# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/ScumBots/status/1045358391596642304

diamondfox.panelspy.tk

# Reference: https://twitter.com/ScumBots/status/1045358185522110466

shkurosliv.ru

# Reference: https://twitter.com/ScumBots/status/1043732950293078016

ne2.kl.com.ua/gate.php

# Reference: https://twitter.com/ScumBots/status/1043732884819980288

tka4.kl.com.ua/gate.php

# Reference: https://twitter.com/ScumBots/status/1036955062415839233

kibuk.ga/k2k2k2k2/
/k2k2k2k2/

# Reference: https://twitter.com/ScumBots/status/1035348180903321601

23ace.site/fox/

# Reference: https://twitter.com/ScumBots/status/1034631107604635648

dailiasis.co.za/Bigboss/

# Reference: https://twitter.com/ScumBots/status/1033885882909171712

f0228275.xsph.ru

# Reference: https://twitter.com/ScumBots/status/1051823550531809280

fakevision.ru/gate.php

# Reference: https://twitter.com/ScumBots/status/1052195411824443392

logisticoceanroute.com/preview/
sholkianewkits.com/preview/

# Reference: https://twitter.com/ScumBots/status/1055657607636103168

a0210751.xsph.ru

# Reference: https://twitter.com/ScumBots/status/1061800839210262528

rume.ir/dfconnect/

# Reference: https://twitter.com/ScumBots/status/1062825033075253249

antipet.website/fox/

# Reference: https://twitter.com/ScumBots/status/1062825105309528066

45tuyr.site/fox/

# Reference: https://twitter.com/ScumBots/status/1064632726597312512

23ace.site/fox/

# Reference: https://twitter.com/ScumBots/status/1064855967349772288

56ace.website/fox/

# Reference: https://twitter.com/ScumBots/status/1065243570758668288

34er.website/abk/

# Reference: https://twitter.com/ScumBots/status/1074148969150906369

aspnet.co.in/AdobeReader/

# Reference: https://twitter.com/ScumBots/status/1076911266151714819

wocworld.ru/bot/

# Reference: https://twitter.com/ScumBots/status/1080463624064430080

ac4ce06cc0865634050b9eef6851d644.tk/fox/

# Reference: https://twitter.com/ScumBots/status/1081615452630118402

frankozdf.com/fox/

# Reference: https://twitter.com/ScumBots/status/1083466933201235970

eduman.site/edu/

# Reference: https://twitter.com/ScumBots/status/1083467006337261571

34er.website/buka/

# Reference: https://twitter.com/ScumBots/status/1083467088101023744

sere.website/kc/

# Reference: https://twitter.com/ScumBots/status/1083577315773333504

east-net.su/Panel/

# Reference: https://twitter.com/ScumBots/status/1084514147923095552

/~propanel/diamond/

nlinecare1.com/Panel/
onlinechase.ga/Panel/

# Reference: https://twitter.com/ScumBots/status/1094999678041686016

fox.thomasfr.beget.tech/demon/

# Reference: https://twitter.com/ScumBots/status/1094999750951297024

attackforyou.xyz/Panel/

# Reference: https://twitter.com/ScumBots/status/1095440309515886592

3bots.xyz/dia/gate.php

# Reference: https://twitter.com/ScumBots/status/1097523661010022400

oakdragon.atw.hu

# Reference: https://twitter.com/ScumBots/status/1098003379299803142

bbjb.pl
bjbyb.pl

# Reference: https://twitter.com/ScumBots/status/1098003453798944774

skynet.servehttp.com/skynet/Panel/

# Reference: https://twitter.com/ScumBots/status/1110890372656439296

silentsk.tk

# Reference: https://twitter.com/ScumBots/status/1115633392538796037

iem-send.com

# Reference: https://twitter.com/ScumBots/status/1134624876550066177

z1n.000webhostapp.com

# Reference: https://twitter.com/ScumBots/status/1140724407687684096

mende201.heliohost.org

# Reference: https://github.com/pan-unit42/iocs/blob/master/diamondfox/diamondfox_panels.txt

00bot.asterios.ws
0nline.pro
0x00.shop
0xevil.xyz
111288group.com
1lidoo.ml
2.stasprlt.beget.tech
23ace.site
34er.website
42.pxlgmz.xyz
45df36.de
45tuyr.site
56ace.website
7usd.com
9virgins.com
a0149740.xsph.ru
a2plcpnl0564.prod.iad2.secureserver.net
aarr.eu5.org
abcryt.xyz
abdiamond.us
absmartlift.com
ac4ce06cc0865634050b9eef6851d644.tk
ac8xyqhdans4empv3u.drwhat.co
acc0unt-informati0n.ru
account-notice.cf
accountservices.xyz
adasdag5.bget.ru
adjuntos.soportetecnico.ru
adobedownloadupdate.com
advancadstribution.com
africoon.com
airoland.com
aisielimobiliare.ro
albhacking.3eeweb.com
alexerto.beget.tech
allbesthoster.com
alternativeda.com
amazingsuperstar.info
americaurl.mewahgroups.com
amerifriend.mewahgroups.com
amexpresonlineservices.com
aminaldistri.com
amster69.ru
anaign.ga
androidbotnet.serverlux.me
anifox.ga
annaunivers.in
anon98.ml
antipet.website
antonmakar.beget.tech
anveerbsuiness.in
apps-install.com
ar0u.com
arabiacranes.com
areapriv8.com
areyouserious.usa.cc
armandolesaj.uphero.com
as.large-hack.ru
asianreprographic.com
aspnet.co.in
astro-net.cf
atmosbot.xyz
atmosbotnet.pw
attackforyou.xyz
austnewtrade.in.net
auxame-stemmann.com
av7.online
avantgardeappraisal.net
avltar.com
avon-companionship.asia
avtomat.mk-com.ru
awesomeeagles.biz
azaza228.comli.com
babakgoods.com
baisenaem.top
bakalak.tk
bamijoshaye.xyz
barabu.ml
barakanewsletter.com
basketdomaines.xyz
bazarpva.com.br
beehoney.hol.es
benoitsuire.com
benzima.tk
bigemaillist.com
bigsharksthere.xyz
biometric-fisher.net
bismarksurgical.com
bitcoinminermachines.com
bitcoinsavedomain.ml
biteskillerr.net
bl4ckpalm.com
blackshadowsecurity.com
bloooop.xyz
bmi.net
bntnl.com
bolidar.dnset.com
bombanext.zzz.com.ua
boom.silkbtc.com
bopecaptain.0xhost.net
borpenv7.xyz
bot.mezerus.ru
bothome.ru
botnet.shadow-xploiters.cf
botnet2706.beget.tech
botnetddos.ru
botwest.net
boxint.net
braguty.com
brightfruits.in
btopenwor1d.com
buehler-mechanik.de
bugaeva-andrey.myjino.ru
builtz.tk
bxhost.blg.lt
c4n0ntr4c3.webege.com
cancer.com
cangamstyle.xyz
cassuall.com
cata-coin.net
cataclysm-net.cf
cayrated.com
ccppwbs.com
cdn426426.synergize.co
centerstdiamond.16mb.com
certainmarket.com
chadpetersonbeaumont.com
chcfi.com
checkforupdates.online
chidooon1234.serveftp.com
chode.xyz
cinecast.ca
cloudpointflareserver.com
clown.com.tw
cm38525.tmweb.ru
cobradragoon.net63.net
colektiv.info
com-service.xyz
comandoinvisivel.fulba.com
community-college.asia
companydev.in
conciencia.cl
coolmath.ueuo.com
cp17061.tmweb.ru
cpanel02.myhostcenter.com
cpbph2.com
cuidatucarro.com.ve
cuisine2001.com
currycraft.pw
cv88.eu
cv95693.tmweb.ru
cyberiy.xyz
dadabada.com
danlas.nichost.ru
danny4eriwa.com
dark-tower-corporation.pw
dark2001.tk
darkmatter-diamond-priv8.barrystevensbusinesssoftware.com.au
darksonor4.se
davd6651234.serveftp.com
davidoosmith.in
dcjack.hol.es
deadaliens.us
dealertoyotabogor.net
defylicious.xyz
deldream.pw
demo35974.atservers.net
demonslayer-001-site1.1tempurl.com
den777sw.bget.ru
developery.com
deviceservice.name
devinartcoderfox.esy.es
diafox.xyz
diamond.cpbph2.com
diamond.wuwy.net
diamondfo.atspace.cc
diamondfox.co.nf
diamondfox.panelspy.tk
diamondfoxpanel.cf
diamondnet.oxulyt1i.bget.ru
dichvusamp.host22.com
dinisuf5.bget.ru
dinu1.kns1.al
discountedtourism.com
djmalaria.de
documents.hightradepro.com
doitazda.biz
dom1337.zzz.com.ua
domedicosdelnorte.com
don-matino.xyz
donhomes.ru
dork-system.website
dota-hack.club
drivertech.net
dropeboxs.in
drsayani.com
drugz.lol
druzyonline.com
duda.comli.com
dvla.gov.uk.monsashop.com
dyn3312.netau.net
dzhichempro.com
eamirahmed.com
easypay.96.lt
ebookseller.tk
ecoroll-rus.ru
edgyfoxy.space
education.afriquehost.net
eduman.site
elheraldodeuraba.com
elicos1.xyz
elmen.heliohost.org
elpuestodekeny.honor.es
em3r4ld-inc.ru
emiretesnbd.com
empiresanitaryware.com
enemservice.com
eotu.cc
escort18.net
eternityshares.com
europedirect-katowice.pl
evellemusic.com
evergreenguesthouse.com
everli-killer.gq
evgenas5.beget.tech
exowarfare.altervista.org
exploit.rocks
f0005026.xsph.ru
f0128095.xsph.ru
f0228275.xsph.ru
facebook-video.ddns.net
facebookfinder.com
falderons.xyz
farmbox.ltd
faublimited.top
febodresima.ru
findlaycreekeyeclinic.ca
finedinner.biz
firefox-upgrades.com
firelionnet.com
flyrecords.fr
food6623.eating-organic.net
forginglinks.net
foxbotpanel.org
frankozdf.com
fraudavenger.org
fraudzz.cc
freecreditcards.cf
freexbl.co
fsicreative.com
fsk-polistroy.su
fsoc.cf
fullexpert.byethost7.com
fusionpoint.pk
g951876v.bget.ru
galaxycrystal.pw
galereslafayette.com
game-portal.su
game404.hopto.org
gamecen.ml
gamerome.ga
gastehservis.ru
gaztechservice.ru
gemackinnonelectrical.com
gentemonterrey.com
gertrtool.com
gg5g4gk9032rfy0l.cf
giftit.co.in
gk29xlac58ro.info
globalbmanage.com
glorbterades.in.net
goldshoppingclub.ru
gongotree.com
goodluckchucks.pw
goodwillls.com
gorynch.p-host.in
gorynch.xp3.biz
gpdi-lippocikarang.com
grantsoceanicagents.com
gwagon4mama.xyz
h113853.s02.test-hf.su
hacknetgch.h1n.ru
hardcomng.com
hbzcorp.ga
hcriopvnkljrt.in
heavyboss.ru
hhush.ru
hidemynet.xyz
highfidelty-egypt.com
homebru.com.au
hostmyshit.tk
huinetbot.site88.net
hunt3r-glateam.tk
i71.rip
icanflybitchd.site88.net
icbg-iq.com
iem-send.com
ignitehq.biz
ilkalor.xyz
incognito04_droid.net23.net
indentedhead.com.au
indiaeasytrip.com
infonet-ee.com
inkhouse.com.br
innrvogue.ru
inpower.xyz
inspironss.in
intimpostshop.ru
ionif.tech
iscaredtogetclose.co.nf
isparker.temp.swtest.ru
isracorpe.co
j-st.in
jamdaani.com
jameslrealestate.ca
java-update.zapto.org
javaip.tk
jblfreight.com
jedziemykurwa.blastgaming.net
jem14ffk2.tk
jess-leduc.com
jesucrested.pw
jeweethet.com
joe.cpbph2.com
joebodin.in
johnwilsonoil.com
jomge.ga
jummycatering.net
kakadunetwork-bnet.com
kaloszeprosze.sub.gouldsit.com
kargoaps.com
kazua.x20.asia
kdosmart.com
kekmlg.esy.es
kerly.ru
khendra.fr
kibuk.ga
killbill.ml
kimgdoo.com
kisslaqv.bget.ru
kit0001.xyz
kkkkjkkjkjkjjkjkkj.zzz.com.ua
koeingsegg.com
kuradox92.lima-city.de
kurwix.tk
l3k.li
la4fwmvvh-site.dtempurl.com
laang.net
lacasademipadre.cl
lallahome.in
lalunacreative.com
landmankgroup.com
lawuwenub.co.nf
lcb7cdgbl-site.1tempurl.com
league.runescape.csgo.securezdns.pw
legonew.zzz.com.ua
leonardbriskbu.in.net
lilrs.com
lilrsmoors.com
liveupdatecheck.co
lobatandawgs.com
locahost.com
logisticoceanroute.com
lolkekcheburek.kl.com.ua
lomkast.hhos.ru
lordsinteriors.com
lorenna-petrov.asia
lovemap.ru
machination.xyz
maclink.ae
magik_fox.net16.net
magooo.biz
magooo.name
mailusaacad.com
main-hosting.gq
maindcorp.com
mandera.tk
mannatwins.com
mariyahv.beget.tech
marson42.com
marson42.netau.net
may31.ml
mecacas.comli.com
medisonsteeltech.com
megazord.su
mehdaaa.be
meninblack.com.ru
mentalforums.ru
meth.fulba.com
mezerus.ru
microrazer.ru
mikek.biz
mikek.co.in
milc66ao.beget.tech
miniuns1.com
mobilekwiksearch.com
mogyiii.netne.net
monocool.pk
msftupdatecenter2.download
my-right.fr
myapplicationtwo.com
mycontrol.site
myhest.org
mymontgomery.com
mymytonnymaxltd.org
myngstudioxpage.com
mytehnoart.in
myuyoguyslogs.xyz
myxclusive.club
myyu.ru
navigatorindia.in
ndmedicalsystem.com
nestors.tk
net.nulled.win
netco160.ddns.net
netco400.ddns.net
neteaseraccountupdate.top
netrec.net
neverloose.bid
newlywork1234.serveftp.com
newsilverbusinestr.in.net
newsilverghans.in.net
nicememes.me
nickled.info
nikitabrai.temp.swtest.ru
nikoladavidovic.com
nmobe.com
no-ads.net16.net
noreply-yahoicc.xyz
noticiasreales.honor.es
nouserhere.xyz
nudeteensex.net
null77.xyz
nvi.surlocal.com
nwalreadingaides.org
obiheros.com
odp3o.xyz
offica4y.beget.tech
officialvisont.myjino.ru
ogeneinaamin.com
olegga75.beget.tech
omaimhreemshreem.com
omoobani.ga
onedollar.cc
onemiletrade.com
onlinecare1.com
onlinechase.ga
onlyfung.isp12.admintest.ru
orion7.hopto.org
osscliente.com
ot-one-stop-shop.com
oursland.ru
p-account.com
pain-panel.cf
panninispizzeria.tk
panzey.com
parleg.club
partnerwithuss.ru
paskuda.gq
passargad-tours.com
patient.abortionshelp.com
peeler.website
perosalontakip.net
peterdiamondf.in.net
php-spykip.c9users.io
pichasecure.xyz
picture-media.medianewsonline.com
pieskowezycie.biz
pingvinic1998.dynu.net
plasma-shadow.comxa.com
plat-oplat.ru
pokemonburn.com
poleneitor.com
popovalx.shn-host.ru
portunlock.ml
posalive.su
posnxqmp.posnxqmp.ru
power-uping.com
poweroftech.com
ppbaseshop.ru
prinsgezinde.com
prius-service.ru
prntscr.fr
pro-cash.xyz
progaming-cheats.ru
prolich.com
proskuu4.beget.tech
pscmed.com.br
putamierda.1eko.com
putessgt.96.lt
qazshopcraft.tk
qfast.ru
qt-handle.com
quaits.com
qwerty1234.xyz
r74731mg.bget.ru
r8606.com
racism.website
radicaldesigns.us
rag-bones.com
ragjohn.com
rawmatterials.com.au
razorcap.pw
rechargeyourkarma.org
redmand.shn-host.ru
reggiemenacherry.in
registrossql.com
returnme.host78.com
reversed.hol.es
rietx.blg.lt
roast-bones.fr
room402.in
rootemmanuel.com
rss.mrx.com
rss.updatewindow.xyz
rumahmurahbekasi.co.id
s1.sociumin.com
s28977-hostde2.fornex.org
s62408.smrtp.ru
saasport.com
sabareesh.online
sadteam.net
safesecuresurf.ml
safety-pay.one
sahko160.myjino.ru
salemmr.me
sam3oul.co.network
samgora.info
samstuff.cf
scorpionproject.net
sealet.tk
searchhost.ru
sec.parmankulov.com
securityupdates.online
seekersmatch.com
sempoi02.com
sendmenudes.6te.net
sere.website
sergossss18.myjino.ru
sevegep.com
sh4d0wxpl01tr.hoxty.com
sheriffmeal.com
sherkseafoods.com
shopds.ru
shortz.info
sightgivers.org
silentsk.tk
simbers.ru
sinangeyik.com
sincity.ga
site.coxslot.com
sites.y0urn3wb0ss.com
sizsiz.beget.tech
sjp3.tk
sklogistics.org.in
skyloris.tk
skyroot.ru
slaughtertobot.co.nf
sluhmed.ru
smithsteellimited.com
sodaaas.biz
sohnaoliveoil.com
solardoom.xyz
songhungservicesgetnow.cf
southcareer.biz
soycraft.chickenkiller.com
soycraft.duckdns.org
speedivpn.in
sql.icefrag.ru
squidgen.xyz
srv72657.ht-test.ru
starmailweb.com
stealplace.tk
steamtoday.ru
stifler.3eeweb.com
store.overmagazine.it
stylehome-egypt.com
stylesalon.ltd.ua
support-management.asia
swiftgiants.com
systemerrorware.com
taj-travel.com
tambakikan.com
tbhwrm1.org
tech-dan.pw
tech-jay.com
tech-keem.pw
tech-mag.xyz
tech-solu.xyz
tech4nerds.xyz
techademag.pw
techashok.pw
techbest.pw
techblizzy.pw
techkeem.pw
techkevin.pw
techmaha.xyz
technelly.work
technero.pw
techpius.pw
techvicky.pw
techwebx.pw
templatefast.ru
tercumemerkezi.az
terrornews.ru
test-signal1336.c9users.io
test.rocknrollas.ru
tethys.xyz
th3w0rld1sm1n3.jensartsandcraftss.biz
theadvancedtriangle.ru
theredbotnet.pw
thesimplecomplex.co.uk
thesites.site88.net
thesolution.pk
theweddingwand.com
thrusterrecord.bplaced.net
tldzadanks.ru
todd44110215.com
tokoyplast.com
topcup.rs
torroot.ru
tradeneww44.in.net
trainwreck.ru
trialworld.cf
trillhosting.com
trippleaaaranch.ru
tyischeating.ml
u20344.onhh.ru
u99692u5.bget.ru
ue88.eu
ulrivision.com
ultra-score.com
ultrahacks.org
umitatay.com
unitedstateofbiafra.tk
update.agenteinformaticos.ru
updateforchrome.gq
usmanahmedlasco.xyz
vdocv.zzz.com.ua
veezy.tk
viagenestesom.com.br
vidyasagar.com
vinchycode.zapto.org
virus.sauravbd.com
vk-girls.ru
vzfpspmwyshwn.nl
waitingneworder.in.net
wanchoo.in
warfaverever21.net23.net
web51te-te5t.savingtheecon.co
website720.tech
wehideourshit.xyz
wessonacoustical.com
whitecol.com
wmdabesss.3eeweb.com
work-smart-november-22.panelsinfos.com
world-porn.ru
writeschools.altervista.org
wsedff.esy.es
wtf9x.hostreo.com
wurm123.bplaced.net
wvww.org
x0.hopto.org
x0x1x0.biz
xake.tk
xbot.me
xc0der.ru
xenoz1212.ddns.net
xenvpn.one
xfirefox.comxa.com
xlowfznrg4.ru
xnajsdasjd23.pw
xpornovks.com
xxx123jpk.tk
y0urn3wb0ss.tk
y97803nx.bget.ru
yanderefopx.tk
yaohu.eu
yolaba.com
yoris-parfums.com
youroffers.xyz
yourscripter.ru
yousl.it
yumate.co
z1n.000webhostapp.com
zachmayermusic.com
ze123a.comlu.com
zeroca.club
zeroci.club
zeroxa.club
zombieants.biz
zombiebear.eu.pn
zpanel123.com

# Reference: https://twitter.com/James_inthe_box/status/1155892971197173761

a0319471.xsph.ru

# Reference: https://twitter.com/ScumBots/status/1168229606345904129

attackforyou.xyz

# Reference: https://twitter.com/killamjr/status/1190409432645218304

shopm.info

# Reference: https://blog.malwarebytes.com/threat-analysis/2017/03/diamond-fox-p1/

slphstvz.biz

# Reference: https://twitter.com/ScumBots/status/1191172548119142400

drugz.lol

# Reference: https://twitter.com/ViriBack/status/1201701540194443264

http://45.136.111.47
vladisfoxlink.ru
rusav1.icu

# Reference: https://twitter.com/ViriBack/status/1210681627464097792

windowsupdates.systeminternal.r87.online

# Reference: https://twitter.com/ScumBots/status/1214776189069463553

nak.mcdir.ru

# Reference: https://www.virustotal.com/gui/file/d4eda8c3a64fb7ef7252d80f8eebcda30cc2bd2ca894970524f21b7064647afc/detection

pecunia110011.at

# Reference: https://app.any.run/tasks/0214e322-55a7-41c0-a42f-b040e4accfab/

xmpzi.icu

# Reference: https://www.virustotal.com/gui/domain/windowsupdates.asd32.online/relations 

windowsupdates.asd32.online

# Reference: https://twitter.com/ScumBots/status/1228694984758611969

h147078.s26.test-hf.su

# Reference: https://app.any.run/tasks/b9745d2c-2ce1-4cb6-9c62-c4c31cc90083/

http://185.141.60.109/nha/

# Reference: https://twitter.com/ScumBots/status/1246524654120042497
# Reference: https://www.virustotal.com/gui/domain/game-portal.su/relations

game-portal.su/bot/

# Reference: https://twitter.com/stecar792/status/1250845389340774400

http://217.8.117.60/mh/

# Reference: https://twitter.com/ScumBots/status/1260608820637765634

tso24.xaa.pl

# Reference: https://twitter.com/ViriBack/status/1264319248048050176

hentaionichan.us

# Reference: https://twitter.com/ViriBack/status/1287854699882975234

conhost.pw

# Reference: https://app.any.run/tasks/7fd835df-aabe-4ec7-9da4-19e4a770f97d/

dong7707.at

# Reference: https://twitter.com/ganeshnathan28/status/1298119097503363073

http://213.159.203.232
findatingall.site

# Reference: https://twitter.com/JAMESWT_MHT/status/1354457003247218690

etivatlegrawagrangun.online

# Reference: https://twitter.com/JAMESWT_MHT/status/1357587022899253248
# Reference: https://twitter.com/James_inthe_box/status/1357710128649183234
# Reference: https://app.any.run/tasks/e029e117-541b-4a51-967b-f1da16354f3a/
# Reference: https://app.any.run/tasks/ab0b26d8-bdd6-46b5-a595-317951ce11b4/

8i9.xyz
ivenuawkintemo.xyz
voubucleonteri.xyz

# Reference: https://twitter.com/ffforward/status/1360289694727221251

etablebuterline.xyz

# Reference: https://urlscan.io/result/42cd3daa-9bfa-43a9-9f63-4504435f36c5/related/

datanalysis.club
outarcubleauded.xyz

# Reference: https://www.virustotal.com/gui/file/9f931e77bdd9d1837b1b40e791e7c3a093d1a2feb2fbaf76dd1d3464c349f8b9/detection

http://111.90.150.233

# Reference: https://www.virustotal.com/gui/file/67b6f48beb30eff5755e8ddff6c6cfee8f452a78170918d92529096ecb87a4ce/detection

http://176.121.14.60

# Reference: https://www.virustotal.com/gui/file/db0efdb99146b6808c694f5c2fe6275b4f5ccc958d1b4334dcf3a39a8f5a1722/detection

sunrise89.com/zabuin/index.php

# Reference: https://www.virustotal.com/gui/file/93e7ecd77057b7388f80a012e15977613f6fa01bda350e684facdce6fee8e1da/detection

timesync.live

# Reference: https://www.virustotal.com/gui/domain/bigchopz.com/relations

bigchopz.com

# Reference: https://twitter.com/wwp96/status/1364290090839797763
# Reference: https://app.any.run/tasks/d7d282b9-d6c9-4633-9172-569f44582a84/

krntix.com

# Reference: https://twitter.com/wwp96/status/1379440356333391881
# Reference: https://app.any.run/tasks/618f961c-18cd-4351-a431-c7fc1dd1a3ee/

tericathwayake.xyz

# Reference: https://twitter.com/wwp96/status/1379440120420573187
# Reference: https://app.any.run/tasks/54c09cc6-bcee-4ad2-a62f-b28352e3508b/

microsoftenly.com

# Reference: https://twitter.com/ViriBack/status/1394467803588186112

http://176.111.174.118

# Reference: https://twitter.com/jstrosch/status/1394514667066707968

http://103.245.19.107

# Reference: https://twitter.com/ViriBack/status/1401646893189550092
# Reference: https://www.virustotal.com/gui/file/c143054f368090b191d417723934621148e76ac68d893d856889ba03872d5bb9/detection

mibbpersonales.com

# Generic trails

/123hb25njkhusd8/
/4AB4XYhYqkuvK2vtFKxmRvg2GD/
/666root666/
/abidefox/dia/
/DFX/1111/
/DFX/dbfox/
/diaminsakjsalsn/
/diamondfox/
/DF%20Panel/
/Diamond%20Fox%20Panel/
/DiamondFox4.2.0.302/
/diamondmogyiii/
/diamond/panel/
/fox/Panel/
/foxie/Panel/
/gfuckingg/
/dia/index.php
/dia/gate.php
/dimpan/index..php
/dimpan/gate.php
/dimapan/index.php
/dimapan/gate.php
/dimwebpan/index.php
/dimwebpan/gate.php
/mts/gate.php
/nha/gate.php
/fernweh/gate.php
/IPsM0mJy30/
/iteat/gate.php
/sl/gate.php
/spt/gate.php
/plugins/keylogger.p
/plugins/ftp.p
/plugins/mail.p
/plugins/passwords.p
/zabuin/index.php
/Zndea7OGLK/
