaryug.com
 soloenganche.com
-solovoyager.me
 solvermedia.com.es
 somov-igor.ru
 songlinhtran.vn
@@ -1834,14 +1831,12 @@ songspksongspk.top
 soo.sg
 sophiacollegemumbai.com
 sophrologie-untempspourmoi.fr
-sos-debouchage-dumeny.com
 sos-secretariat.be
 sosh47.citycheb.ru
 soumaille.fr
 southgatetower.cdd.vn
 spamitback.com
 sparkuae.com
-spcoretraining.com
 speed.myz.info
 spitlame.free.fr
 spth.virii.lu
@@ -1852,6 +1847,7 @@ sriyukteshvar.com
 ssgarments.pk
 sskymedia.com
 ssmmbed.com
+ssofhoseuegsgrfnu.ru
 staging-geblog.b2ldigitalprojects.com
 standart-uk.ru
 starbilisim.net
@@ -1861,23 +1857,24 @@ stats.emalaya.org
 statsrichwork.com
 stocklab.id
 storetoscore.com
-storyonmymind.com
 stoutarc.com
 stroim-dom45.ru
 stroppysheilas.com.au
 suahoradeaprender.com.br
 successtitle.com
 sudaninsured.com
-suglafish.com
 sulphurdyeschemicals.com
 sunday-planning.com
 sunroofeses.info
 superiorsystems.co.in
 superpozyczki.pl
 supportwip.com
+surearmllc.com
+sutesisatci.biz.tr
 suzannababyshop.com
 svn.cc.jyu.fi
 swanescranes.com.au
+swanpark.dothidongsaigon.com
 symbisystems.com
 synergify.com
 syntek.net
@@ -1894,6 +1891,7 @@ tantarantantan23.ru
 taplamnguoi.com
 tapnprint.co.uk
 taraward.com
+targettrustcompany.com
 tascahrd-my.sharepoint.com
 tasha9503.com
 tayloredsites.com
@@ -1907,7 +1905,6 @@ teal.download.pdfforge.org
 teambored.co.uk
 teamfluegel.com
 teamincubation.org
-teamphgermany.org
 techidra.com.br
 tecnologiaz.com
 tehilacrew.com
@@ -1920,15 +1917,17 @@ terifischer.com
 terrae.mx
 terrible.wine
 test.comite.in
+test.good-gid.ru
 test.sies.uz
 test.taichinhtrondoi.com
+testandersonline.nl
 teste111.hi2.ro
 tfile.7to.cn
 thaidocdaitrang.com
 thanhlapdoanhnghiephnh.com
 thankyoucraig.com
 thebitcoinengine.com
-thegablesofyorkcounty.com
+thedopplershift.co.uk
 thehotcopy.com
 theinspireddrive.com
 thejutefibersbd.com
@@ -1957,6 +1956,7 @@ time.awebsiteonline.com
 timlinger.com
 tiras.org
 titheringtons.com
+tnr-vietnam.net
 toddlerpops.com
 todoemergencias.cl
 tokokusidrap.com
@@ -1964,7 +1964,6 @@ tonghopgia.net
 tonsilstonessolution.com
 tonyleme.com.br
 top-flex.com
-top5roachkillers.com
 topsecrets.com.pl
 topwinnerglobal.com
 topwintips.com
@@ -1977,7 +1976,6 @@ trddi.com
 treehugginpussy.de
 trendingshirt.shop
 trinidadnorth.com
-tritonwoodworkers.org.au
 trottmyworld.ch
 troysumpter.com
 trumbullcsb.org
@@ -2012,6 +2010,7 @@ upgrade.xaircraft.cn
 uplloadfile.ru
 upload.ynpxrz.com
 url.246546.com
+url.edu
 us.cdn.persiangig.com
 usa1services.com
 usmantea.com
@@ -2021,9 +2020,11 @@ uxz.didiwl.com
 uzri.net
 vaatzit.autoever.com
 vacacionespuntacana.com
+vacationletting.net
 vaeaincorp-my.sharepoint.com
 vakschoenmakerijbolle.nl
 valencecontrols.com
+variantmag.com
 vaun.com
 vaz-synths.com
 vcube-vvp.com
@@ -2033,7 +2034,6 @@ vetesnik.webpark.cz
 vetsaga.com
 viajesdelbosque.com
 victimservicesquinte.com
-victoryoutreachvallejo.com
 viettelbaoloc.com
 vigilar.com.br
 vincity-oceanpark-gialam.com
@@ -2044,6 +2044,7 @@ visiontomotion.com
 viswavsp.com
 viztarinfotech.com
 vnxpress24h.com
+vuonorganic.com
 vw-stickerspro.fr
 wadeguan.myweb.hinet.net
 wadspay.com
@@ -2051,6 +2052,7 @@ waggrouponline.org
 wanderers.com
 wansaiful.com
 wasasamfi.com
+washuis.nl
 watchdogdns.duckdns.org
 watchdogdns.duckdns.orgwatchdogdns.duckdns.org
 wavemusicstore.com
@@ -2074,11 +2076,12 @@ weresolve.ca
 westland-onderhoud.nl
 wg233.11291.wang
 wg50.11721.wang
-wh.2.bxacg.com
 whitekhamovniki.ru
 wholehealthcrew.com
+wijdoenbeter.be
 wikiprojet.fr
 williamenterprisetrading.com
+wimpiebarnard.co.za
 winape.net
 winecorkartist.com
 wins-power.com
@@ -2089,11 +2092,14 @@ wordpress-147603-423492.cloudwaysapps.com
 workonmemory.com
 worshipped-washer.000webhostapp.com
 wp2.shopcoach.net
+wt.mt30.com
 wt120.downyouxi.com
+wt91.downyouxi.com
+wt92.downyouxi.com
 wtede.com
 www2.itcm.edu.mx
 wxbsc.hzgjp.com
-xiazai.vosonic.com.cn
+xblbnlws.appdoit.cn
 xiazai.xiazaiba.com
 xmr-services.net
 xn-----6kcabnyujk3amba3araccbdbrg.xn--p1ai
@@ -2103,13 +2109,13 @@ xn--174-mdd9c4b.xn--p1ai
 xn--42c9ajcvlnf2e4cncez70aza.com
 xn--80abhfbusccenm1pyb.xn--p1ai
 xn--80apaabfhzk7a5ck.xn--p1ai
-xn--90aeb9ae9a.xn--p1ai
 xn--b1afnmjcis3f.xn--p1ai
 xn--d1albnc.xn--p1ai
 xn--j1aclp1d.in.ua
 xn--k1afw.net
 xyzfilamenten.nl
 xz.bxacg.com
+xzb.198424.com
 xzc.197746.com
 xzc.198424.com
 y31uv4ra1.vo.llnwd.net
@@ -2123,6 +2129,7 @@ ychynt.com
 ycykudy.cf
 yellowfish.biz
 yerdendolumtesis.com
+yesmy.amurajapanesecuisine.com
 ygzx.hbu.cn
 yhhhczdy.cf
 yiluzhuanqian.com
@@ -2142,13 +2149,13 @@ zamena-schetchikov.novosibirsk.ru
 zbancuri.ro
 zdy.17110.com
 zenvoyadmin.com
+zeusdatabase.com
 zh0379.com
 ziarulrevolutionarul.ro
 zidanmeubel.com
 zingland.vn
 zionsifac.com
 zj.9553.com
-zonnestroomtilburg.nl
 zoolandia.boo.pl
 zs68.com
 zschmielnik.ostnet.pl