# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: ta582, TAG-124

# Reference: https://x.com/malware_traffic/status/1884476331821326816
# Reference: https://www.malware-traffic-analysis.net/2025/01/28/index.html
# Reference: https://www.virustotal.com/gui/ip-address/86.107.101.93/relations

adlndb2k9too7vt.top
cyz3a2ykhj59kx8.top
f5sx3kqkz03db00.top
fmnljjmaeihehge.top
gq6dzbnl8rkxp1f.top
happychristmas.click
toavt7i2d6fgwei.top
yfh5jg724eu50iq.top
z0vlf733d4bpek4.top

# Reference: https://www.virustotal.com/gui/file/2c38cfeb19129f8d8169b4b582bb1ed8b446c738a684aa2fd987b2ec996787e5/detection

ofjubuznb3ugz.top

# Reference: https://malpedia.caad.fkie.fraunhofer.de/details/js.mints_loader
# Reference: https://app.validin.com/detail?find=d19f9a166178a3865b959cc108068990&type=hash#tab=host_pairs (# 2025-01-18)

adkfnnbmakcgael.top
afglgehgjgjmgdh.top
afnfdijahijefmh.top
afsfff44by.top
anldfaggmdbglen.top
bidjdlegcnincee.top
blclmjamegjaffd.top
bmadfjbhnijhckh.top
bmbuz83hhhhg73.top
canjjclmlnicbga.top
ccibchdgfjbhhfk.top
ckahaebgighbngc.top
dckhgjimeghemhl.top
diebinjmajbkhhg.top
ecmkkjcfdbjfbkf.top
ehjdilgfljdimkg.top
eizcic3.top
ekbnfghmhcaldid.top
eldcjfbfglbngll.top
feheecfmkmhfiij.top
ffjihcnfkhihlmd.top
fnbagmmgneabdmi.top
fnnkcnemajnnaja.top
fubuzbvy23nnn.top
gbkiafbmhbmbkkl.top
gdsubbuz3hbyy.top
ghecbjcmdfghfkg.top
ghggfjkgdahjina.top
giahbuz3bbuz2.top
hbmmdfjggkadnnf.top
hdebljjjfidlnec.top
hhgiflifcbmdjmh.top
hjbamcnnkmfjbld.top
idhglmmnaimdhlj.top
ikebnbckbjlmfjf.top
immmjjkndeekmma.top
jejmbadfmeenlnk.top
jgeeifjnhbledmg.top
kmaealcfcalhcac.top
kmchelkmbjmifdk.top
lalclenfjhkinbn.top
lbnfbehmicmkceh.top
lggknhaffleahbh.top
mdinjlkfcajkjck.top
media-amz.top
mgubu48bnxi43.top
midhkalfmddcece.top
mjflaafmmmeehfm.top
nbuz73ubhzu33zz3.top
ndkdmkenbjlmmfe.top
nhjndjemlimakmk.top
nlafhhiffkceadc.top
nlcjlhcnffdgdgk.top
nueyfrtvrv.top
nzy3tvbb72g3.top
pitibnzi4un.top
ssl-imgamz.top
veadytgffttw.top

# Reference: https://www.virustotal.com/gui/file/1f44cd566148bd904dcdb632c11cf3917f694c98ce0e69560932f49cc8fe4107/detection

kibcfmgnahkgand.top
tubuz3ubhz222.top

# Reference: https://www.virustotal.com/gui/ip-address/192.153.57.125/relations
# Reference: https://www.virustotal.com/gui/file/59015eae646b3c2ff97d775eb40641ad6f3992ec7dfb2f12121047a7852ccc3c/detection
# Reference: https://www.virustotal.com/gui/file/557d6fc2139ca5ad6e0cf5de5f61659c3247c62d68be39c653c7e420f13ddd96/detection

bnaye4ybvgzueb.top
cmacnnkfbhlcncm.top
gsosnub8zg3.top
hkmlchlbjibdafd.top
jlijkijkkklbkjn.top
ngub8zb38ib.top
pbbizibizi3v.top
phsujibusy4ubad.top
shd9inbjz4.top
soeubit.com
/6kw81vnr3shtr.php
/fa5y7jvmghhtr.php

# Reference: https://app.validin.com/detail?find=d19f9a166178a3865b959cc108068990&type=hash&ref_id=2c26c089669#tab=host_pairs (# 2024-12-17)

adanddcdjbdefml.top
aghbkdbnibkajhb.top
amgfcnadnlkmlmd.top
asgibiai3vz2rbv.top
azurearc-cdn.top
beefmeme.com
bfhdkgmmhdbikgj.top
bginkhdndigadkj.top
bifnhkmnbijbfim.top
bizuegy6z.top
bkkeiekjfcdaaen.top
bmuegbvuz7u3b.top
bnayvhgb8.top
bnbuzu49ibz4.top
bnzuyeubizh3f.top
cljhkcjfimibhci.top
dfbkbmbceaafmec.top
dfgiubuxur.top
dhmfekmakacdadc.top
dmknandkbhgnkld.top
dnhidlaihhilnlc.top
emildeeeabebggm.top
esbux83hbxze.top
ewrulfirkyskrsw.top
ewsghvusu3.top
fazubuzbw3u2.top
fdsgujhnby.top
fgghahagiiekjhg.top
fhilnadeaigligm.top
fimcu3u3vz.top
fpziviec.top
futnbuzj3nh.top
gajaechkfhfghal.top
gesuhbuzu4.top
get-iwrreq.top
gfnemilkeaaaeek.top
ghybu8as.top
gibjzkp3jboz3.top
gkn33hxueub.top
gneklekkikhikec.top
gnmdjjckbgddaie.top
gonjyeybhz3e3.top
gpoxcbiuevbz.top
gsbnzi39gjnz33.top
gubyzywey6b.top
hikcjbiklgabbfh.top
hkdecchgkhgleal.top
hkinuxb3bz.top
howmanychairs.com
iblaehgffmflamn.top
ighnjnueuelll.top
iiuthbuzev.top
ikjfjkkagafbdke.top
ittubmm4rirub.top
iviuziu38z2438b.top
jhkenjhehiadfbn.top
jhubzgv3.top
jjdgdeffjimfgne.top
jmfprcpenkqskxk.top
kcehmenjdibnmni.top
kdemjgebjimkanl.top
kffgkjmjangegkg.top
khkeclbkacfnnih.top
ksdgbx9oenj.top
lcdjbjgdkibifam.top
lgbibzuehbz.top
lqalmpkebwpvdaf.top
mbdbgkfdciedjla.top
mbuz73hb7z3.top
mdeakcklcgamcni.top
mgkwjihehqcknbp.top
mguiwyvu8345.top
miutubzxe.top
mljginjlfchghan.top
mnatyvgzy3r.top
mnudybh4unh.top
mnvuz3gvy3.top
mubuzb3vvv.top
mycommsupdate.top
nbcjihgecijhmnl.top
nfuvueibzi4.top
nubxz4ubhxz9i.top
nuvye89bjz4.top
oeiurybuzgeus.top
ohunhebzhbu3.top
opribhzuw8bz.top
owrquzbvzu4b.top
poeiughybzu222.top
poubnxu3jubz.top
prighxzuebb3e.top
rifiziec.top
rihgi3ibn3ube.top
ruhuzuu3vzbe.top
ruhybh74ub.top
saighbuzu32uvv.top
saubhziu3ibz.top
sdgobhjzueg.top
sdubvlbbuz3vzzz.top
segibuzh3hbz.top
sfibhzu3ubhza.top
shunhxuehbu3.top
spogibizxuur.top
stlrg124.top
tubnzy3uvz.top
usdhhbuzui3v.top
vbzyeur5ibhz.top
web3-authframe.top
wtwudybqrukmclc.top
xjhgbsyqxnwblmm.top
yxrqxlvregipunw.top
zmeueybyz44.top

# Reference: https://www.virustotal.com/gui/collection/60eaccde7d13ee5f19b7ec1cb1ec58e69b825c4755ddc4505458df65a6eb5a04/iocs
# Reference: https://www.virustotal.com/gui/file/9dc3495a6ba058977a72a45732277524e5fe8975f3180a89b672234536224f34/detection
# Reference: https://www.virustotal.com/gui/file/ccdf82b45b2ee9173c27981c51958e44dee43131edfbce983b6a5c146479ac33/detection
# Reference: https://www.virustotal.com/gui/file/c1db76929e4723c2824b66bb062fe608c84e00e4df02ea70aff76661c312f710/detection
# Reference: https://www.virustotal.com/gui/file/5bf852829ddc1655796ec778f04adb92f685800dbda0380814d39ce022d44443/detection
# Reference: https://www.virustotal.com/gui/file/1e2f3f3be9eda8c98dbe2fbf903fa9185b9b1612553be334a87985223cd07b02/detection

527newagain.top
bajcgicdiinbegb.top
cfverclsid.top
cignjjgmdnbchhc.top
faybzuy3byz2v.top
eebchjechginddk.top
mcajijknegnbbga.top
robnzuwubz.top
/4xwkjhmf0thtr.php
/7l382vdthuhtr.php
/72lbnz85t4htr.php
/8juvid7zmwhtr.php
/c5fejq38wxhtr.php
/iduqkxn7s3htr.php
/jnpdcoxuv8htr.php
/z39hrcfekvhtr.php

# Reference: https://trac-labs.com/dont-ghost-the-socgholish-ghostweaver-backdoor-574154dd9983

djdi6tukqamtyym.top
r3vgxgl24fywid4.top

# Reference: https://x.com/DaveLikesMalwre/status/1890146942631702962/history

http://64.95.12.42
64.95.12.42:443
allcarauction.com
doearencorinthians.com

# Reference: https://app.validin.com/detail?find=5b735c4ca898e63c537b62dfaa09291f&type=hash&ref_id=98b2b5da99b#tab=host_pairs (# 2025-02-17)

192.153.57.90.sslip.io
45-61-138-38.cprapid.com
asguhuhbi33g.top
auhbuziejbius.top
eruihvuzue3ui.top
gauhbuysj3.top
ghusunbisi3.top
gjbubtuub.top
gnyzy3u4bbzwe2.top
kiguybu4tbz.top
mail.45-61-138-38.cprapid.com
makeyoursub.info
oierhjuhbi3i3.top
prubhzeghb.top
tbnzuejbize.top
wearsebralndead.com
zpoeritjbs.top

# Reference: https://www.virustotal.com/gui/file/bfacbee12a9a3781e4c2728c904e3078925f3d96e6365ceeb03f81ab34bc27be/detection

banhiaanlmdhahh.top
ewhbuxu3ibz.top

# Reference: https://app.validin.com/detail?find=67.217.228.80&type=ip4&ref_id=39d46916990#tab=resolutions (# 2025-02-17)
# Reference: https://www.virustotal.com/gui/ip-address/45.61.136.67/relations

http://45.61.136.67
fhadcadeelljmge.top
gbfialbehidddhj.top
iejkbmggndnekad.top
kbpaovmeuedhtyu.top
ktnxsicyrhffgds.top
njjhegddgfllalg.top
xbfeffomvrxaxql.top

# Reference: https://app.validin.com/detail?find=eafc61809a25b8a654d0c45cfac8b8b8cd3aa1d2&type=hash&ref_id=72fe64ec118#tab=host_pairs (# 2025-02-17)

eughusu23.top
tibn9ierijb.top

# Reference: https://x.com/RussianPanda9xx/status/1891504671300153591

3dijvbhfyutu34j.top
jlltk5azih351g4.top
mieuyyzbv334s.top

# Reference: https://x.com/RussianPanda9xx/status/1891876225284452504

anccvfsrkauefoh.top
bgllakndcidgcnj.top
daedfjkgnikkbkb.top
gnbmanbacedkgaj.top
icciilhkbdgjggn.top
kdljlignmgemecf.top
l284afj165tqz51.top
mioasfybz7y4.top
nfuagy7fgus.top
nuuhhcfenjoywca.top
u9oaqye2mww19fx.top
wu2qmpa2vndlnhb.top
usdgyzjey4h.top

# Reference: https://app.validin.com/detail?find=94.131.101.85&type=ip4&ref_id=78adb29a186#tab=resolutions (# 2025-02-21)

bdmnsyqrqshsopr.top
caddngldgejahna.top
ciijlckdjacimag.top
crwxqsnrwmthyqc.top
ddabknjdnliceal.top
dhhjollrefgvirm.top
dlghjjhdchbkjbd.top
helbbcmejnnbmej.top
ikhagifkenndlge.top
jengfeekijgldhk.top
jmemebcklgmfihc.top
lbbkbinkemlhein.top
okfsfvcetdbngdk.top
papecoyebvmcqeu.top
pucxumkixhitdxk.top
qoaoaiwehoyqaff.top
sekawctenilfkgp.top

# Reference: https://x.com/malwrhunterteam/status/1894147528972468478
# Reference: https://app.validin.com/detail?find=178.156.128.182&type=ip4&ref_id=8c1cfbf0b14#tab=resolutions (# 2025-02-25)
# Reference: https://www.virustotal.com/gui/file/fb98c0e8dccab7fda59884315e58c6d5d02973afacd0bcefa0815a0b4120a525/detection

054l1q8clc3ga1k.top
1r44zklfp4caq35.top
2rj0yh5cu3k0n2z.top
3cxfu81c2t1l14d.top
4yxzs2df7laeg6x.top
5xbvryxdbki5e5r.top
6jbeot9ffbryu7c.top
7iqanptdkazps76.top
834pkgqdt1g958k.top
84pulk6fo28j79q.fun
9p49hb2fxsp3la5.top
aoi5g7md2rxtjaz.top
baioe2yf6j6nycj.top
c9xkdyidbieewbd.top
cvw4asuffan7cdx.com
cvw4asuffan7cdx.fun
dub09pedk9vyadr.top
egbj7jrgo04rpec.top
fbm2q7cw29odahn.top
fgpf6gbdtzcine6.top
g14u277d2qt21gk.top
g2py3angxrmc3gq.top
ga1yo3wu78v48hh.top
hvfdlusugzdoliv.top
hw1hmy8wb05xnj1.top
ihfwjp4xkqmi1kf.top
jgushlouppu8zk9.top
k2tcff1xth32elu.fun
k2tcff1xth32elu.top
l188ecluygbsclo.top
ln8rc6xx27kmsn8.top
mmmna3hv77sdqn2.top
n8m78xtxby165on.top
o7127udvgx9x3oh.top
qef11fmxtfzbwrf.top
qtfi3l9vpoqhgqv.top
retx0c6vye71ur9.top
s0thy6ix26gvatu.top
tz7dw32v75ol7so.top
ukmstuyvfv56lu2.top
ul7wuxexbwxfnu8.fun
v6mbrobyknez1wn.fun
w507pluvommqyvh.top
xr0rnf7ysdvkex1.top
yce6k63y14c4szf.top
ylb962se7ne5z0c.top
yqenmbrvxc3acxv.top
z6qp2tofgdvqc1q.top
zbt2i2nw63kupy9.top
zkq55zcccmmww06.top

# Reference: https://www.huntress.com/blog/fake-browser-updates-lead-to-boinc-volunteer-computing-software
# Reference: https://www.virustotal.com/gui/ip-address/64.94.84.200/relations
# Reference: https://www.virustotal.com/gui/file/3abdcdaf35d27527fe642e94cf0b33b72267e1f05fa8d947d3c6f9bd4e79f63c/detection
# Reference: https://www.virustotal.com/gui/file/11be386867f47cf17cd8f556efe4a89ba46084cbb13f608bae5591ed75532dcf/detection

adednihknaalilg.top
bfcfkihhjhldhbf.top
cangmifbdhhidha.top
dcliihflnaeacln.top
flijkidfhaaendh.top
fndfgcedjaalfca.top
ga1yo3wu78v48hh.top
gggkmibncajjjic.top
glcfjyfrqreycth.top
hidmjhbklhgbimb.top
jcbnlineghcffek.top
jembhhnabanmeij.top
klmnnilmahlkcje.top
lnkcjhlikajcaad.top
nihclijcfaeglfm.top
nkffihjnahcnkkl.top
ugagyvy4ubtg.top
uenjffeqkbxxrkr.top
/4gdufvx3ezhtr.php
/9kp158bfixhtr.php
/hwgk5n7slfhtr.php
/d%20czioh%20f.php
/k%20lzioi%20l.php

# Reference: https://cert-agid.gov.it/wp-content/uploads/2025/03/MintLoader-10-03-2025.json

aabmieglhidedln.top
axahmvcunfdlcjh.top
cnksjpyuuxpalkr.top
eflnhggdgdieacj.top
fhilfndenkhfldg.top
gcaddjbecgancdl.top
hkfjcgaegdghhed.top
jwduisxirpyygsk.top
klngfmuixjlnqtu.top
lbxqdgsiecxcauf.top
ljhcaemkhjeakje.top
mdnimbkllflibjk.top
mqicaapikukqjvp.top
ngkgkiilelkkllh.top
nmealljlabdcgkc.top
ofsnxsnirovftwa.top
poejhsjeuiwd.top
xtflqjhubseiihm.top
yipwodeuhlqwriw.top
robsonpeluquerocr.com
robzombierealestate.com
rochesterhillshomevaluation.com
rockandroselawns.com
rockfordgraphics.com
rockymountainsaxophone.com
rockymtnhy.com
rodandoporlavida.com
rodhighar.com
rogerhauling.com
rogersrevue.com
rogharayurvedic.com
roguedigitalnomad.com
rollercoasterkids.com
rollingsmokeandvape.com
rollinsmokeandvape.com
romanchit.com
romanisolav.com
romansspirituality.com
romeprivategolfcarttour.com
ronbb.com
rooferz.com
roofproroofingcompany.com
roofwashexperts.com
rookieowner.com
roomindubai.com
rootandcreate.com
ropaonlinecolombia.com
roperetreats.com
rosalindagonzalezartist.com
rosebudjewelery.com
roslyncamuglia.com
rosyhomehealthagency.com
royalcylindersusa.com
royaltymeat.com
royluxtour.com
roypriyanka.com
rozanaanews.com
rozzhealth-beauty.com
rp-realm.com
rsvp2learn.com
rubberduckiefunding.com
rubedomarketing.com
rubinfirm.com
ruchisales.com
ruipapa.com
rumiangame.com
runzdt.com
rupine-labs.com
rvindustrialsolutions-store.com
rvrepairmedic.com
saakinsurancegroup.com
saalmurphy.com
sabahaquademy.com
sabrinaforclerk.com
sacgaragedoorservice.com
sacoverheaddoor.com
saesoluciones.com
safariinegypt.com
safehavenvault.com
saferdeodorant.com
safetexplusgh.com
safetyadminstration.com
saidmorebetter.com
sainithintech.com
saintjuliacc.com
sake-notes.com
salestrack360.com
salishlandscaping.com
saltrivercompany.com
sama-gi.com
samflorida.com
saminenonen.com
samizstores.com
sampoernapusat.com
sanasanamidwifery.com
sanavoz.com
sandtondaily.com
santabarbaraclonesnursery.com
santafeinvestments.com
santahohojoe.com
santiagoalpizar.com
santiagobelacqua.com
sanvadvahini.com
sapatilhaspensadoras.com
saplingsage.com
sapnamalik.com
sarcasticsimiansgaming.com
sarkariresultss.com
satcomacademy.com
savarifitness.com
savesns.com
savoiretpartager.com
saylot.com
sayroofing.com
sazary.com
sbpropertyproject.com
scaffoldingriyadh.com
scaleimpactcapital.com
scalingtime.com
scandwood.com
scansimpli.com
scaryaisle.com
scavigo.com
schemantic.com
scholasticadvance.com
schoolhousetechnologiesllc.com
schoolnewsdaily.com
schuylercommonsapts.com
sciencemachineshop.com
scott-bragg.com
screenplayacademy.com
scrubsdirect1.com
scrumitout.com
scrummytummies.com
sdractiderc.com
sdruiz.com
sea-to-sales.com
sea-vulture.com
seaboardstravel.com
seamlessairalliance.com
seanfarbolin.com
search4vape.com
searchfries.com
seasonsbyatlantica.com
sebandlari.com
sebastiancarrillo.com
secofstates.com
secondmountainadventuresforyoursoul.com
secondspringplanner.com
secrethotelscollection.com
secretmanifestations.com
secretrecipegourmetfoods.com
secretwindowstudios.com
securedbworks.com
sedgefieldpress.com
seedsinabox.com
seedsontrial.com
seethemoneypath.com
sefiria.com
segnanthosting.com
selectivecollective.com
selfenhancing.com
selfhaircutmirror.com
selfimprovementfocus.com
selfsufficientshopper.com
sellanyphones.com
sellfromtheheart.com
sellmystyle.com
sellusyourcarid.com
tlg1hvbbq02ci28ghkf2swv49zrmnf8n8kco6.ronbb.com
uoikbmio6mym0kc.com
/yr2tza05mghtr.php

# Reference: https://threatfox.abuse.ch/browse/tag/Kongtuke/ (# 2025-03-22)

bhaighhdebikfge.top
cmiklajbmincnbe.top
deanbimjnlbkgec.top
deecmnfemamgjed.top
dejlehfiiibgbcm.top
dlbfdiabhhdaifg.top
dlnelagmjgeaime.top
dsgubuz73gv6322.top
fbeadhdmmbidklg.top
ffmikjcfenjanii.top
fnglhhdcdilllhh.top
hkbafhbghbehhda.top
jhkddhnllikecni.top
lginchimfgfckeb.top
mknjddllgakhaje.top
nmchehjjkbnfiak.top
vnuefff555hr.top

# Reference: https://cert-agid.gov.it/wp-content/uploads/2025/03/asyncrat-pec-25-03-2025.json

ebmmnhkldkhdlbk.top
herophombyre.top
mgibfgcefbdahig.top

# Reference: https://x.com/skocherhan/status/1906616989893746993
# Reference: https://app.validin.com/detail?type=ip&find=185.250.151.155#tab=resolutions

acrtyfmjdxpvnha.top
ahdkfhbmdhbdlkb.top
aihehafllejmime.top
ajncmmgfleiiejl.top
akclafkefbcdala.top
ampaovunhdwcjda.top
anmegkcmnlijgkk.top
anrpmujswopsulb.top
atcpvjdaxfsrebp.top
bbjcednmgeildlh.top
bcakmprnnvjqtek.top
bcmkgldlaacgnmk.top
bdaiadclnkiagib.top
bdfikiffbaacjkd.top
bfidmcjejlilflg.top
bjicchekjncgbij.top
bjmbtcbaexfgnca.top
bmkajfdfekhkaki.top
brcfvyjjkrckwik.top
cegabkkmnkhmnme.top
cfkidealhhbhknh.top
cjbicammkaaeiln.top
clecehclelinenc.top
clfanablcgbimjg.top
crkvkjpntpvfdfu.top
cxwlrvxakrruxdk.top
dcuehjvvbqcoulc.top
ddjrxxmvnfvdkjv.top
dgdlmdhmgdgaknb.top
dkcnhcdeikhbmaa.top
dmmfahjmdhagemk.top
dnbabanlldibban.top
dnsjxaeyevjvrhc.top
eajdlagmknnibah.top
ecduutcykpvkbim.top
eeiffmcemgaieag.top
egmmcmfdemamhmn.top
eguhhdmnaiitmgf.top
ehhgalllaaajgbe.top
elhgdcgdbchecli.top
emnlejafbdgcjbl.top
erfoectvhkndfmm.top
estcvrkwtyirukg.top
eyrflpcixmjsakd.top
faedbjddijhgnmf.top
fdgbihdmdgmklbe.top
fgfddfnffnnkabd.top
fhenslhwarugelq.top
fhpacvqvndaronw.top
fiajkkemnkfcgan.top
fkeeleilhgaldcb.top
focpjiyiefvhjln.top
fvfrfvjnhcuiwhp.top
gakjbclfijfefci.top
gdmbgcwilyivsnx.top
gejkkahlkdgfich.top
gjcbamkfmgmmlca.top
glmhhdcmgcfddbk.top
gmbcjlglannmndn.top
gvalypovtwmgxoh.top
hbmagedlhgmakek.top
hdihnjifbcfgcdg.top
hfdnfnamknllicb.top
hfmnjildiifkgbn.top
hghihheldjfgede.top
hkhhlmndemncaai.top
hlkvwjlvbpyuipr.top
hnjfeknmnjefnch.top
hswmevtirrukdoi.top
ibuhucivhjljrqc.top
icgdbdkmgcdhkee.top
ifffkbffijehmed.top
ihinmjjecgmdjgg.top
iialdglmcflnedn.top
iihwcorixlhymps.top
ilnnlfhffmlahel.top
imdhnnlemjgjefa.top
inefifkdlemdlbf.top
jbaflgiefcfkagl.top
jbbdfmheellfhcc.top
jhjlhbieabelccl.top
jlrmktqaknsqomc.top
jmtdirgfbylhaud.top
jnkljmefmflbefi.top
jpfsrvgvncxxcrm.top
jwriyiojeetnvqd.top
kbcximoaqhffxnm.top
kcengkdfhsxvjvn.top
kciigfbfemkdagg.top
kdldinfemjemlhi.top
khldldaknllhgem.top
kicchidfbbdjjfa.top
kjfljchejmlefhd.top
lamcnajlkbdmihk.top
lbdjkamkchebmfe.top
lefgdmmflejflhd.top
lfpdppdvtvjmlsw.top
lieimkimamkfnhb.top
lknafbafiiclfgl.top
llcjgjeecflgcia.top
lpmjgglawartiow.top
lqoydebfnlkkswx.top
maahecbejmkimjl.top
mcjakhgmdidneih.top
mfwtdajaeteirph.top
mgykbxxftfvydxi.top
mkbgjdfmhejhkjn.top
mkibiklkgekjdfj.top
mmkkkmrmuvaxmnx.top
mnkmcilfbbcnchi.top
muaomibvaovbuth.top
nbhknbifihbamjg.top
nbuuifonbommvoi.top
nclfbjmecejjjki.top
nfgmiaemkbcbbje.top
nhceafjfelighia.top
nifncmnemidcekd.top
njjakcxvhhipfur.top
nuhfbsgakmqwbqr.top
nvjuyrvfaxinmys.top
oqfgfymnhhybgps.top
pfaeldsmbmqbatk.top
pvrlmcbjkvdisvd.top
pycbvgbawyoausm.top
qkcwkuxjqppwdwn.top
qkmjsgiiebuinyu.top
qrayasqvudqxhwl.top
qukojwqmhfdpjuu.top
ramihovjwiblmxx.top
rgkkxlnvbvdnrxv.top
rommtyxadrboftw.top
rywuqyfikthwwaf.top
sohfnsciqntlgbp.top
spwsfisjebnavyi.top
svuvuflvhopcbyg.top
terqlmaiwggbqca.top
tlfgsyivoibqkbq.top
uaprprfvubnfucb.top
usccifwieyrpadk.top
vimmgyujkseejeu.top
vpadnldvbuatedl.top
wskswpdmnxmkgau.top
wtmiuorreiebriv.top
wxwxesrjqlqstff.top
xiudtjamtqyyqbf.top
xjwtrhprkcqpbjg.top
yereypgarlgduaf.top
ymhjbmojwfdhdgp.top
yxfordwmbjlnacp.top
yyhepbmrqudelkq.top

# Reference: https://github.com/PaloAltoNetworks/Unit42-timely-threat-intel/blob/main/2025-04-04-IOCs-forKongTuke-web-inject-leading-to-fake-CAPTHA-page.txt
# Reference: https://www.virustotal.com/gui/file/dcf91fe594ba01d5aabb537b79a3360e1a26412645334708c4df45cd71af0fb8/detection

173.232.146.62:25658
5k3nof58gopuruq.top
75h3k628pe6e4w4.top
8qvihxy8x5nyixj.fun
8qvihxy8x5nyixj.top
ousv4bmqk1fmgdf.fun
ousv4bmqk1fmgdf.top
pf6a02iqtrw6tet.fun
pf6a02iqtrw6tet.top

# Reference: https://x.com/skocherhan/status/1910843696779509857

bnnjlmhemhbflml.top
chfbkjgebeincmd.top
dblhiffefaahhni.top
frnfsmyariiyljw.top
hhwqpgwaxbunukh.top
ijegfablkcfibfb.top
ivhcnataeuhcflr.top
jdjmdlalamlcgfh.top
jlbechmldjeklgn.top
kfgkbellhfledge.top
rkuagqnmnypetvf.top
syflejkmurbsdwp.top
uopvcdimblnhmxa.top
veahywfmheavwyk.top

# Reference: https://x.com/malwrhunterteam/status/1911718254155870599
# Reference: https://www.virustotal.com/gui/file/3b84447288c2f0d93f40eb745e1126dc947d0defbdbe1bf1d62bfad5b67031e4/detection

36gls0oe3msx88p.org
3vwan1xdh0z4q5u.org
ep7y1u06lobcef8.org
f8g9jas0x35ftzs.org
km9a3yy61pgm8lk.org
krz4vj8df5egqq3.org
ks2k5gawp30n9z1.org
lke007k8nqgm8vf.org
m12pcuzql1cx6gh.org
nssx5wpifg9pqk9.org
o7tpe4pocenteho.org
wxbysns6uw3do5v.org
ymjgcxtlp2cck5d.org
folu-molinujera.store

# Reference: https://x.com/JAMESWT_WT/status/1920008940286259593

sdfjkhgyu6wjkhlasyhd.top

# Reference: https://x.com/JAMESWT_WT/status/1930185550733946941

abckdkfkgdjnkhe.top
agleeagkchcffhm.top
gcbbmcadbbgijac.top
gikjnfcdlfnaenl.top
gwoyqeewhlhuomb.top
hmyjoxcwnetjxnl.top
khpnpywmhjbusld.top
lwaynsumocnjdmn.top
meaghhjkjaddigb.top
nmfmgdiknkklngg.top
tehecbqjkuaogas.top
wawieclaeyiabxk.top
xphtbvialsuokyu.top

# Reference: https://x.com/smica83/status/2009562090889981970
# Reference: https://www.virustotal.com/gui/ip-address/64.52.80.153/relations
# Reference: https://tria.ge/260109-lp6gtafz7f/behavioral1
# Reference: https://www.virustotal.com/gui/file/fbaffde7fbd5ff1281dfa05cf345479d96900b2d5448a1a18f2cb1a67d50d7fa/detection
# Reference: https://www.virustotal.com/gui/file/abe68d398b4ce97e17abbba59d92cf7efbfb45dabe5570d25492f4c190eedae9/detection

http://144.31.221.71
02dpdcogymwpdwc.top
0e097nxkd9ajhil.top
0ib1rmsleh2gzvr.top
1e1shpsxogwqhrx.top
1f0il2bod83zgqs.top
1xt8ttr3jgw3h0f.top
22uyzzv22.top
25q2yhr2vitfdb1.top
2l9wb4xa46rdjjx.top
2ougybosfc9isfv.top
327e47dpfmjs98n.top
36zzvbcv63hfy37.top
3eds4jqf9fzud80.top
3y7b1y5462txnf2.top
41gl1ww3murziku.top
41idznh5cfmrrfl.top
4ao4mbovd208869.top
4k6mem6fgpzfzdu.top
56fxr2mb044ukvx.top
58jv02y36ird7mq.top
5u3wrytku2dm9ft.top
5zmf94i5sprssup.top
6fqc2fia6ko49zf.top
6llqmsjf3cwa4sh.top
6nkcru9wi4bzdaj.top
6snnce05wcquphl.top
7ofdg5x587peaia.top
7oiaaiedgdrmsle.top
89m49xrudv1e77o.top
8bmgeyvyllpwvi6.top
8znu232kmuenkxm.top
9mztuyxgqyu4a74.top
9tw5qora5yx284j.top
ahuekxlweyetw6w.top
aosfemiz80bku4j.top
b2yqkb9544mqg1e.top
bastvtz3.top
bc98dthwmvtsigi.top
bfhjjmakdnbddcf.top
bfhkanfdknfhekc.top
bfnhhhdnkggfedc.top
bndw23ahdlrzfms.top
burs0vw823lmp5n.top
bz1d0zvfi03yhn1.top
c84ozt28kwle6pi.top
c9c7frbrn8xhrjj.top
cafmkadaldchcnl.top
cbchnmamedefenk.top
ccmhlgecmiaggja.top
cdjcafbaejcfiin.top
cegkddlmkjedkin.top
cfdfgcikcjgcnhm.top
cggkfjhginfbnjb.top
chaa5rx4kw7pmjy.top
chaajafiikiabhl.top
chdmkalmlmihfji.top
chhkejhdlifgjkg.top
ciljmnbgakkndgk.top
cjgjkhfkibgaeca.top
ckdengcibbinhca.top
clancenghckljbn.top
cmliedkencmklbm.top
cnidhbgcfdaiaal.top
cungw8p0n9m9mbs.top
cytygl2dryi329n.top
dbbmiihefimidjb.top
dbdclnchdlgknhc.top
dbefmnmeigiccje.top
dbncdggdbemaalm.top
dh41q00b09xw3y9.top
dhnnacndfjbilim.top
dibhgajnecmimdl.top
dijahjjmcbeccdb.top
dropptekh.top
e835un68ylyjbsi.top
earanxosavubxy6.top
ebmnbabegeffabk.top
eoh888x58to3u1k.top
euyvvb2652.top
ewacworhvd73pv4.top
ey267te.top
f0ewyvo9f6s8deg.top
fagn1dinrii9bsz.top
fimhijbfhajhjcf.top
fnjnbehjangelkd.top
g5mvdwd8yue0jyy.top
gb5eu22txhr62du.top
ghzuzueu4543.top
ghzyvnzet.top
gkdcfeincaiaing.top
gliflgbljencacm.top
gmbemejilffaacm.top
gtorv47sta954ot.top
gztmjz0nv5hwg15.top
hbsayv7a2.top
hcebcnclckchfbg.top
hcjaacfdenbkgje.top
hedbbkefkfigmgn.top
hfljdhnbakgijjh.top
hgmldljlkanfjmi.top
hii9y97g4nf3zgv.top
hlehkjnggakkenj.top
hru0hh8awlie3vq.top
hwuxpdrc7ugfqtp.top
ienkeheimbbnflc.top
ifdibccehdklkke.top
iffleeafbmkcdnn.top
ilagnmedhkiemjj.top
iw4p7q3384xoebl.top
j3ew2xo22n2l180.top
jcjh28ftk4p08sh.top
jdlhmlbkkcjjndk.top
jekgchejdhjccmh.top
jfkhnlehnkbnlla.top
jldnlhnknnbdfec.top
jyw9izgeeru7fa3.top
kxjf4ueru5xg55y.top
l5ys6pb922bjarj.top
l8fpmo4cypy8w64.top
lb7run6qp4djf24.top
lbhinfcmhmilkjh.top
lpk0wbul41gydhh.top
m18lgxdjgbb2wm3.top
mdropptekh.top
mfmfkkmfcchlfih.top
mghkljhkjcedaah.top
mted5v4kiqe77p0.top
myy2dvngdlb7rhr.top
mzxvn1t4hesdp5w.top
nat33tfuz.top
nclfjjiacnelmlb.top
ndbfdcieeiiebam.top
nichlnkfcggneah.top
nkv60pvfs0xv22n.top
nsxuxpcond8rs78.top
o0byv77540p7vkj.top
o9k1pozo9jx8vye.top
oig222uzzu3h3.top
ooitygnzet.top
ousjk737pj10n4q.top
p7v7zebfds8bi3i.top
pa4xtfmw9y664hx.top
pfai2445vyzbye.top
pla98v8gfnvp7hb.top
q2jgolw9fbvbw8q.top
rfylz5s8mgegpgq.top
rgpruanfbg6hj5l.top
rh5uyuww2nfeuh2.top
rlxwzlils072stb.top
rr2d3v27jt6fpgl.top
sbm5gdhr024roeg.top
sep7ceabhgrwpor.top
snodg0lg1asjdwy.top
sy2353evuze.top
t8nntomrcxy1puq.top
tvv2zzek6khn52g.top
u41q725xmxk4z9p.top
ua1e5n5q2prtrzb.top
ud97bvcvkywyo0r.top
uk53n11v7yzi030.top
uo3go6yhowqeibl.top
v91r1u0szjvwu9d.top
vo7pbcvwyt2zex6.top
w71pblurjt8eolj.top
web3-blockaid.top
wvbhy1nucr0qlko.top
wx8jqldtrp12j6z.top
x3d0h1m2tyc60u1.top
x5xcrto8njflh84.top
xagu8zdsl6tq0o0.top
xdnq9r4pg3l9kr6.top
xl0qftmzjtxfh5t.top
xpdmawaitfkkbp9.top
yijbmqd8p2ncnrw.top
z1ut9k18y7ms4dt.top
z6bfyz1995dfmnr.top
zcuxg5qt8tql53n.top
zg1do8ooip6b8wn.top
zwf5lne3wty8cls.top

# Reference: https://x.com/RussianPanda9xx/status/2012289747507441998
# Reference: https://www.huntress.com/blog/malicious-browser-extention-crashfix-kongtuke
# Reference: https://www.virustotal.com/gui/ip-address/64.52.80.153/relations

8c54i1mid0c2stk.top
agcnfjkcjlcddfk.top
ahyw2fb2.top
aldhkakgnbkmdmk.top
baifegjcmijlifc.top
bnafhhhggikannh.top
fyvw2oiv.top
gibeaafjeknmclj.top
hchknlejhgggila.top
hkmclhcjlcmanmg.top
mjakjgacmikhbdh.top
nefbicnccfdbhdn.top
nmlhgnlcfbjjmef.top
nter313.top
sug6224.top

# Reference: https://x.com/smica83/status/2019017888183746758
# Reference: https://www.virustotal.com/gui/ip-address/64.190.113.16/relations
# Reference: https://www.virustotal.com/gui/file/685ff5b6823563b8d3c39080c1f18a8ec1888947abce3662341e82c000cd0469/detection

6w5gczy3.top
astvztw3h.top
hdywvr2.top
nudyan2.top
sdy92472.top
tvgzth82.top
vaea31ad.top

# Reference: https://www.virustotal.com/gui/ip-address/64.190.113.186/relations
# Reference: https://www.virustotal.com/gui/file/8d9661c5d2eddfddd7e88857d241123a782a47baf0719292c70f8225552ad110/detection

142.93.242.144:3456
aansyvz3.top
aceefcfdfkdfege.top
ahasftvz3.top
ahedgalkfelhccn.top
amnlienkcifnlci.top
bebbcjcdmdcgahb.top
bkkjenedigjmjgj.top
btvervz2.top
byetzbww.top
cdhhcehkchddeec.top
cjbbdhikmlljndl.top
cnhhbgbdbnjagih.top
djdgijaclhdfdgm.top
dlnnbafkfekljei.top
edbdkgjebmhenkb.top
edjmhgmcaeknige.top
ejklljkemcbkhjj.top
fggkenjchkjbfhb.top
fmaefclceadhnhj.top
fmhjichefjalekh.top
galcdjiclhcikig.top
gedjaiakaiaadmc.top
hgaglblkhbncnna.top
hidibggcadicbim.top
hmibnenkdfgiini.top
iagmklkkklgjfaf.top
ibasef37f.top
ifgmljcdlgamdkb.top
jddkhehkdeflbbc.top
jfvby3uf.top
jilejiikaimdkal.top
jnlekfbdachgilg.top
khdkicndenaanlm.top
klicgbfkgamfgbi.top
lhebnefjcjgkenn.top
lnfadhdlnhlhddf.top
lnnjahgjnmacnni.top
mcdmbaalgakinec.top
mckhmadjgfnejaf.top
mhlgcebldddbidl.top
na038vbhz.top
nauywet2.top
ndyz73aw.top
nehfjhajnmmfgbc.top
ninmgggdbaklnfm.top
nkcnklcjjbfmaal.top
nnhgikidmdddhfh.top
nufyrize3214.top
nuywegbb22.top
nvyzt3jbvz.top
nyaftvz2.top
nyw63bzr.top
u0fv8gbk0sl4lgd.com
uyvz736a.top
vzzwehy3.top
yqyrthxe6ah31ed.top

# Reference: https://www.malware-traffic-analysis.net/2026/02/02/index.html

64.52.80.153:8083
abjmamnaaecgfmd.top
addmkkajhebcbem.top
afiniljgdmdgimb.top
agcnfjkcjlcddfk.top
ahegbcanlikmall.top
ahyw2fb2.top
aimgmacjdijjjeg.top
aldhkakgnbkmdmk.top
baifegjcmijlifc.top
basy3f.top
bbkjflkkjbebhdf.top
bfbkidlkalaelfj.top
bhflgeggjeciean.top
binlcchccebfagh.top
bkbemjmaebjnkmi.top
bljejhnjkaikgfd.top
bnafhhhggikannh.top
bnbfyw1.top
bysteezz.top
ccldeaegnbjckae.top
cdfdbmgcfainfgn.top
cegklfkahlchcna.top
chhkejhdlifgjkg.top
clljajecjlagkhf.top
cmmckcjalhibhag.top
dbncdggdbemaalm.top
deibchbgghidgbb.top
dfcbmfdcmhhabhk.top
dkcjdldgclckbbk.top
einnjmacfngcmjh.top
emahaeagjebllch.top
enihlcbccdaihic.top
ey267te.top
fblflllgckanide.top
fcffijmcjknkdjn.top
fgfnnangnahfdcn.top
fnjnbehjangelkd.top
fyvw2oiv.top
gdidjeigjdnbeeb.top
gecdfcjcbcmmakk.top
ghhedcenlkabhfa.top
gibeaafjeknmclj.top
gjclkhkgghhhnek.top
gkklhflcmggeikf.top
gmbmfgfniahicei.top
hbmkcncnbghjmfg.top
hbsayv7a2.top
hchknlejhgggila.top
hdyvgtz2.top
hhnbdjhcijlnklh.top
hince21.top
hkmclhcjlcmanmg.top
hlnjhahgnngjkfh.top
hmijemicfnffflc.top
hyfhgvz2.top
ialhfhehggfkgge.top
ibfhbffdmfehbmn.top
idkinganingljgd.top
ieeikebjanfiemm.top
iffbgkfhckndbfn.top
ijecbjbnednddgl.top
jdlhmlbkkcjjndk.top
jfyvhz23.top
jghglmlnbgfnfha.top
jhbghlmjhfejbaj.top
jicnddchjcmelgk.top
jjknacedbclbhnf.top
jlbamcmnljnfahi.top
jldnlhnknnbdfec.top
jnjajanjdjlcjnd.top
kammjjjnecmhkig.top
kbgmghkjkcldgaa.top
kjmeeejjamdllbg.top
lcjkhcgnljlihjd.top
ldekdaijdikfcbm.top
lfaiflelklenmca.top
lieeifinimeacjl.top
mgbiahfjkbjhncj.top
mjakjgacmikhbdh.top
mlbcfmfnbfecmki.top
mmjcclgjhfdnicd.top
naganedjalcbeda.top
nay3fva.top
nclblemgkfeelle.top
ndiva2k.top
nefbicnccfdbhdn.top
nfhiejdnebkkdka.top
nfuwtcv.top
nmlhgnlcfbjjmef.top
nnmacfcnhmdejlg.top
nter313.top
nueyrtp21.top
sbwur1.top
server.theater-reward.click
sug6224.top
syzv21d.top
theater-reward.click

# Generic

/1.php?s=mints21
