# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: smokedham

# Reference: https://medium.com/trac-labs/who-ordered-the-smokedham-backdoor-delicacies-in-the-wild-87f51e2e5bd2
# BANNER_0_HASH-HOST=0173bce3e88196b60c3015daf93f5ade
# BANNER_0_HASH-HOST=0ed538720824ecb68a7fb67c35f596d0
# BANNER_0_HASH-HOST=10e4e20e68955859b4eef28a47ca37bf
# BANNER_0_HASH-HOST=1b897b2241e500989cf1c986ff951f4a

cdn-server-1.xiren77418.workers.dev
cdn-server-2.wesoc40288.workers.dev
cdn-server-full.taros12579.workers.dev
cdn-web-server1.techserver01.workers.dev
cdn1.cowivat156.workers.dev
cdn1.poyag17470.workers.dev
crimson-unit-2561.kopis56799.workers.dev
dash-server.servertech03.workers.dev
ec2-server-noisy-band-0fe8.focapaj280.workers.dev
server-cd2.bipewi2747.workers.dev
server-cdn.jawigaw383.workers.dev
server-cdn.lafise2419.workers.dev
server-cdn.lecoc56350.workers.dev
server-cdn.sidoke9822.workers.dev
server-cdn.virej10913.workers.dev
server-cdn.xohahey822.workers.dev
server-web-cdn.detocim498.workers.dev
server-web-cdn.kagoli5215.workers.dev
server-web-cdn.nefixeg373.workers.dev
server-web-cdn.pixece7948.workers.dev
server-web-cdn.rojotoc516.workers.dev
server-web-cdn.vosax32455.workers.dev
server-web.sasex59966.workers.dev
soft-base-01.ginigiy117.workers.dev
soft-dns.sejilod748.workers.dev
web-app.larij21770.workers.dev
work-server-1.picalob750.workers.dev

# Reference: https://gist.github.com/drb-ra/179e8e9beca45bc10feba97cf8c5c7b1

app-cdn.celixi6266.workers.dev
cdn-app-server.vewojo9572.workers.dev
cdn-app-web.piniyi9484.workers.dev
ec2-app.lewoha7320.workers.dev
ec2-server.bayaj19162.workers.dev
ec2-server.gegodec527.workers.dev
ec2-server.milago3967.workers.dev
floral-paper-8eb1.pihara4672.workers.dev
keystore-explorer.com
mstore.framfarmers.co.uk
server-web-cdn.dones86497.workers.dev
server-web-cdn.mevame4224.workers.dev
server-web-cdn.ravebo3233.workers.dev
server-web-cdn.yevobod379.workers.dev
server-web-cdn1.gekod80409.workers.dev
web-app.dasik14289.workers.dev

# Reference: https://x.com/SquiblydooBlog/status/1993311260512075967
# Reference: https://app.any.run/tasks/a9391be5-4e71-4a95-9072-477f8afd906f/

bapiyat727.workers.dev
pofelal314.workers.dev
app.pofelal314.workers.dev
ssl.bapiyat727.workers.dev

# Reference: https://x.com/g0njxa/status/2010485906466394343
# Reference: https://x.com/g0njxa/status/2027082406847709524
# Reference: https://www.virustotal.com/gui/file/cbbe98e1b36eb68a7afe534c21055f9cc793c2a6a7ca63256d273020a096f7a7/detection
# Reference: https://www.virustotal.com/gui/file/30427b6732fea64c2cdc0b40c19695902f2bdea5f87dab16b4082bb3cf208557/detection
# BANNER_0_HASH-HOST=09dcb64ff33900abe8a52e527f81ffdd
# BANNER_0_HASH-HOST=272b145c05fa9de8e0d197dddab7d796
# BANNER_0_HASH-HOST=72aafbb72ed15fbfdfbd422cefc88bee
# BANNER_0_HASH-HOST=ec6f4705aac9ddc742662eb4ab2435ff
# FAVICON_HASH-HOST=72a8c7c419ad3849201c65c977dbc4c6

45perhour.org
7stories.sbs
91movs.com
9xstream.live
aapanel34768.hostkey.in
abstractest-hydroski.site
academytradeai.com
acquasicuras.com
actbluecs.com
actblues.net
adionetjrei.shop
adrilex.digital
aexnp.com
afeherbopenuk.com
agronomywork.info
aiadvancedreasoning.com
aialgocamp.com
aialgocore.com
aialgodrive.com
aialgoflow.com
aialgofusion.com
aialgohash.com
aialgorithmforge.com
aialgorithmicforge.com
aialgorithmicpath.com
aialgosense.com
aialgosphere.com
aianalyticengine.com
aianalyticmesh.com
aiautomationframework.com
aiautonomycore.com
aibigdatamap.com
aibotscale.com
aibrainatelier.com
aibrainframe.com
aibrainlogicc.com
aibrainmatrixed.com
aibrainyard.com
aibuildersguild.com
aibuildnet.com
aibuildspark.com
aibytepad.com
aicalcengine.com
aichatbeam.com
aichatfuse.com
aichattask.com
aichippad.com
aicloudcamp.com
aicloudlayer.com
aicloudreactor.com
aicloudthread.com
aicodealpha.com
aicodebeam.com
aicodebrain.com
aicodefoundry.com
aicodeport.com
aicognexora.com
aicognistack.com
aicognitiongrid.com
aicognitiveforge.com
aicognitiveframework.com
aicognivaults.com
aicomputedgrid.com
aiconsciousgrid.com
aicontentarc.com
aicoremodels.com
aicortexlayer.com
aicortexnexus.com
aicyberbyte.com
aicybercraft.com
aicyberimatrix.com
aicybernode.com
aicyberpath.com
aicyberscale.com
aidadynamics.com
aidatabay.com
aidataclustering.com
aidatafathom.com
aidataprime.com
aidatasflux.com
aideepanalytics.com
aideepboard.com
aideepdeck.com
aideepflux.com
aideepreasoning.com
aideepspark.com
aidigitalmesh.com
aievolvelogic.com
aifuturewave.com
aigainforge.com
aigenorbit.com
aigripe.com
aihyperpulse.com
aiimageflux.com
aiimagelayer.com
aiinsighttgrid.com
aiintellifuse.com
ailabsync.com
ailayergrid.com
ailearnstack.com
ailogiccanvas.com
ailogicfetch.com
ailogicframe.com
ailogicmatrix.com
ailogicmesh.com
ailogicnest.com
ailogicpod.com
ailogicscale.com
ailogicvault.com
aimatrixbeam.com
aimatrixcast.com
aimatrixcore.com
aimediabox.com
aimediapath.com
aimetanode.com
aimindbuilders.com
aiminddock.com
aimindgenesis.com
aimodeldrift.com
aimodelrun.com
aimodelworks.com
aineuralcascade.com
aineuralfabric.com
aineuralforge.com
aineuralinference.com
aineuralline.com
aineurallnet.com
aineuralnex.com
aineuralpath.com
aineuralpulse.com
aineuralquery.com
aineuralscribe.com
aineurodeck.com
aineurofluxion.com
aineurogenesis.com
aineuroloop.com
aineuronspark.com
ainewlevelwealth.com
ainexorasystem.com
ainexusgear.com
ainexuspoint.com
ainexussync.com
aio-streamer.live
aio18app.live
aioptimizecore.com
aiparadigmmodel.com
aipatternscan.com
aipixelepoch.com
aipixelflow.com
aipredictai.com
aipredictivecode.com
aipredictivecore.com
aipredictivesystem.com
aiprocessnexus.com
aiprocessvault.com
aiprompttask.com
aiprotocolmesh.com
aiqantumsynapse.com
aiquantaforge.com
aiquantumlogic.com
aiquantumorbit.com
aiquantumrelay.com
aiquantumweave.com
airastbercore.com
airoboticsdata.com
airoboticslogic.com
airobotmind.com
airsoftware.asia
aisecureframework.com
aisecureprocessing.com
aisemanticnexus.com
aisensedock.com
aisentientgrid.com
aisignalengine.com
aismartccore.com
aismartchassis.com
aismartcortex.com
aismartdirectionflow.com
aismartfabric.com
aismartlogic.com
aismartmark.com
aismartmindsystem.com
aismartplatforms.com
aismartpod.com
aisolutioncore.com
aisolvenet.com
aispeechroute.com
aisvectorflowen.com
aisynapseboost.com
aisynapseecho.com
aisynapseedge.com
aisynapselab.com
aisynapsematrix.com
aisynapsenet.com
aisynapticforge.com
aisynthesisno.com
aisynthesisnodes.com
aisynthevora.com
aisysprofileage.com
aitechyard.com
aitensorcore.com
aitensorgrid.com
aitensorvault.com
aitestcore.com
aitextscale.com
aivectorflow.com
aivectornexis.com
aivisioneye.com
aivisionhost.com
aivisionpoint.com
aivoicehash.com
aiwealthfirstmain.com
aksecurityandlocksmith.org
albertaservice.net
albertaservices.org
alldocreader.ink
alpine-quest.live
ancora-shop.com
angelliost.com
apaalieo.com
apaileo.shop
apaliieo.com
apallieo.com
aplicado24tv.stream
app-cdn-software-gza4gebuf3cqd8h6.z03.azurefd.net
app-grand-win.website
app-hypeliquid.xyz
app.alldocreader.ink
app.iptv24.live
app.mediahubtv.live
app.personaltv.live
app.porn-aio.live
app.tikltok18.live
app.tiktko18.live
app.tiltok18.live
app.tv-aio.live
app.watch-aio.live
appalleo.com
appcraft-academy.com
aquazdroj.club
aquilenthes.info
armada-club-top.website
armada-games-app.website
armada-grand-win.website
artisanskillsacademy.com
arvatomedia.com.de
arvelionis.com
assche.com
astem-de.it.com
astronexus.pro
atlantaitsolutions.com
atomlcwallet.us
atxauction.com
audioassisten.com
auroragutters.com
autocarsvehicles.live
autoglasguercam.com
automotiveblog.club
autophorie.blog
autovehicles.live
baltimorepsychic.com
barnecnoble.com
bayleaf.icu
bayleafkits.top
bbi-esign.info
beehtelar.shop
beekeeperstudio-db.com
beekeeperstudio.cc
beekeeperstudio.co
beekeeperstudio.pro
beekeeperstudio.softwarep2p.com
beekeeperstudio.space
beekeeperstudio.tech
bennyshvac.com
best-mine-site.website
bestcasinoroom.com
blariba.com
blazehollow.com
blitzblox.com
blluewine.com
blorfizan.cyou
blowout-palefaces.website
botelcopay.com
botelcopay.icu
botelcopay.info
botelcopay.net
botelcopay.online
botelcopay.run
braxitrade.info
braynebays.com
breitenbern.shop
bridgenexis.com
brightenforge.com
brightflowz.org
brightlabsz.com
brightlfunds.com
browser-tv.live
bunbun-fishing.org
burnout-pravention.com
buycanclear.com
buymolle.com
caffedigitale.com
calmgroves.com
cameranextpro.com
cantharides-obscene.website
carereroom.pro
carlifeyamato.com
carnieal.com
carrierbrokeragreements.us
casino-vitoria.ink
casinobonusranking.com
casualjuegosportal.net
celestes-occasion.website
centrises.com
chain-analys.eu.com
chainbork.com
chaosbloomcheck.com
chargesmartuk.com
chatusability.com
chatuxlab.com
cheapsigscanada.com
cherniymehmet.com
chickensroad.ink
chicopeetowing.com
chinohillstowing.com
chvent.com
cinchona-congruence.site
cinematographymastery.com
cipherlix.com
claysoultrue.pro
climasubito.com
cloudsurferway.com
cloudwhispercheep.com
club-play-grand.website
club-vegas-casino.ink
cmcmarkets.promo-links.com
co-part-offset.live
cocuscompany.com
code-wallets-de.com
cognopix.com
compassgrowpat.com
computerservicesource.com
contorion-uk.com
controle-universal.fit
crafteddreams.net
craftycuddle.com
crazy-app.best
crazy-app.ink
creativewritingretreats.com
crown-advisor.com
crredixas.com
cryptazal.icu
cryptofinance.com.de
csdob.com
cyberrec.shop
cybershield-academy.net
d-extrax.com
daddled-overgirds.website
daddled-uncinariasis.website
daiwa-cycle.pro
danrodphotos.com
database-dbeaver.com
database-heidisql.com
database-lists.com
dataops-center.com
datovenza.com
dawnsparknever.com
dbeaver-architect-hub.com
dbeaver-ce.com
dbeaver-center.com
dbeaver-connect.com
dbeaver-database.app
dbeaver-database.cc
dbeaver-database.cloud
dbeaver-database.co
dbeaver-database.com
dbeaver-database.org
dbeaver-database.pro
dbeaver-database.tech
dbeaver-database.us
dbeaver-datamesh.com
dbeaver-dataops.com
dbeaver-db.com
dbeaver-dba-foundation.com
dbeaver-failover.com
dbeaver-join.com
dbeaver-munster.com
dbeaver-project.com
dbeaver-protocol.com
dbeaver-schema.com
dbeaver-sqlhub.com
dbeaver-sqlops.com
dbeaver-workspace.com
dbeaver.dataops-center.com
dbeaver.schema-harbor.com
dbeaver.softwarep2p.com
dealsauctions.com
dede1000x.com
deep-mine-app.site
deguercuernavaca.mx
delvonax.cyou
demapas.com
denizened-blowout.website
der-postillon.org
devolutions-adminops.com
devolutions-center.com
devolutions-endpoint.com
devolutions-governance.com
devolutions-itdesk.com
devolutions-manager.com
devolutions-rdm.click
devolutions-rdm.online
devolutions-stack.com
devolutions-subnetlab.com
devolutions-sysarch.com
devolutions.rd-manager.com
devolutions.workgridlab.com
devolutionscontrolroom.com
dexelora.com
dexscreeners.cloud
dexscreeners.ink
dexscreeners.life
dexscreeners.pics
dexscreeners.sbs
dexscreeners.shop
dicknns.shop
digitalsystemprofit.com
dirtyca.top
dirtyup.top
dirtyus.top
discoveryrails.com
diversionarcade.net
dividexusstel.digital
doglep.com
dogtrainingdfw.com
download-tightvnc.com
download.rvtools-dev.com
download.rvtools-skillcamp.com
dowojnes.com
draxafied.cyou
dreamchaserpeak.com
dreamrupturevice.com
dreamspinhub.com
dreamweavegrey.com
drexano.de
driftpixelmonster.com
duskblazeworld.com
e-gradanis.info
e-hzz.info
e-hzz.world
e-hzzo.digital
e-hzzo.homes
e-porezn.digital
e-porezn.org
e-porezn.world
e-porezna.homes
e-porezna.org
e-porezna.world
e-poreznas.digital
e-porezno.digital
e-zdrav.org
e-zdravlj.digital
e-zdravlj.info
e-zdravlje.info
e-zdravlje.life
e-zdravlje.today
e-zdravljes.digital
echofallsr.com
echofallsupport.com
ecohomelive.org
ecorecip.shop
ecovoltkit.shop
eds-go.life
eds-life.life
eds-on.life
eds-online.icu
eduglen.com
edulustra.com
edutrelix.com
egradani.icu
electricshop.org
eletrue.com
elite-games-ltd.website
elite-play-base.website
enem-inep2025.com
entretenimientoplay.net
eporezna.info
eporezna.world
esanewablogo.com
etsena.eu.com
evans-esign.info
evolutionblends.com
evolyraz.com
expatpower.com
expresss-fin.com
ezdravlj.info
ezdravlje.digital
ezdravlje.org
fabsaintsimons.org
falor75.com
falserollplay.com
fareharbores.com
fast-play-city.site
fenlira.de
fileseekslay.pro
filezilla-app.com
filezilla-workspace.com
filmoperatorschule.com
filodarte.net
finanseller.com
finex-pert.com
fingrowe.com
finnarco.com
finsolis.shop
fintherix.com
fiotidasorte2025.com
firstbaze.com
fisheryguide.org
fiveback.xyz
fivebackgift.io
fivebackgiftus.com
fiviebelow.com
fl-studio-mobile.fit
flairfootballs.com
flameechosaber.com
fleksskell.ink
flightradar-canada.com
florovex.com
fluxiroz.com
flywerd.it.com
fokuspyna.com
fokussperk.com
fortcampbellausa.com
freaegent.com
freeagenlt.com
fresagent.com
friloktertys.de
frostveilslay.com
frostysmiles.com
fuleroidos.de
fuzionssolens.it.com
fuzoyesos.de
gadgman.ink
game-city-ltd.site
gammoned-dopier.website
gamorz.com
gates-olympus.live
gauleteres.de
gbdiystore.art
gcrda.com
geliopetry.de
gersolaoe.de
getreceived.com
getting-keepass.com
gfilimtonkas.de
giftcardmallmygiftac.com
giftcardmallmygiftai.com
giftcardmallmygiftf.com
giftcardmallmygiftss.com
giftcardmallmygiftsus.com
giftcardmallmygiftus.com
giftcardmallus.com
giftcardsecure.com
giftcodemygift.xyz
gijeqiko.de
glavonix.info
glaxtonia.info
gleization-leptospiroses.website
glidepilotjp.com
global-games-ltd.website
global-iptv-china.live
global-iptv-japan.live
global-iptv-korea.live
glow-skinstore.com
glowreignmost.com
gloxtram.info
glucometrwellness.com
go-play-ltd.site
godlessnesses-game-city.website
gogisich.shop
gold-game-apps.site
gold-iptv-portugal.live
gold-mine-app.site
goshipppo.com
gospffuf.com
gothepuff.com
gradani.digital
graphicin.com
grok-assistente.live
grubfoaub.com
grubphub.com
grubshubs.com
gruihub.com
grulbhub.com
grusthub.com
hair-clipper.icu
handwerkzeit.com
harborfreihgt.net
harnetsecuriity.com
harnetsecurity.com
harrybradley.com
hartmarn.shop
hauswaermepumpe.com
havenlys.com
heatfuturenow.com
heavychest.com
heeev.com
heidisql-app.com
heidisql-center.com
heidisql-connect.com
heidisql-db.com
heidisql-enterprise.app
heidisql-enterprise.cc
heidisql-enterprise.cloud
heidisql-enterprise.co
heidisql-enterprise.com
heidisql-enterprise.ltd
heidisql-enterprise.org
heidisql-enterprise.pro
heidisql-enterprise.tech
heidisql-enterprise.us
heidisql-project.com
heidisql-queryladder.com
heidisql-schema.com
heidisql-studio.com
heidisql-workbench.com
heidisql.database-lists.com
heidisql.space
heimatjetzt.com
heritage-interiiors.com
hexenabenteuer.com
hodkhewicz.shop
hohnston.shop
hongkongfocus.com
honorivalearn.com
hootsuite.promo-links.com
hopeplayeaux.com
hornetsecuety.com
hornetseculty.com
hornetsecurety.com
hornetsecurty.com
hornetsecuty.com
horpetsecurity.com
hotnewsreels.com
hplpert.shop
hrs-store.com
hyperliqiud.cc
hypohq.com
iaclaude.com
ibispaint.ink
icelap.com
ideyakraaft.com
illinoismerchantservices.com
immovablenesses-wishfulnesses.website
impulso-familiar.com
imputation-daddled.website
imputation-regretful.website
independentuknews.com
infomediabeen.top
infusiya.com
inscricao-enem2025.com
inteero.org
inteligente-iptv.live
intellectforge.com
interviewakademiedeutschland.com
interviewerbest-de.com
intex360.com
iptv-pt.live
iptv-smart.ink
iptv-tugao.live
iptv-xtream.live
iptv24-app.online
iptv24.live
ital-secure.com
italia-interviewers.com
itasobres.com
iterm2.fabsaintsimons.org
itmurrieta.com
japanesale.icu
jaskolski.shop
jeeplandgrow.pro
jeremywray.com
jogar-cassino.live
joinmorteseek.com
jokerlandia.pro
jokers-club-app.online
jongbloedwheels.com
joubert.icu
jpbluesalter.top
jponeclean.icu
juegosocialhub.net
juisekingd.com
junexley.digital
kaatzer.shop
kaizenflowtrade.com
kamerakunstakademie.com
kaneko-optical.info
kanta-suomi.info
kanta.info
keepass-client.com
kelulurn.com
keston-carcare.com
kievstar.digital
kikuchikara-jp.com
kiroxpath.com
kitchekinetic.com
klivontra.icu
knowarya.com
knoweriq.com
knowledgejumps.com
kosquex.fit
landioverday.com
landloverday.com
lchmeler.shop
leafdriftlandys.com
learnarabroostz.com
learndriftz.com
learnkomm.com
learnoxaorira.com
learnzypp.com
legacydate.com
lernkompass-de.com
lestrangelondon.work
letssignjapan.com
liberolavoro.com
libracontrol.com
lifewarehouses.com
linkbioda.com
liqvorax.de
live-fun.ink
lnastcart.com
lnstcard.com
lnstecart.com
logpayset.pro
ltngworth.icu
lucky-portal.com
lumensavesolar.com
lumverse.shop
lunarwhisper.world
lunatrixo.com
lunettes-selection-de.com
lurnexpulse.com
lusthack.com
macejkovic.shop
maisondu-bois.com
majimaya.org
manabi-michi.com
markden.com
masjidimamalias.com
mavorapath.com
maxgenhoupe.pro
md-ahk.com
mediahubtv.live
mediaifnosocia.icu
mega-app-games.website
mega-play-hub.site
mel-peludinhos.com
memeclip.org
mentoxapath.com
meritkings.org
mesitunel.it.com
methodunit.fun
metric-harbor.com
midnightridergrey.com
mikoflow.org
mim-iptv.live
mindaicademia.com
mindarablock.com
mindevarafluxis.com
mindexiscorez.com
mindospherex.com
mindzocore.com
mine-gold-play.site
minidoxiepups.com
mirae-patho.com
missyork.com
misterorgan.com
mistertradeai.com
mistfoldteddy.com
mixenaz.com
mobaxterm-app.com
mobaxterm-terminal.com
mobaxterm.console-workspace.com
mobaxtermatlas.com
mobaxtermdesk.com
mobile-game-city.website
mobilescoding.de
model-engineer.family
molassist.com
monbonvivant.com
moneyfinla.com
moneyresor.com
monitoreffect.com
monsieurs-paris.com
monstergrowdeep.pro
moonwhisperhaze.com
moonwhisperlake.com
moretti-menswear.com
mornava.com
motorverso.org
moxabazco.info
moxabrain.info
moxantria.cyou
moxatrade.info
moxatrend.icu
msperformance.org
musicolet.live
myeks.com
mygift-myonlymail.com
myndlyft.org
myndpusha.com
mytoolshed.club
nailsope.com
nelmods.com
neonwhisperbay.com
neonwrathnice.com
neosolage.shop
nepensens.org
net-optimizer.ink
nettoyaget.com
netzzecho.de
neuralsboost.com
nevadaslp.com
newhopechiro.com
nexiratrack.com
nexityz.com
nextrollen.com
nightgleamclays.com
ninajkitchen.com
ninjasharsk.com
ninjenkitchen.com
nmap-scanner.com
nmap.softwarep2p.com
nmap.space
nordicfriendly.com
norvaxiss.com
novaryns.org
novexagroups.com
nymcu-us.com
nymcu-usa.com
oceaneyedpray.com
ocoeeflooring.com
octorate.homes
offensive-microphylls.website
okcbusinessbrokers.com
oma-kanta.info
omakanta.today
omex-tv.live
omnilumity.shop
omnirecipist.shop
omniscaryahaven.com
omnivolt.shop
orca-spa.click
orthonormal-versos.site
osinsii.shop
otp-performance.info
otp-planner.digital
otp-planner.info
otp-platform.digital
otp-provider.digital
ottawacriminaldefencelawyer.com
overbrowses-carboniferous.com
overgirds-stalwart.website
ox-fanzine.org
oyunlar.fun
pacote-premium.pics
panotarypublic.com
panpacs.com
pathvera.org
pawrobot.com
paycrenta.com
paylumon.shop
payservicespro.com
payshopp.net
payvoltize.shop
pdf-fuel.fit
pensionikesk.life
pensionikeskus.life
perceptiveasi.com
peregrineclothing.co
personal-iptv.live
personal-tv.live
personaltv.live
phantomtuning.org
photo2-app.fun
pizaiolo.icu
pizaiolo.shop
pizza73-ca.shop
pizzaiiola.top
pizzaiiolo.top
pizzailo.shop
pizzaiola.icu
pizzaiola.top
pizzaiolla.icu
pizzaiolla.shop
pizzaiolla.top
pizzaiollo.icu
pizzaiollo.shop
pizzaiollo.top
pizzaiolo.cyou
pizzaiolo.top
pizzaloio.shop
pizzalolo.cyou
pizzalolo.icu
pizzalolo.shop
pizzalolo.top
pizzapilzza.top
pizzaplza.top
playstillway.com
playzones-hub.com
plexatrim.info
plubgbstore.com
plumosity-gammoned.website
plyzorva.com
plzzaiolo.shop
pms-manage.us
pms-setup.us
pochstudio.info
poeritosanik.icu
polemicized-godlessnesses.website
polyvids.com
porezna-technology.digital
porezna.homes
porezna.today
porezna.world
porn-aio.live
portalvridge.com
potentility.com
power-bank.digital
powerblink.com
powerfulbrain-hub.com
pravontix.info
praxcloud.icu
presta-facil-cr.com
prime-city-games.site
prime-game-zone.website
prime-gaming-app.website
pro-neustart.com
promo-links.com
propelwisemedia.com
prorecnest.shop
prosacro.shop
prosolery.shop
prosolis.shop
ptns-sp.org
purecanopywong.com
putty-info.com
qa-testing-academy.com
qintelai.com
qualborex.info
quanteroza.com
qubahar.com
quelamira.info
quietgroveover.com
quilzaven.icu
quixamora.info
quorynex.com
racedeepseek.pro
racertrickwill.com
radio-portugal.live
radiohead.world
rangermeow.com
rapidonline.org
readera-ebook.info
rebgale.com
rebgalenews.com
redlinetuning.org
reelsqueen.com
reise-mobiltechnik.com
remodeal.com
render3dai.com
resterd.it.com
revitalsolutions.com
revolution-say.pics
rich-mine-games.site
risevioz.com
riverbendpacks.com
royal-play-apps.site
royalscarribbean.com
royalts-app.com
royalts-console.com
royalts-remoteops.com
runolfsfon.shop
ruqwazen.de
rustore.rvtouls.com
rv-tools.eu
rv-tools.info
rvtoo1s.com
rvtoolaca.com
rvtoolaca.online
rvtoolacs.com
rvtoolas.com
rvtoolc.info
rvtooles.com
rvtooles.info
rvtooli.info
rvtoolis.com
rvtoolis.info
rvtoolit.com
rvtoolls.info
rvtoollsa.com
rvtoollsi.com
rvtools-dataops.com
rvtools-dev.com
rvtools-kernelops.com
rvtools-pipeline.com
rvtools-reference.com
rvtools-registry.com
rvtools-skillcamp.com
rvtools.link
rvtools.metric-harbor.com
rvtools.softwarep2p.com
rvtools.vmwarevelocity.com
rvtoolsac.com
rvtoolsacad.com
rvtoolsacs.com
rvtoolsai.com
rvtoolsax.com
rvtoolsbox.com
rvtoolse.info
rvtoolsed.com
rvtoolsen.com
rvtoolses.com
rvtoolseu.com
rvtoolsgo.com
rvtoolshq.com
rvtoolsi.info
rvtoolsio.com
rvtoolsit.com
rvtoolsl.com
rvtoolslab.com
rvtoolsmax.com
rvtoolsnet.com
rvtoolsnow.com
rvtoolsnt.com
rvtoolso.com
rvtoolso.info
rvtoolson.com
rvtoolson.info
rvtoolsone.com
rvtoolspro.com
rvtoolspro.info
rvtoolspro.online
rvtoolsrun.com
rvtoolss.com
rvtoolsuk.com
rvtoolsun.com
rvtoolsup.com
rvtoolsus.com
rvtoolsusa.com
rvtoolz.info
rvtootsacad.com
rvtouls.com
rvvtools.com
s3browserenterprise.app
s3browserenterprize.app
sailvatore.icu
sailvatore.shop
sakura-travel.org
salavatore.icu
salavatore.shop
salavattore.shop
salemajeri.icu
salfhlal.com
salivatore.cyou
salivatore.icu
salivatore.shop
sallvatore.cyou
sallvatore.site
sallvatore.store
sallvattore.online
sallvattore.shop
sallvattore.site
sallvattore.store
salvattore.icu
salvattore.shop
salvattores.top
sapceagent.com
satoricraftbox.com
saxo.promo-links.com
scentgold.com
schema-harbor.com
scorespend.com
scuolaoperator.com
secrid-de.com
securecrt-app.com
securecrt-configledger.com
securecrt-console.com
securecrt-terminalops.com
securecrt.session-ops.com
securecrtrunbook.com
sellvarions.com
sendpap.com
sensational-slots.ink
septictankservicing.com
servicesml.com
session-center.com
session-ops.com
shadowbloombay.com
shadowbloomever.com
shadowdancerplay.com
shaimabeauty.shop
shaoppay.com
sharkniaenja.com
shintralearno.com
shjopay.com
shlop.app
sholpay.com
shopapp.cc
shopeay.com
shoppau.com
shopperapp.net
shosppay.com
shrink-say.pics
shrseninjas.com
sibstarpro.com
signal-online.digital
signalonline.digital
signalprivat.digital
silverhazesoup.com
skaldapath.com
skillforge-academy.org
skillignix.com
skillpathlyn.com
skyshiftnever.com
slash-agency.org
slayvortexdays.com
smartdent-lab.com
smartgpuai.com
smartgrowx.com
smartheatswitchs.com
smartlinetech.co.uk
smarttecnica.com
snapriase.com
snarvadir.cyou
sneaxbird.icu
snugaldor.icu
snuxtrade.info
social-ventures.it.com
softwarep2p.com
solboundlandys.com
solerisparimo.com
solscaner.app
soluciones-yas.com
somerestlike.com
sonnyanglusa.com
speakingmastershool.com
spin-vault.com
spraygraund.com
spycygen.store
staoton.shop
star-play-mobile.site
starcrushworry.com
stardriftshift.com
starjumperlake.com
starrfy.com
statryxo.com
stellar-concept.site
stickman-farcers.com
stimme-wirkung.de
store-mauchs.com
stores-fine23.com
streakslouk.com
streamhub-tv.live
streamtv-hub.live
studiport.com
studylexz.com
studysinsight.com
studyviax.com
sunsetkissed.com
sunshinesnotes.com
super-game-city.website
sydelsierra.com
synaxopath.de
synrecipum.shop
tagesechode.com
taiwan-interviewers.com
talentsmomentum.com
tamaautoservice.com
tastylikeleaves.com
taycharon.com
teamalliant.com
tech-novapro.com
techelitegb.com
techrecory.shop
techvoltpad.shop
thafarmrsdog.com
the-digital-news.com
thefarmorsdog.com
thefiarmersdog.com
thefield.club
theine-overall.website
thesexmart.com
thewrightlegal.com
thfarmrsdog.com
thinkstrac.de
thirtysixstore.work
thisthingofours.org
threivemarket.com
thriftycard.shop
thrillforgenight.com
thrivemakret.com
thrivemerket.com
thrivemurket.com
thrlwemarket.com
thunderlaught.com
tight-vnc.com
tightvnc-center.com
tightvnc-courseware.com
tightvnc-ops.com
tightvnc.session-center.com
tik-app.ink
tik-app.org
tikltok18.live
tiktko18.live
tiltok18.live
timocorn.com
tirnocorn.info
titok-app.live
tjpull.com
tkmathsacademy.com
tokacarameis.com
tokaikisen.club
tokrwards.com
tons-kohl.site
toolstoreuk.live
top-game-world.website
top-play-app.site
top-play-studio.site
top-tuning.org
topaz-belive.site
totalists-syndrome.website
toyo-sasaki.info
tradingview-app.com
traidecode.com
trainloftz.com
trainnestz.com
trainyxa.com
treeshadowmonster.com
trendorabhs.com
trendorabnko.com
trendorabtkom.com
trendoramario.com
trendorataraf.com
trezqifo.de
trinktiger.com
trolley-swipe.pics
truenews1.com
trx-rent.com
tu-salvavidas.com
tubings-bonaci.site
turelarnalernix.com
tuser-vicio.com
tv-aio.live
tv-navegador.live
tylarlink.com
tylioners.com
tylorvex.de
tyronpath.com
ubelivery.com
uk-sibstar.com
ukcampsite.reviews
ukcarpfishing.org
ultra-game-vault.website
ultra-play-ltd.site
uni-tv.live
unionclothing.fit
unitv-ca.live
universalupdcode.com
update.rvtouls.com
update.rvvtools.com
urban-play-city.site
urbanindustry.org
vaultopsacademy.com
vchekac.com
vchekacad.com
vedic-uk.com
velmorahubs.com
velmoraqq.com
velvetstrikehipe.com
veresen.com
vexinakyn.com
vexlanix.com
vexnatira.com
vibesurgeclay.com
vicarageartfully.pics
vip-play-center.website
vireloraq.com
visitpandys.com
visualstorycraft.com
vivanotizie.com
vivantestudio.com
vmback.com
vmbacku.com
vmbackups.com
vmsbackup.com
vmware-rvtools.app
vmware-rvtools.cc
vmware-rvtools.cloud
vmware-rvtools.com
vmware-rvtools.ltd
vmware-rvtools.org
vmware-rvtools.pro
vmware-rvtools.tech
vmware-rvtools.us
vmwareenterprize.app
vmwarevelocity.com
vmwenterprise.app
volksreport.com
vorlentra.com
vrfuckablegirls.live
vrfuckdolls.live
vurmafied.cyou
vuxtamira.icu
vynqore.com
walletcounselor.com
wanderlust-journeys.org
watch-aio.live
weallmarket.com
wear-london.cloud
wildemberborn.com
wildfireheart.com
windcarveolive.com
winstonsofyork.world
wizardmerge.com
workbenche.com
workbencn.com
workbenech.com
workbeneh.com
works-forge.com
worldseafishing.org
wuckeet.shop
wysoria.com
xenoluxa.com
xonilqup.de
xtream-tv.live
youfreedomspinws.com
yudokoro.com
zdravljes.digital
zeemann.shop
zen-iptv.live
zestplay.pro
zolunqer.de
zowimcode.com
zylariq.com
zyntricaz.com
zyphentra.com

# Reference: https://x.com/goldenjackel12/status/2013877434421072187
# Reference: https://www.virustotal.com/gui/file/3ebc0df2b92a39d1fb4491b7aaf6996425214ebe85e6243f443f1db087172f27/detection

groover.workers.dev
etherial.groover.workers.dev

# Reference: https://x.com/g0njxa/status/2031034087801012435

horizon-client-download.com
remote-console-vmware.com
rvtools-app.com
rvtools-capacityops.com
rvtools-cloud.com
rvtools-dell.com
rvtools-download-dell.com
rvtools-enterprise.com
rvtools-install.com
rvtools-inventory.com
rvtools-kit.com
rvtools-official.com
rvtools-vmware.com
rvtools-vsphere.com
vmware-programs.com
vmware-remote-console.com
vmware-vsphere.com
vmwarevsphere.com
vsphere-client.com
vsphere-client.org

# Reference: https://research.cert.orangecyberdefense.com/smokedham/smoking_out_an_affiliate.pdf
# Reference: https://github.com/cert-orangecyberdefense/cti/blob/main/smokedham/iocs

angryipa.com
angryipac.com
angryipac.net
angryipsc.com
dbforges.com
devartc.com
devartes.com
devartos.com
devartq.com
devartsi.com
devolutions-rdm.com
devolutions.space
diskqenios.com
elasticsa.com
elasticse.com
elasticso.com
eliasic.com
emcocoftvare.com
emcosoftwr.com
feleasofit.com
feleasot.com
felenasofts.com
felenasoftse.com
ispyconect.com
ivms-4200.com
kibanal.com
robwaree.net
robwares.com
royaiapps.com
royaiaps.com
rv-tool.net
rv-toolls.com
rv-toolsa.com
rv-toolso.com
rvtoo1.com
rvtooik.com
rvtoois.com
rvtoolacs.online
rvtoole.com
rvtoolik.com
rvtoolsaq.com
rvtoolsme.com
rvtoolsv.com
rvtoolsz.com
rvtoolvm.com
rvtoolze.com
rvtootsad.com
s3bravser.com
s3brawser.com
s3brovser.com
s3brovvser.com
spyconect.com
thumaas.com
thumaos.com
vmback.com
vmbacku.com
vmbackups.com
vmsbackup.com
aapanel116864.hostkey.in
fastpanel116864.hostkey.in
admin.rvtoolacs.online
api.rvtoolacs.online
cdn-ae.azureedge.net
dev.rvtoolacs.online
server-software.azureedge.net
server-software-cdn.azureedge.net
za.rvtoolvm.com
08f0.proxy-edge-c5f.workers.dev
alert-router-b3a.workers.dev
api-gateway-a3f.workers.dev
app.sync-engine-d8b.workers.dev
calm-haze-cdae.test-runner-4b7.workers.dev
daniel-foster.workers.dev
dark-bar-d282.nina-alvarez.workers.dev
data-pipeline-9e4.workers.dev
db-proxy-9b2.daniel-foster.workers.dev
deram71445.workers.dev
dev-web-serv.noroho5002.workers.dev
dev1-server.sogal69343.workers.dev
disk-7133.identity-svc-9mz.workers.dev
divine-glitter-cfb4.elena-morales.workers.dev
edge-proxy-7kx.workers.dev
elena-morales.workers.dev
floral-grass-3c6f.cowivat156.workers.dev
identity-svc-9mz.workers.dev
ingress-ctrl-7c9.workers.dev
kaxij51156.workers.dev
kegemom113.workers.dev
little-frog-2e65.kaxij51156.workers.dev
lively-37b6.edge-proxy-7kx.workers.dev
log-ingest-f1d.nina-alvarez.workers.dev
mayisi1259.workers.dev
mud.alert-router-b3a.workers.dev
nina-alvarez.workers.dev
noroho5002.workers.dev
proxy-edge-c5f.workers.dev
rapid.data-pipeline-9e4.workers.dev
rem-cdn-server.mayisi1259.workers.dev
scan-engine-a2d.workers.dev
server-web-cdn.kegemom113.workers.dev
sogal69343.workers.dev
square-wave-65dd.api-gateway-a3f.workers.dev
sunset.vault-proxy-5d3.workers.dev
sync-engine-d8b.workers.dev
test-runner-4b7.workers.dev
vault-proxy-5d3.workers.dev
webapp.ingress-ctrl-7c9.workers.dev
webapp.scan-engine-a2d.workers.dev
young-tooth-5980.deram71445.workers.dev
