# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: harly, joker

# Reference: https://medium.com/csis-techblog/analysis-of-joker-a-spy-premium-subscription-bot-on-googleplay-9ad24f044451

joker2.dolphinsclean.com
beatleslover.com
tb-eu-jet.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1184054662003134464
# Reference: https://www.virustotal.com/gui/ip-address/52.77.93.217/relations

23w5338-z.com
beatleslover.com
hyy-2d2.com
kaaryah.com
nichfyy.com
prick-6ey.com
sw7p5-629.com

# Reference: https://twitter.com/ReBensk/status/1217065291320045568

andu-eu.oss-eu-central-1.aliyuncs.com

# Reference: https://research.checkpoint.com/2020/android-app-fraud-haken-clicker-and-joker-premium-dialer/
# Reference: https://www.virustotal.com/gui/ip-address/3.123.204.12/relations

http://3.123.204.12

# Reference: https://twitter.com/ReBensk/status/1232297093802233856

happyyear.top

# Reference: https://twitter.com/ReBensk/status/1246451065970712576

wsbb.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1249765927677243393

gplay.oss-eu-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1274316961510498306

yehua-online.oss-cn-hangzhou.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1274334502224044032

facebookdata-1301476296.cos.na-ashburn.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1275443534070296576

wdfoz.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1275713835090001922

rockmanpc.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1276806753959763968

http://34.206.171.237
woea.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1278016062378987520

etut.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1279451409189146624

39200628.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/bl4ckh0l3z/status/1278711799001632769

separatesuppliers.live

# Reference: https://www.virustotal.com/gui/file/275dbae90dc9d84782297858b90579a106d4752e0b6e8a7553b86d1d4d8f7f62/detection

http://47.241.2.108

# Reference: https://www.virustotal.com/gui/file/4a9504de927266b9101417e2dc2acf66e2c9e5b3565f64894a6467b0ebeac58f/detection

http://161.117.229.58

# Reference: https://twitter.com/bl4ckh0l3z/status/1280090346840567809
# Reference: https://www.virustotal.com/gui/file/76faf61e374b271d7a818338a4857c2400ff0a2e5864ce1a70e6df04cf8da3a0/detection
# Reference: https://www.virustotal.com/gui/file/901020b4b768fd4382f9d305cce7906b33dd0ce876e28151d760b0311b5e8769/detection

http://161.117.44.212
http://161.117.46.64
http://161.117.48.94
33333333333-1301476296.cos.eu-moscow.myqcloud.com
facebookdata-1301476296.cos.na-ashburn.myqcloud.com

# Reference: https://research.checkpoint.com/2020/new-joker-variant-hits-google-play-with-an-old-trick/

gd-1301476296.cos.na-toronto.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1281909972683677696

http://161.117.83.26
hardsay.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/bl4ckh0l3z/status/1283788323178373120

http://47.74.179.177

# Reference: https://twitter.com/ReBensk/status/1286642164152311810
# Reference: https://www.virustotal.com/gui/file/198d887f450053630fa40ae0221c794a1ce6733385e6559dae3b9777308803b2/detection

allstars.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/bl4ckh0l3z/status/1287414754496196610

waitalone.oss-ap-southeast-3.aliyuncs.com

# Reference: https://twitter.com/bl4ckh0l3z/status/1287662297465454592
# Reference: https://www.virustotal.com/gui/file/4bc4beccd01a014354c27e2388e87e67ff1d37e5c7a220650d6931ac4fc28b89/detection

hardwarestandards.shop
mobiledevices.icu

# Reference: https://twitter.com/ReBensk/status/1288333955570302976

aisunani.oss-ap-southeast-3.aliyuncs.com

# Reference: https://twitter.com/aazim_here/status/1288440507396493313

narta.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/bl4ckh0l3z/status/1288701923974156288

99042.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1288790256649674752

fbgufra07.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1288790529308864512

larkbucket.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/bl4ckh0l3z/status/1289412525197467648

bullse.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/bl4ckh0l3z/status/1289831992108789761

reff2355-1301476296.cos.eu-moscow.myqcloud.com

# Reference: https://twitter.com/bl4ckh0l3z/status/1290214936900063232

fdsr234-1301476296.cos.eu-frankfurt.myqcloud.com
gfd3424-1301476296.cos.ap-mumbai.myqcloud.com
hkkg34fd-1301476296.cos.na-siliconvalley.myqcloud.com

# Reference: https://twitter.com/bl4ckh0l3z/status/1290603888991776771

dg1042.oss-eu-central-1.aliyuncs.com
mg420.oss-us-west-1.aliyuncs.com
ydnxy042.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1290612822582468613

http://161.117.226.98

# Reference: https://twitter.com/ReBensk/status/1290618344853221376

http://161.117.62.127
http://47.91.99.122
http://47.91.99.17

# Reference: https://twitter.com/bl4ckh0l3z/status/1290655447645663234

gseven.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1291985135936602112

purchasingmanagers.club

# Reference: https://twitter.com/bl4ckh0l3z/status/1292425701925281793

http://54.251.231.73

# Reference: https://twitter.com/bl4ckh0l3z/status/1292908632217210884

forgotten.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1297528634127851533

ruik.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1297909430663684098

http://54.254.62.156

# Reference: https://twitter.com/ReBensk/status/1298846513070829568

jk8681oy.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1298891762744909824

were4o5.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1300691596556603392

blackdragon.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1300652965854883840

n47n.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1301027283734585344

blackdragon02.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1301494248550866944

2j1i9uqw.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1301963377435181057

http://18.141.129.153

# Reference: https://twitter.com/ReBensk/status/1303917434831876097

proxy48.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1309475351572045825
# Reference: https://www.zscaler.com/blogs/security-research/joker-playing-hide-and-seek-google-play
# Reference: https://otx.alienvault.com/pulse/5f6e0a6e075485dddd57a37b

2j1i9uqw.oss-eu-central-1.aliyuncs.com
blackdragon.oss-ap-southeast-5.aliyuncs.com
blackdragon03.oss-ap-southeast-5.aliyuncs.com
fgcxweasqw.oss-eu-central-1.aliyuncs.com
jk8681oy.oss-eu-central-1.aliyuncs.com
laodaoo.oss-ap-southeast-5.aliyuncs.com
n47n.oss-ap-southeast-5.aliyuncs.com
nineth03.oss-ap-southeast-5.aliyuncs.com
proxy48.oss-eu-central-1.aliyuncs.com
rinimae.oss-ap-southeast-5.aliyuncs.com
sahar.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1310417869184946176

successfully.link

# Reference: https://twitter.com/ReBensk/status/1318048542037082114

becomplete.online

# Reference: https://twitter.com/ReBensk/status/1318400566628765696

http://161.117.178.233

# Reference: https://twitter.com/ReBensk/status/1318608437056466944

http://161.117.250.158

# Reference: https://twitter.com/ReBensk/status/1318757468995018752

http://161.117.230.57

# Reference: https://twitter.com/ReBensk/status/1320593911090421760

brickmortar.life

# Reference: https://twitter.com/ReBensk/status/1322789280083808263

idnyss-1301476296.cos.ap-mumbai.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1327249045513879556

watermile.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1329328104720932865

nqgvyv.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/Cuser07/status/1332623673484689408

firelife.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1336482195230380032

icelife.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1336651462395490305

satellites.life

# Reference: https://twitter.com/Cuser07/status/1341937502685261826

perper.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/Cuser07/status/1342708478737936384

likeafish.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/Cuser07/status/1343389745372491777

indo-1301476296.cos.ap-mumbai.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1344988057074683904
# Reference: https://www.virustotal.com/gui/file/781ca10557344f191f53515b2c085a1a5d8331056fa3bf47d622c41c534a13b2/detection

at7kyxx4.net
last2020.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1345268756470145024

http://47.241.106.26
lasomiso.oss-ap-southeast-5.aliyuncs.com
znyym.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1345607922038886400

rainday.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1346343034208747521

http://54.251.231.67

# Reference: https://twitter.com/sh1shk0va/status/1347258704115200002

feeli.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1349959814814724097

jordi.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1349772427685859329

longdistance.live

# Reference: https://twitter.com/ReBensk/status/1352114382151405568
# Reference: https://www.virustotal.com/gui/file/b6058b96e2acb5a3b0bcf699c5f4c4dc740f6bf65b1ceeff07c71c978327a83e/detection

pandaksp.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1352232075189907460

dinners.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1353601014847348736

comforty.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1356623475075547140

dingz.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1357608935914565633

rooftop.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1357630155917729794

sunset.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1358702595057983490

founde.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1358706711473790977
# Reference: https://www.virustotal.com/gui/file/aeb60925fd4a8525f76bfce9e39d577c394d0e541bffdbce9707c78818d82f76/detection

fy-2021.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1359045679377575937

skullali.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1359073731079852032

aliyuncls.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1359070082635231233

lovingu.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1359077052050141185

plantgrowthtracker.oss-cn-zhangjiakou.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1361001345663176704

sungoddess.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1363373817553293315

andyla.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1364081572584906753

warriorss.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1365176741103247367

uiytjjuytr.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1365177983149826048

runwa.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1365182302523777032

tool-pdf.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1366311466769420292

fronta.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1366343257014165507

breezea.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1368862009710755841

chenllx-buc.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1368901182358364167

linchen-bucket.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1370277229700124673

biggerone.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1373874229037342721

hwayt.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1376073798768713729

dagmar.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1376072244493873152

giantchameleon.com

# Reference: https://twitter.com/ReBensk/status/1376465936299909120

banca.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1376827979423047681

scanlucky.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1378587175575453703

selct.oss-ap-southeast-2.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1378996591567151107

lwildlifetrust.com

# Reference: https://twitter.com/ReBensk/status/1379809108312788993

wansgo.oss-ap-southeast-5.aliyuncs.com

# Reference: https://github.com/DoctorWebLtd/malware-iocs/blob/master/Android.Joker/README.adoc

ad.mobnv.com
api.lemonmanga.com
gp.fortunnecat.com
router.cutebubblegame.com
welcome.baltergames.com
allinonemessenger.oss-cn-shenzhen.aliyuncs.com
beautypluscamera.oss-ap-northeast-1.aliyuncs.com
cameramx-photovideocamera.oss-cn-wulanchabu.aliyuncs.com
colorrollingicon.oss-cn-huhehaote.aliyuncs.com
deepkeyboardpro.oss-cn-hongkong.aliyuncs.com
funcolortoucheffects.oss-ap-southeast-2.aliyuncs.com
funneymemeemoji.oss-ap-southeast-5.aliyuncs.com
happycolor.oss-ap-northeast-1.aliyuncs.com
happytapping.oss-cn-qingdao.aliyuncs.com
new2021keyboard.oss-ap-south-1.aliyuncs.com
novasdk.oss-cn-beijing.aliyuncs.com
superkeyboard.oss-ap-southeast-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1381533326570229762
# Reference: https://www.virustotal.com/gui/file/3dfd9c6825c816fe0c995942c3c2885c5113084f199de5c1c107cf58c9f2d01b/detection

dsfdbhfg-1301476296.cos.ap-mumbai.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1381531919356100609
# Reference: https://www.virustotal.com/gui/file/7f5a3921bcaf383ae8812814b1e29dad4f1baddfa0b723cc6e3bdd6c6e6a358a/detection

0402-ppd-dsb.oss-ap-southeast-2.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1382594399712911360
# Reference: https://www.virustotal.com/gui/file/c55a1f0344582b1a4f06199bf2abc2e6cb11c22b18e1c86bbef433ab4b782ef4/detection

languages-mmp.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/m0br3v/status/1224286533487820800

coronavirus.oss-accelerate.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1384373907940016131

dgsxc.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/Someguy19891/status/1385224629396987908

cvnz.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/Someguy19891/status/1385282363484033027

vfew.oss-eu-west-1.aliyuncs.com

# Reference: https://twitter.com/Cuser07/status/1340647716930560000

ewr1.vultrobjects.com

# Reference: https://twitter.com/ReBensk/status/1386225948001914883

cjck-image.oss-ap-southeast-3.aliyuncs.com

# Reference: https://twitter.com/Someguy19891/status/1386384566978371585

vbnm.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1386897035484274689

mul4.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1389887507702050817

yutey.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/Someguy19891/status/1389883215477809153

ww44kk-1305586011.cos.na-siliconvalley.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1392735146235760640

512-1305586011.cos.na-ashburn.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1394902634641780736

517-1305586011.cos.na-toronto.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1393133564523257858

dododododo.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1393455501514477571

321145512a513-1305586011.cos.na-toronto.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1393598051697131521

piapia.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1395351832654794759

vvtts.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1395983592652623875

haiyawa.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1395983811637252096

suanleba.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1395983726660644872

gapp.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1396334176639459330

misia.oss-ap-southeast-3.aliyuncs.com

# Reference: https://twitter.com/dvjmane19/status/1396568030398746627

buckts.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1396718261807435781

sycg.oss-eu-west-1.aliyuncs.com

# Reference: https://twitter.com/dvjmane19/status/1398668479167823874

kullali.oss-us-east-1.aliyuncs.com
wter.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1399041124682006529

new-sk.oss-ap-southeast-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1399210588429946888

517-1305586011.cos.na-toronto.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1399207089256296454

skullali.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1399969639413686273

syracuse-1301476296.cos.ap-mumbai.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1400131768833822720

tos-1305586011.cos.na-toronto.myqcloud.com

# Reference: https://twitter.com/Someguy19891/status/1400758703603683328

61toolll.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1401057812604588037

automan-1301476296.cos.eu-moscow.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1401432186096537601

z7f5b2g-1301476296.cos.ap-mumbai.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1401521422770458626

20210419-1305586011.cos.na-toronto.myqcloud.com

# Reference: https://twitter.com/Someguy19891/status/1403280211093835784

tttlll-1305586011.cos.na-toronto.myqcloud.com

# Reference: https://twitter.com/dvjmane19/status/1404322779554476037

aiyama.oss-eu-west-1.aliyuncs.com

# Reference: https://twitter.com/Someguy19891/status/1405421937753432065
# Reference: https://www.virustotal.com/gui/domain/spotifly.world/detection

spotifly.world

# Reference: https://twitter.com/ReBensk/status/1405754983547502603

tatamm.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1406241798431797249

tpfl.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1406651189312180225

voicesp.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1406653301978853380

tatamm.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1407936663662125056

614tls-1305586011.cos.eu-frankfurt.myqcloud.com
dejunior.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1409417735889735680

tnd.oss-ap-southeast-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1409427649118621699

02aa-1301476296.cos.eu-moscow.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1410479298381639682

intherain.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1411901306248253448

onemoretime.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1411916504476504066

0701baibao-1305586011.cos.ap-nanjing.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1412726140645494785

willyou.oss-ap-southeast-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1413071498948923399

kadmg.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1412716959754600456

http://143.198.150.254
/ob1x/8j84e/xnxo

# Reference: https://twitter.com/ReBensk/status/1414446496406065156

corejj.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/magnumsnip/status/1414589863106519040

hd-background.oss-ap-southeast-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1415182687787094023

dkqonfacebook-1301476296.cos.ap-mumbai.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1414900521802948613

caonimasbsa-1305586011.cos.ap-singapore.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1416400454389428228

denni.oss-ap-northeast-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1416438873761091588

onemoretime.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1417079288197570560

mffsgfb-1301476296.cos.ap-mumbai.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1418535089277870080
# Reference: https://www.virustotal.com/gui/file/52af3165b2a222d0336a26ff7a9302b2df973d995177eeff3094bfd36e0e9d1c/detection

samg.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1418533495471702019
# Reference: https://www.virustotal.com/gui/file/d31c3b1a0887e5923b65e5157318e1a8ea366881eabd02233f1037ebdcb5e7eb/detection

716ocean-1305586011.cos.na-ashburn.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1418099141591269379
# Reference: https://www.virustotal.com/gui/file/96a8edb1080f49cd384f2bc7f2a5ab65de08893fe7abd45bbfd3fe8f8945159c/detection

usefully.oss-ap-southeast-3.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1419521390445617156
# Reference: https://www.virustotal.com/gui/file/73d09c62df86d24e19f94b6a4d00dd4f4ae6d1af978888d6955936cacbbbdfae/detection

jiefx.oss-ap-southeast-3.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1419683128277405699

pointer.oss-ap-southeast-2.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1421875674839621636
# Reference: https://www.virustotal.com/gui/file/652412b8441a5c7b46a6106e8c40f7fac3fa1cc9009316ae270f9c8fbadee98f/detection

ds-3006.oss-acc-allline.aliyuncs.com.gds.alibabadns.com
wg9.oss-accelerate.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1422040841124683779
# Reference: https://www.virustotal.com/gui/file/5cc2dbd3fa346bca124faeee24e1072b02df993fd70a1d2973ab4da973e13759/detection

weathercycl.club

# Reference: https://twitter.com/ReBensk/status/1423249047360393218
# Reference: https://www.virustotal.com/gui/file/f050606805f23465d30b9b2c61c9c912b1c5006e7683d1a039af08a02a5865ef/detection

covidis.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1423266441277497355

84ppsd-1305586011.cos.na-siliconvalley.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1423560450101243905
# Reference: https://www.virustotal.com/gui/file/9cb527cab9f836d6716507be12076f34e7a3260400a641c12554fd2ce5052c5a/detection

bjylhf.oss-ap-southeast-3.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1424391509508431878

http://161.117.226.99

# Reference: https://twitter.com/ReBensk/status/1429116330284781574
# Reference: https://www.virustotal.com/gui/file/bb3e0a955f7eb43b04e03449b4aeb87a15935891b48ea015f738a4153cf92486/detection

heartrateandmealtracker.com

# Reference: https://labs.k7computing.com/index.php/joker-unleashes-itself-again-on-google-play-store/
# Reference: https://www.virustotal.com/gui/file/214135bb602b3d833d51a3a4ddcbd3aea3124caf67ad2aa0467d8b3073a24b1e/detection

1mg1816-1305586011.cos.na-ashburn.myqcloud.com
fenglintechnology-app01.oss-me-east-1.aliyuncs.com
grouplearn.shop
implemente.life
paramera.shop
puerassist.club
seemslologo.club
vip.paramera.shop

# Reference: https://twitter.com/ni_fi_70/status/1450001755065012224

diyaa.oss-ap-southeast-2.aliyuncs.com
wo0.oss-accelerate.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1451079105470820358

jiaomei.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1458795768022720520

banmama.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1458803683517468678

fibvdk77pp.s3.us-east-1.amazonaws.com
opyv7s6tju.s3.eu-north-1.amazonaws.com

# Reference: https://twitter.com/cy60rg17/status/1459941307279831046

howmuch.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1460225316941672448

aa1026.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1460274914397720584

uyetpvn545.s3.eu-west-1.amazonaws.com

# Reference: https://twitter.com/cy60rg17/status/1461376398078013440

ykzzldx.oss-ap-southeast-2.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1466078385818505226

8egbu57cwe.s3.eu-north-1.amazonaws.com

# Reference: https://twitter.com/sh1shk0va/status/1468891475887157250
# Reference: https://twitter.com/midnight_comms/status/1468969195220062214
# Reference: https://www.virustotal.com/gui/file/988293d69199e6905e29256b489c9f73c0939e520f19fb23a7bd6d222f708359/detection
# Reference: https://www.virustotal.com/gui/file/ef03a39a0a845b54f2a4be42d533ee92d5b309c9f81bb985ed3cce1e3733ece3/detection

http://193.123.103.55
fortunnecat.com
aff.fortunnecat.com
v7s3q3zisk.s3.eu-west-3.amazonaws.com

# Reference: https://twitter.com/midnight_comms/status/1468971453630410763

knowu.oss-ap-northeast-1.aliyuncs.com

# Reference: https://twitter.com/midnight_comms/status/1468971551324131349
# Reference: https://www.virustotal.com/gui/file/8ee3c8007da49ace4c6070081766e8a5f91ed5c9c966dc5f65287b7c312f797f/detection

http://8.214.6.79
applicanic.com
keyboardstyle-181d4.firebaseio.com
keyboardstyleapps.blogspot.com
azh913.oss-us-east-1.aliyuncs.com
ds-2008.oss-acc-allline.aliyuncs.com
ds-2048.oss-acc-allline.aliyuncs.com
ds-2008.oss-acc-allline.aliyuncs.com.gds.alibabadns.com
ds-2048.oss-acc-allline.aliyuncs.com.gds.alibabadns.com
yon.oss-ap-southeast-1.aliyuncs.com
/svhyqj/mjcxzy
/svhyqj
/mjcxzy

# Reference: https://twitter.com/midnight_comms/status/1468972508426620937

multi-languagekeyboard.blogspot.com

# Reference: https://twitter.com/sh1shk0va/status/1470367449669423110
# Reference: https://twitter.com/midnight_comms/status/1470379168575541250

jao9.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1470359946705395720
# Reference: https://twitter.com/midnight_comms/status/1470377864985923586

xzh5gswh3z.s3.us-east-1.amazonaws.com

# Reference: https://twitter.com/sh1shk0va/status/1471127777785098242
# Reference: https://twitter.com/midnight_comms/status/1471157786750832641
# Reference: https://twitter.com/midnight_comms/status/1471158825377939461
# Reference: https://twitter.com/midnight_comms/status/1471160285230624769
# Reference: https://twitter.com/midnight_comms/status/1471161366568259586

http://8.214.56.11
40wia6je1e.s3.eu-north-1.amazonaws.com
mjhla.oss-ap-southeast-3.aliyuncs.com
mqjuikvjn-1301476296.cos.ap-mumbai.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1471459460602159107

nv2.oss-accelerate.aliyuncs.com

# Reference: https://twitter.com/Cuser07/status/1472124389282181121
# Reference: https://twitter.com/midnight_comms/status/1472232347139559429

mygoodidea.xyz
mygoodidea.oss-me-east-1.aliyuncs.com
puerassist.club

# Reference: https://twitter.com/ReBensk/status/1475362049257402370

maybee.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1475456020004671489
# Reference: https://twitter.com/midnight_comms/status/1475481954506137601

qyhtofiqg9.s3.eu-west-3.amazonaws.com

# Reference: https://twitter.com/ReBensk/status/1434533331408809985

ladders.oss-eu-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1482421958461759488
# Reference: https://www.virustotal.com/gui/file/a9045ba7536e77151fed86ef78efd2fc66cc4298e9b3017df091273c5152b1d8/detection

lettera.oss-ap-southeast-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1482423059374313472
# Reference: https://www.virustotal.com/gui/file/16bbf489bae2c9146d63b715a5f9ff0b24ea3b9bfe8cc93169bd59eadd3a4154/detection

blissful.oss-ap-northeast-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1487829215001350144
# Reference: https://www.virustotal.com/gui/file/26d4754677efd689f4c5c381af8376aeb21116e70cc9c080113d720a9fcb01d2/detection
# Reference: https://www.virustotal.com/gui/file/b628774940789d9fc0146acc6e2cec44a27e368917576e9924e468ef5b10c402/detection

http://13.212.73.209

# Reference: https://twitter.com/ReBensk/status/1488087946767249411

a63vfd6e57.s3.ap-northeast-1.amazonaws.com

# Reference: https://twitter.com/ReBensk/status/1489869350861344771
# Reference: https://www.virustotal.com/gui/file/d863c91841dd320f1cae467773dbe8c6e9406f7220e0a8e3ceb13ea32180bb35

na7qvkzun9.s3.us-west-2.amazonaws.com
fortunnecat.com
aff.fortunnecat.com

# Reference: https://www.virustotal.com/gui/file/f9f4d7a3197aaeb38d9cdffb000dceb2d5276bc24b166c282c9f9b39eb747f4b/detection

bus1etkj8x.s3.eu-west-2.amazonaws.com

# Reference: https://www.virustotal.com/gui/file/eb749ee48f6017cfe2a68b15e4a48946f9a1d186af3621b29674f6475c654884/detection

uulfdjv7xv.s3.sa-east-1.amazonaws.com

# Reference: https://www.virustotal.com/gui/file/e9dc5a33255ffc917bf6419fe5e45308c4c8470f0946f7b076508f7a3cd4c083/detection

25y4v8ei8i.s3.us-west-2.amazonaws.com

# Reference: https://www.virustotal.com/gui/file/d863c91841dd320f1cae467773dbe8c6e9406f7220e0a8e3ceb13ea32180bb35/detection

na7qvkzun9.s3.us-west-2.amazonaws.com

# Reference: https://www.virustotal.com/gui/file/c4e19db3b08fcc0786f0358df52d57280851da111038572683a5b7406ff1a68c/detection

pdko2zc02t.s3.ap-south-1.amazonaws.com

# Reference: https://www.virustotal.com/gui/file/b880fd0a0041b929031869fc5a41f5cbead9eec373dd10071a0dd81ae748d833/detection

bur95kuixl.s3.ca-central-1.amazonaws.com

# Reference: https://www.virustotal.com/gui/file/a0bee30d45534437e9b7774dea5d2c183562037a0b4d681a89171bce25edbfbd/detection

83rez940qo.s3.eu-west-2.amazonaws.com

# Reference: https://www.virustotal.com/gui/file/9a818238ccfad64a393f8cbb29141075147ab855a583d047218f23dd8aa14275/detection

gp.fortunnecat.com

# Reference: https://www.virustotal.com/gui/file/82af315ea310726110cf7bfd7a033b3f80e756115468135c8c3d1454d9f66ff6/detection

http://52.91.167.192
2i2i4w68dz.s3.ca-central-1.amazonaws.com

# Reference: https://www.virustotal.com/gui/file/6111f5e552d82af9b58fa1c5387fad0669afa3b2f4ea54cf0ae0303db0597515/detection

1mcousuhu6.s3.ap-northeast-1.amazonaws.com

# Reference: https://www.virustotal.com/gui/file/362c01bb6cc35788f3304443431a3fc86ebb6c51a6223e9c489b92204017a90b/detection

j6oup8bkwi.s3.us-east-1.amazonaws.com

# Reference: https://www.virustotal.com/gui/file/231a525beb57d7d46f938f938c0b2d81d32fd663b575162972818e863b25beec/detection

5el3tv6osl.s3.us-east-1.amazonaws.com

# Reference: https://twitter.com/ReBensk/status/1490222916054622209
# Reference: https://twitter.com/LukasStefanko/status/1490355878901522443
# Reference: https://www.virustotal.com/gui/file/f2647509afb2eb23d7e369e02b47293b167c8e1fbacf2a35ed90b5f15e56023f/detection
# Reference: https://www.virustotal.com/gui/file/f60d42d016b83c53d9421d635917867ba46dc50ed8f0e12766642f2c226712d7/detection

utansy.com
ace0104.oss-me-east-1.aliyuncs.com
xn3o.oss-accelerate.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/53676ae8637f18f92daf80a7c7732a6e6cd20427f1e3581a50262e858f65f9cd/detection

ferryc.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/f068a2b7590cbdbfd4eeb4921e555eb192b90f343e7165f6f7843fbade4638fe/detection

wuyuz.oss-eu-west-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/db1285dc4ada3c9918851bebc15745a8789458d18be9a51e09fbfee983c358a9/detection

d25tv1xepz39hi.cloudfront.net

# Reference: https://www.virustotal.com/gui/file/9ab65ffc7f877e6e06f8512147c766f503a72e754a5ad9fe37cf5595c2a497c7/detection

yew.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/636d093efbb6162110b7aac9ed00dd242756495378e30c913e2d9e35752b11a9/detection

flumes.oss-us-west-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/0894c5a2244870cb33257ab13d3edb840db4e40a3a715fc815956650c86fa3af/detection

year22.oss-eu-west-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/4ee832c3d6ccdd3d304d33ae53e76aded8cb2b71aaed50239bb087c8ab710742/detection

compan.oss-cn-hongkong.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1493449786732646402

jiaao.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1493518607577456640
# Reference: https://www.virustotal.com/gui/file/0e15b02e99c0153f5c416dfad024386c9d34401cf6e09c96980eaeacfebb6eb0/detection

central-1-ds-2077.oss-acc.aliyuncs.com
praises.oss-ap-southeast-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/43593c8b035f854ac70615f3ce9a0cfa532ebb52cb6cbb5fd257180aea552c59/detection

tomorrowday.oss-ap-southeast-2.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1493902980705185792

jab.oss-ap-southeast-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/95705697a546eb30e2b75e2bace549766d4d9a2744dc67cc54c3a8cf458012f1/detection

avfmproject.xyz
mloss.xyz
s-0215-1.mloss.xyz
sa-0216-2.mloss.xyz
x-0215-1.mloss.xyz

# Reference: https://twitter.com/ReBensk/status/1495426524068995073
# Reference: https://www.virustotal.com/gui/file/9734af7e513364aa63c6bd471f534afdc7bfa87cad5ffc6398d5895ca471fef6/detection

blurs.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1496055251446734853
# Reference: https://www.virustotal.com/gui/file/a1a2c3cbc90172493471ddc234a8909ddb6e6a7639c5c74005269bdaf13d442b/detection

kaqiusha.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/fc3a246cff0375b6bc1a4adfbbe3a45afb6a40557428bbc896f93c0808443ef3/detection

loc-translation.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/f694dd55f69791f3305f434b310cd22c54caad7a53546ab7c331d870599fcbe1/detection

res-values.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/e9b61c9b1441badb2a1e897417b99941ed1b945877b6c638ecc18a9f63056a8c/detection

tumar.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/dae702107db0129a213ff2a5863bcc4cd5694dec305e0720750ecb53b5d6c192/detection

pcman.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/ca6ef976bdc1d22a1cec86cbe93f7b38466bcd1a8270cee267e29cf79942ad16/detection

opiu.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/acc5db0a58da1e647a2c3e1fda43b39b7de46e3e16727af957be7b03a4d7647a/detection

g-imgs.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/8587a06ff15dc8094c43243d4cc917820d88417b1fd4e4564590d21ef06ef46e/detection

myfonts.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/82ca0078402d4ad6e40ee2cbd69d2a8979bfeea9112a1385d446cf835f976259/detection

hd-resource.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/7fb9e64819e9e5156b65021ff12b36c54230994e8f94f50ed80f1bcff66888e7/detection

aa-1019.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/7f154459582e711d236a80018c7b6014312562559f8937984b6fb63d4d7e8499/detection

ikux.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/749a458929fa22008648662b30818c467596335f0e69394c3121692d70e7c7a6/detection
# Reference: https://www.virustotal.com/gui/file/6d0d488045ce947bd339476aa86f5877036d9c5b205dcd5421609d227ed0f34c/detection

uja.happyyear.top
uja.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/6f5be4dcfe3cd25683bc9547446238816c7fbf3342cdbce6aedc4036aa53d671/detection

pluczld.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/5b84723d474be2747fe91ffb094ad3ed715269407514be831f43a6ca53d13fba/detection

picla.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/504e0b9be33f2c5b8a8ba2b8b381bd60ba9f71a99d1155ab1c49af45771f116d/detection

http://157.230.192.87
http://167.99.164.28
http://47.241.3.87
capn.oss-eu-central-1.aliyuncs.com
/api/ckwkc2?icc=

# Reference: https://www.virustotal.com/gui/file/390b29e2722eb8eebcd0b031ae904bc288900b5a5a8c1b1036130a0e964ed5d0/detection

ironma.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/19d6e015a7797fa2610452494ce8aec802b9ff25d515863969494b7a4521f4b4/detection

1-1-0.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/136a9b01597f95bba82993f625cb541a34e26cc9ffbd1544aa3fa51dafa64838/detection

aaca.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/0a8ed4a574298e3266cdb1ae1cbbf252994626284af89bf304a453f56db9704e/detection

pluzz.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1496777134047567872

flew.oss-ap-southeast-3.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1496897708254109727

rator.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1497585987773296640

sharedby.blomp.com

# Reference: https://twitter.com/ReBensk/status/1498890294804172803
# Reference: https://www.virustotal.com/gui/file/fa58783395698ba8717514ecf9661ff278d9be1cc13ac95b1c87bee2661a754e/detection

183.36.108.26:8081
canbye.oss-accelerate.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/837e5a044ffb2721ab07430380c4089e3a6995c9f0663c5192ae76d3a92e4ac0/detection

rememb.oss-ap-northeast-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1500001802095190017
# Reference: https://www.virustotal.com/gui/file/eb1acafcd068747295beee5df8460f063f23a5c10ef795414408029ed2642941/detection

hypno.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/5613c51caf6bece9356f238f2906c54eaff08f9ce57979b48e8a113096064a46/detection

xni.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/8cd27abdeaf021e73b1c3428c4b378286875061a7429de3e9c7560882e0bf290/detection

docread.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/c26f5a65d820f636c514a4b6eefc2daed98fe4e26c65f88762e099490b6aacec/detection

119.147.6.84:8081

# Reference: https://tria.ge/220316-reeh8scgdj/behavioral1

joyjo.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1505063971660857346
# Reference: https://twitter.com/ReBensk/status/1505396821316673539
# Reference: https://twitter.com/magnumsnip/status/1505814807198732293
# Reference: https://twitter.com/magnumsnip/status/1505810655538184192
# Reference: https://www.virustotal.com/gui/file/1ad01131d1c18e2d5afc81d9392e200ee19f02e4367048b10f440704962f2f0e/detection
# Reference: https://www.virustotal.com/gui/file/b3d4bbba8aa5451f23f636367db4d16e00c5cc5416770fd5bde80a7fc61fe96e/detection

dancing.oss-me-east-1.aliyuncs.com
xjuys.oss-accelerate.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1507223904808763393
# Reference: https://www.virustotal.com/gui/file/8aa2abea2a4b0d23c8b69123860c1b35da3410bef737b50f54f59b3b9f745a07/detection

machin.oss-ap-southeast-6.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1509500212540321795
# Reference: https://www.virustotal.com/gui/file/150d62510b362ce110df0324e19b6d832fc6f8129fb2b5390d3cee8d94a3d12c/detection

reality.oss-ap-northeast-2.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1513927583141822465
# Reference: https://www.virustotal.com/gui/file/78b2822a2357e78f199050495de490c140c260b830332437530cae780531461c/detection

newapril.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1515958514123911174
# Reference: https://twitter.com/ni_fi_70/status/1516334982549192710

whisperu.oss-ap-northeast-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1514994019860086784
# Reference: https://twitter.com/ni_fi_70/status/1516337687724179456

0xiaoxiao-1301476296.cos.na-ashburn.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1516699643404378119
# Reference: https://twitter.com/ni_fi_70/status/1516704581350305798

depths.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1519192928899551233
# Reference: https://www.virustotal.com/gui/file/ca9c1483ef75da118a2fed1243d01cb6febd9d0d9e710465bbd57db7724ff439/detection

lantansuancai.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1519190384672493568
# Reference: https://www.virustotal.com/gui/file/9e225ff9f87938e872e71074eda9986ce3a776f8d62774a8874e26e86fa21698/detection

rk2rop9ourkay-1301476296.cos.ap-mumbai.myqcloud.com

# Reference: https://twitter.com/ni_fi_70/status/1519667023105646592

nexto.oss-eu-west-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/dde98b8434d2dd5d19250c125372f0151b9b477bac49423bba494b803c82b614/detection

neighbors.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1523942878686310400
# Reference: https://twitter.com/ni_fi_70/status/1523953881381810176

yhnvdsfexznbjha-1301476296.cos.ap-mumbai.myqcloud.com

# Reference: https://twitter.com/ni_fi_70/status/1524630481916116992

appevent.xyz
re.appevent.xyz

# Reference: https://twitter.com/ni_fi_70/status/1526100159754543106

gbnjbrjbfdsds-1301476296.cos.ap-mumbai.myqcloud.com

# Reference: https://www.virustotal.com/gui/file/f310d6679f17eda84e5c59e6feecd5d7204d560890372cfe1eec69877896b8cc/detection

ipots.oss-us-east-1.aliyuncs.com

# Reference: https://tria.ge/220526-g4w5gacggl/behavioral1

laughter.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1531171340564283392

luminous.oss-eu-west-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/d4a28d852d60ac0f180a5dfcc95a544a4fa400403eb318162f69d87bd3749100/detection

logapi.xyz
api.logapi.xyz

# Reference: https://twitter.com/ReBensk/status/1533061589942693889
# Reference: https://twitter.com/midnight_comms/status/1533064197491216384

beside.oss-eu-west-1.aliyuncs.com
operatebrill-1301476296.cos.ap-mumbai.myqcloud.com
sfatyzbjqkjs-1301476296.cos.ap-mumbai.myqcloud.com

# Reference: https://twitter.com/midnight_comms/status/1533632041375305730
# Reference: https://twitter.com/midnight_comms/status/1533632548936396800

maytheday.oss-ap-southeast-2.aliyuncs.com
/may19adab.nchl

# Reference: https://twitter.com/sh1shk0va/status/1535267889313370112
# Reference: https://twitter.com/midnight_comms/status/1535273575342559234

givehotdog.com
trustcats.com
whatmypl.com
dx-ads.se.us-east-2.amazonaws.com

# Reference: https://www.virustotal.com/gui/file/422d3be1c543777281c9a97154afdf523230259855daf7837387e0a7db69c600/detection

overhead.oss-ap-southeast-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/f24e395fe73779882f9f0a07e7ca86613bfa91493aa1e9eb6a6edd41c710bd5b/detection

univer.oss-ap-northeast-2.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1537576927833346049

juneeoumaos.oss-ap-northeast-2.aliyuncs.com
nojio.oss-eu-west-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/c5aac53c3206f75d0fe85e569e42a9387d7f0ff61b731f57d6b8b62a4a28ed15/detection

xjuys.com
/xjuys/v1
/xjuys/v2

# Reference: https://twitter.com/midnight_comms/status/1537803912844959745
# Reference: https://www.virustotal.com/gui/file/11b82c0a3a2543600c636e31290d3c724c431b4c448dd8fda2d874aea517e7d2/detection

play-google-com-1301476296.cos.ap-mumbai.myqcloud.com

# Reference: https://twitter.com/sh1shk0va/status/1537862037501509632

nnmmaacc-1301476296.cos.ap-mumbai.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1538513506999250945
# Reference: https://twitter.com/midnight_comms/status/1538552893556465664
# Reference: https://www.virustotal.com/gui/file/afeb6efad25ed7bf1bc183c19ab5b59ccf799d46e620a5d1257d32669bedff6f/detection

look4.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1539863046591352832
# Reference: https://twitter.com/midnight_comms/status/1539946083412873217
# Reference: https://tria.ge/220623-hfrqhscafm

base-1304593971.cos.eu-frankfurt.myqcloud.com
use-1304593971.cos.na-ashburn.myqcloud.com
zxporter.com
/canbye/v1
/canbye/v2

# Reference: https://twitter.com/ReBensk/status/1542116060052148224
# Reference: https://twitter.com/midnight_comms/status/1542139092586094595
# Reference: https://bazaar.abuse.ch/sample/4970e21df47bfdfc6e72d35f5e5e6de03770718a1240c180a75a8a0ba14e2197/

5qx32p3cm9.execute-api.us-west-2.amazonaws.com
oilopix0v9.execute-api.us-west-2.amazonaws.com

# Reference: https://twitter.com/ReBensk/status/1542383654168453280
# Reference: https://twitter.com/ni_fi_70/status/1542389718968573952
# Reference: https://www.virustotal.com/gui/file/abfd34a999b72353d4a1042efa46a22d86daea25fc20100a2ef7e2155622602f/detection

amazingufish.com
birdinhous.com
healthcheckerout.com
cdn.healthcheckerout.com
dx-ads.s3.us-east-2.amazonaws.com
dx-ads.s3-website.us-east-2.amazonaws.com

# Reference: https://twitter.com/ReBensk/status/1545458409364803584
# Reference: https://twitter.com/midnight_comms/status/1545526821940183040

http://139.177.180.78
julyhcdszstsxqll.oss-ap-southeast-3.aliyuncs.com
/july01bldxx.yxzrh

# Reference: https://www.virustotal.com/gui/file/0f102acca99f15412465290dc395b6e61f13c46cf40f04b1b966ec4923e44e68/detection

atmost.oss-ap-northeast-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1556554890259795969
# Reference: https://twitter.com/midnight_comms/status/1556622380742606848
# Reference: https://www.virustotal.com/gui/file/6feb6b9cd679f4aa6a1e1549b6cd302f653038beaa903ddf8b20e3e44221f4e6/detection

randkey-1301476296.cos.ap-mumbai.myqcloud.com

# Reference: https://twitter.com/ReBensk/status/1556886499995422720
# Reference: https://twitter.com/ni_fi_70/status/1556905334735790080
# Reference: https://www.virustotal.com/gui/file/ee9ba77cfd3b0ba464dec5a80b42c21e25aef1bdf05791c833e8eca823af760a/detection/

cxjus.oss-accelerate.aliyuncs.com
mmds.oss-us-west-1.aliyuncs.com
weither.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1557627957442650117
# Reference: https://www.virustotal.com/gui/file/e5a584d21ca765521d049416e3bf226e6b4fe927eb3bbb22882b6387e19a470a/detection

traverse.oss-ap-southeast-3.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1564148841816985601
# Reference: https://www.virustotal.com/gui/file/41b7dddcf43a9ab357b776c2eef9d8d3b7f44b0781d213d1e1d9ecf73ccd695e/detection
# Reference: https://www.virustotal.com/gui/file/0e537c2b99cc6171b2cb0f315c75d38be8c5e1faebf999a5090bf6d1fb856401/detection
# Reference: https://www.virustotal.com/gui/file/eff632c600c511ae99a78eb18e48328cfe661e9593b173cc7e74a2d6a53f064d/detection

cxjus.com
corners.oss-ap-southeast-1.aliyuncs.com
designate.oss-eu-west-1.aliyuncs.com
interested.oss-us-east-1.aliyuncs.com
mffsgfb-1301476296.cos.ap-mumbai.myqcloud.com
pn22i2eqrj.execute-api.us-east-2.amazonaws.com

# Reference: https://twitter.com/ni_fi_70/status/1569943828835999745
# Reference: https://twitter.com/sh1shk0va/status/1570021844203507712
# Reference: https://twitter.com/sh1shk0va/status/1570708744073531392
# Reference: https://www.virustotal.com/gui/file/f7eff6d7006cc4cc19d7fe574e50fc371e98ce8bdca09f74401ea27718f39142/detection
# Reference: https://www.virustotal.com/gui/file/686a6f55f1f25610253710bb154cfa1f08e84319fb8cbe12c46e5d3f93358ece/detection

armblood.site
twback.store
ct.twback.store
home.armblood.site

# Reference: https://twitter.com/ni_fi_70/status/1569982924920848390
# Reference: https://www.virustotal.com/gui/file/98fc1874772bc1a4eac483b4f50b7d36900c29ca3d5711cb6a3b8462854d8f05/detection

metlight.xyz
cat.metlight.xyz
/fp5/ds2qe

# Reference: https://twitter.com/sh1shk0va/status/1575155357529346048
# Reference: https://www.virustotal.com/gui/file/56ca20b7b5a94ac723306a76714ed88fbe97fff93cc9d9e015fb41d6516c7178/detection
# Reference: https://www.virustotal.com/gui/file/d93def97d593c453ec9065294b985b6ccb0e49535daa82dec415503094f277e6/detection

topsavor.site
sep.topsavor.site

# Reference: https://twitter.com/sh1shk0va/status/1575741560959995904
# Reference: https://www.virustotal.com/gui/file/279cdccd8d1b1729628cd021d332f2a1b26abce1fb40a8a5a46b9528274411e2/detection

biscuitsweb.online
g.biscuitsweb.online

# Reference: https://twitter.com/ReBensk/status/1577518663535427587
# Reference: https://www.virustotal.com/gui/ip-address/101.32.92.198/relations
# Reference: https://www.virustotal.com/gui/file/a100248f8b0342b63639dfcb0b7761056c082968320b412d95b73a2502afa9af/detection

breadhis.online
cardsimple.online
cheapcoffee.online
fanauctions.online
fanlog.online
fmzcompute.online
nameyourfans.online

# Reference: https://www.virustotal.com/gui/file/306771642e931d8d1ea06a4caaf95514cb6e1b0dfc4a167376a744c43b4a84e9/detection

blockmerge.art
cdn.blockmerge.art

# Reference: https://twitter.com/ni_fi_70/status/1580529676010725377
# Reference: https://www.virustotal.com/gui/file/c7a24fdf454add796a868691b99f1a4916f15a0bd0bc4bad54062dbbd3eebae9/detection

oneslife.oss-ap-southeast-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1580821762228424705

homecontrol.lol
static.homecontrol.lol

# Reference: https://www.virustotal.com/gui/file/ec1688500c94d59afa764dcfd1690a4b2e4f4a4520bb04e5e147f8ce05158d7b/detection

keyseotyn.online
admin.keyseotyn.online

# Reference: https://twitter.com/ni_fi_70/status/1584523910099664897

exuberant.oss-ap-southeast-3.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1584521690591399938
# Reference: https://www.virustotal.com/gui/file/1f265d8cfe52b9b746c1c7185481a95f9415f82904e7f1e510f8bb2a379d2eff/detection

caoii.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1585903448872157186
# Reference: https://www.virustotal.com/gui/file/48f2d1896101de4fe55cccdd9bbb16e2cb5e58072e1a7f64202f3b8b40c9c68e/detection
# Reference: https://www.virustotal.com/gui/file/7276c4dce081017423e0f1a1ff8843616f45544c8037cd634de32ace0614c2a2/detection

septcieern.online
app.septcieern.online

# Reference: https://twitter.com/ReBensk/status/1585964132347437057

beginning.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1587815427358457859
# Reference: https://www.virustotal.com/gui/file/fdb825a739303c4d47cbd691a9481beebb41f9ca549620a000b90f33e959c32d/detection

subdao.shop

# Reference: https://twitter.com/sh1shk0va/status/1588471415766159360
# Reference: https://www.virustotal.com/gui/file/3e7408fdf7766f701757548c5c3b09a7b87af31a726b297577d117a1756ba1b7/detection

chaneonmge.store
doc.chaneonmge.store

# Reference: https://twitter.com/ReBensk/status/1589292006177918976

qgpo.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1589290329949491203

muyaj.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1589534305742884864

nov2.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1589920085086347268

cashmarket.oss-eu-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1590643621367545859

somany.oss-ap-northeast-1.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1590636564136148992
# Reference: https://www.virustotal.com/gui/file/ff6e4ef67013f91605f1caee71120d1467a9a5069ae2b6c5fb2e825bb8ae59c5/detection

ele-new.live
a.ele-new.live

# Reference: https://twitter.com/sh1shk0va/status/1593276944535142400
# Reference: https://www.virustotal.com/gui/file/2573f9f10be18e56e9185f6b4060cb478e95f1adfc11ad4f35fbf3d486fc62cc/detection

aidclean.com
app.aidclean.com

# Reference: https://www.virustotal.com/gui/file/dcc0fe34445144a376dc04227221e69bf2ca75162231d7ac6c0a4aad4fc56b2b/detection

prosperity.oss-ap-northeast-2.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1596020744160710658
# Reference: https://www.virustotal.com/gui/file/7d517ea9bc152220fba74df5da9eddacb06184d38c79eaac2539c2f07d40f4e2/detection

richus.top
cxjus.oss-ap-southeast-1.aliyuncs.com
limited.oss-ap-southeast-5.aliyuncs.com
/cxjus/c1
/cxjus

# Reference: https://www.virustotal.com/gui/file/d02ec5a615b75cd21011aad1eda208df42ad654c5c3e4b5f3a9fdf3de9efd1cc/detection

complicated.oss-ap-southeast-7.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/edc96507180679f13a470d605929c73f0dcd9690c374f258806f53753406772b/detection

tba_sync.gte666.com

# Reference: https://www.virustotal.com/gui/file/b3e4b3aa06db36a8f6b09fced82ee2091873d1b79a44bbc724a194c7b86992ef/detection

maxuu.oss-eu-central-1.aliyuncs.com
weco.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/ip-address/43.154.2.131/relations
# Reference: https://www.virustotal.com/gui/file/7d517ea9bc152220fba74df5da9eddacb06184d38c79eaac2539c2f07d40f4e2/detection
# Reference: https://www.virustotal.com/gui/file/7385e0e3d811b317ed67eefb54274b232c1f167de14c593688453b7431034a02/detection

cannca.shop
fbcode.co
fburl.fun
hkhi.nowurl
homec.live
hurb.fun
nowurl.fun
pplink.club
urlfb.co
urlvf.fun
welco.live
25gh.homec.live
76678hg.fburl.fun
a.nowurl.fun
aaduik.nowurl.fun
aaeop.cannca.shop
aee.urlfb.co
affinity.cannca.shop
aiqing.welco.live
all.cannca.shop
allc.fburl.fun
allt.cannca.shop
almighty.fburl.fun
apfpo.nowurl.fun
auto.homec.live
b.nowurl.fun
bailu.fbcode.co
barcode.welco.live
bbasae.pplink.club
bbbl.fbcode.co
bbc.urlfb.co
bbhno.urlfb.co
bbp.fbcode.co
bbs.nowurl.fun
bbuble.nowurl.fun
bcus.pplink.club
bcvg.pplink.club
bdh.pplink.club
beattu.welco.live
beau.welco.live
beauti.welco.live
beautiful.fbcode.co
beauty.cannca.shop
beidanci.cannca.shop
beishang.nowurl.fun
beizi.fburl.fun
bell.nowurl.fun
bfhj.urlfb.co
bg.fbcode.co
bgl.cannca.shop
bgvrf.pplink.club
bhgurjk.cannca.shop
bhhfh.fbcode.co
bhjvbjhu.welco.live
bhnjkl.nowurl.fun
bird.fbcode.co
bit.welco.live
biyan.urlfb.co
bjgkop.urlfb.co
blend.fbcode.co
blg.pplink.club
blog.fburl.fun
blog.nowurl.fun
blood.fbcode.co
blt.welco.live
bnd.pplink.club
bngjkii.welco.live
bngkl.cannca.shop
bns.fbcode.co
board.welco.live
bopjou.homec.live
bpgg.fburl.fun
bpt.fbcode.co
brefg.pplink.club
bright.welco.live
bsd.fbcode.co
bsr.nowurl.fun
btgdyg.fbcode.co
bub.urlfb.co
bubble.fbcode.co
bugiuij.nowurl.fun
bvdh.pplink.club
bvhff.fburl.fun
bvhh.welco.live
bytoij.nowurl.fun
caccc.fbcode.co
calculator.cannca.shop
cammerayu.welco.live
carade.nowurl.fun
cc.urlfb.co
cccnjk.urlfb.co
cccolsp.cannca.shop
cchopl.nowurl.fun
ccm.fburl.fun
ccmm.fbcode.co
cem.urlfb.co
cfk.nowurl.fun
chat.cannca.shop
chat.urlfb.co
chat.welco.live
chatme.cannca.shop
chatting.cannca.shop
chatting.fbcode.co
chiyao.pplink.club
chjdk.pplink.club
ck.fburl.fun
ckyb.fbcode.co
clean.cannca.shop
clean.fbcode.co
clool.welco.live
cm.fbcode.co
cm.fburl.fun
codere.cannca.shop
collage.cannca.shop
color.homec.live
color.urlfb.co
color.welco.live
colorss.nowurl.fun
comfortabl.welco.live
comfortable.fburl.fun
comsmol.fbcode.co
coo.welco.live
cool.fbcode.co
cool.fburl.fun
cool.homec.live
cool.pplink.club
cool.welco.live
coolkey.nowurl.fun
coolkeyboard.cannca.shop
coolr.nowurl.fun
coolsms.cannca.shop
coolss.fbcode.co
coolsybols.welco.live
cothe.welco.live
cover.urlfb.co
creat.urlfb.co
creat.welco.live
crrr.urlfb.co
csgo.fbcode.co
ctoo.fbcode.co
ctt.nowurl.fun
cttm.fbcode.co
cus.cannca.shop
custom.cannca.shop
customiz.welco.live
cute.fburl.fun
cutedly.nowurl.fun
cuteem.urlfb.co
cutout.nowurl.fun
cvbf.cannca.shop
dae23grd.urlvf.fun
daily.nowurl.fun
daiy.fburl.fun
damei.cannca.shop
dawe546h.nowurl.fun
ddchat.cannca.shop
ddkolmm.cannca.shop
default.fburl.fun
deinj.fburl.fun
denglu.urlfb.co
derhj.fbcode.co
designer.welco.live
dfd5uj.welco.live
dfdfsms.urlfb.co
dgfhj.fbcode.co
dghtg.welco.live
dhn.pplink.club
dhuan.fburl.fun
dhy.nowurl.fun
diangan.welco.live
diannao.urlfb.co
diary.welco.live
dijiu.welco.live
djfk.nowurl.fun
djkf.fburl.fun
dkj.fbcode.co
doc.cannca.shop
docu.welco.live
document.urlfb.co
dsa32g.urlfb.co
dsddd.nowurl.fun
duandian.welco.live
easy.welco.live
ect.fbcode.co
editor.cannca.shop
edrxff.urlfb.co
eeditor.cannca.shop
eeeruh.pplink.club
eermeio.fburl.fun
efklm.urlfb.co
ekocnds.fbcode.co
elegant.cannca.shop
emmake.fburl.fun
emoj.fbcode.co
emoji.welco.live
emojic.welco.live
emojikey.nowurl.fun
enhj.pplink.club
enjd.nowurl.fun
enjoytt.urlfb.co
enm.cannca.shop
enojj.welco.live
enojys.cannca.shop
eoilk.cannca.shop
epjgl.pplink.club
era.nowurl.fun
erttyb.pplink.club
eruil.pplink.club
ervn.nowurl.fun
etalk.urlfb.co
etfv.fbcode.co
etg.urlfb.co
etyjh.nowurl.fun
eub.nowurl.fun
eui.fbcode.co
euij.pplink.club
ewbjf.pplink.club
exemoji.urlfb.co
eyu.fburl.fun
eyud.urlfb.co
face.urlfb.co
facey.cannca.shop
facy.cannca.shop
facy.fburl.fun
fake.nowurl.fun
fanc.fburl.fun
fashion.fbcode.co
fassst.fbcode.co
fast.fbcode.co
fastqr.cannca.shop
fasyt.welco.live
fbit.nowurl.fun
fdgrty.urlvf.fun
fdio.pplink.club
fdr7yj.urlvf.fun
fdrs.fburl.fun
fdsfsrtrh.hurb.fun
feisty.welco.live
fek.fbcode.co
fense.nowurl.fun
fes43hgfh.welco.live
feseh.homec.live
ffdgh.urlfb.co
fffas.cannca.shop
fffm.fburl.fun
ffron.cannca.shop
fg45hg.fburl.fun
fgn.pplink.club
fgurb.cannca.shop
fhc.fbcode.co
fhgu.nowurl.fun
fhgy.fbcode.co
fhjlgfj.cannca.shop
fhjn.pplink.club
fhjr.fbcode.co
fieniaos.urlfb.co
finding.welco.live
firiu.fbcode.co
fiu.fbcode.co
fiu.welco.live
fkjd.nowurl.fun
flexible.cannca.shop
flight.nowurl.fun
fm.fburl.fun
fmin.fburl.fun
fnbhs.cannca.shop
fontkey.welco.live
fontsm.welco.live
fpofo.nowurl.fun
front.fburl.fun
fsagfdt.fbcode.co
fsdf.hurb.fun
fsdmnhg.welco.live
fteyn.pplink.club
fts.fburl.fun
fub.fburl.fun
fudn.fburl.fun
fueoi.fbcode.co
fuerg.pplink.club
fun.fbcode.co
fun.urlfb.co
func.urlfb.co
funny.cannca.shop
funny.nowurl.fun
funny.welco.live
fuuffe.nowurl.fun
fuuny.cannca.shop
fuuthe.fburl.fun
fyevd.pplink.club
fyew.pplink.club
fyhdb.cannca.shop
fyudb.nowurl.fun
fyur.nowurl.fun
gala.fbcode.co
gallery.welco.live
ganmao.pplink.club
gbh.pplink.club
gcwey.pplink.club
gelia.cannca.shop
gen.fburl.fun
gfds35.nowurl.fun
gfdyy.urlvf.fun
ggdn.nowurl.fun
ggfkdj.pplink.club
gguio.pplink.club
ghdn.pplink.club
ghfbh.nowurl.fun
gif.nowurl.fun
gitpape.urlfb.co
gkml.pplink.club
glitter.fburl.fun
glw.fbcode.co
gmae.fbcode.co
gnm.pplink.club
gof.cannca.shop
gold.cannca.shop
gold.fburl.fun
gonjm.nowurl.fun
gorgeous.nowurl.fun
gre.fburl.fun
group.urlfb.co
grr.cannca.shop
grw.fburl.fun
gww.urlfb.co
gyjiu.welco.live
haha.homec.live
hahaihd.nowurl.fun
haiyang.nowurl.fun
handy.nowurl.fun
happpp.cannca.shop
hbfnjd.cannca.shop
hbvds.urlfb.co
hcs.nowurl.fun
hd.fbcode.co
hd.urlfb.co
hdcam.urlfb.co
hdscan.urlfb.co
hdwallpaper.welco.live
heartlive.welco.live
hearts.welco.live
heartt.cannca.shop
hello.fburl.fun
hellok.welco.live
henkun.hurb.fun
hfjs.pplink.club
hgftrnjh.nowurl.fun
hghhd.pplink.club
hgrui.nowurl.fun
hhdn.fburl.fun
hhds.fburl.fun
hhjn.urlfb.co
hhn.fburl.fun
hhnd.pplink.club
hholm.fburl.fun
hhuiol.pplink.club
hi.fburl.fun
hi.nowurl.fun
hic.fbcode.co
hifibe.welco.live
hjn.cannca.shop
hjnu.homec.live
hkhi.nowurl.fun
hnhd.cannca.shop
hougen.fbcode.co
hpt.fburl.fun
hruh.fbcode.co
hsg.pplink.club
huacai.fbcode.co
huarui.hurb.fun
hushou.welco.live
hvb.nowurl.fun
hy.urlfb.co
idh.fbcode.co
idofe.nowurl.fun
idoj.nowurl.fun
iewu.fbcode.co
ifhh.cannca.shop
ifok.nowurl.fun
ifyun.fburl.fun
iifj.fbcode.co
iifop.fburl.fun
iiiufh.pplink.club
iijdnj.fburl.fun
iikdj.homec.live
iikifol.pplink.club
iildrm.nowurl.fun
iiods.fbcode.co
iiorinmf.pplink.club
iip.urlfb.co
ijhd.cannca.shop
ijkj.urlfb.co
ikophh.pplink.club
image.fburl.fun
image.welco.live
imjd.cannca.shop
imm.urlfb.co
imnols.nowurl.fun
instal.welco.live
instant.fburl.fun
iownv.fbcode.co
iruhg.fburl.fun
isg.pplink.club
iuhjn.pplink.club
iyh.fbcode.co
jdk.nowurl.fun
jdlk.cannca.shop
jfiurf.nowurl.fun
jfjhd.nowurl.fun
jfkm.nowurl.fun
jfmn.cannca.shop
jfuei.nowurl.fun
jh.nowurl.fun
jhgvb.urlfb.co
jiandao.nowurl.fun
jianpan.urlfb.co
jiaoshou.cannca.shop
jiaotou.nowurl.fun
jiaozi.hurb.fun
jiayans.welco.live
jiayou.welco.live
jidud.nowurl.fun
jiehun.fbcode.co
jiemao.welco.live
jigoer.pplink.club
jjfki.pplink.club
jjjksk.urlfb.co
jjudfhl.fburl.fun
jkdb.nowurl.fun
jkiujyhgf.fbcode.co
jklf.nowurl.fun
joy.urlfb.co
joysms.urlfb.co
jud.pplink.club
kancjd.welco.live
kanj.welco.live
kaoshi.welco.live
kbnjg.nowurl.fun
keyborad.fbcode.co
kffd.fbcode.co
kflk.fburl.fun
kiogl.cannca.shop
kisatec.welco.live
kkase.fburl.fun
kkdhj.fburl.fun
kkflie.nowurl.fun
kkmj.cannca.shop
kknvdjh.cannca.shop
kml.pplink.club
kmvjd.nowurl.fun
kongxincai.welco.live
kouhong.welco.live
kouzhao.pplink.club
kuaile.urlfb.co
kunnan.welco.live
labaa.fbcode.co
lalam.hkhi.nowurl.fun
lalao.welco.live
languagetran.welco.live
lavidaa.welco.live
lcm.cannca.shop
lcm.nowurl.fun
lct.fbcode.co
ldjjl.pplink.club
lek.fbcode.co
lfkdj.cannca.shop
lid.welco.live
life.cannca.shop
life.fbcode.co
life.fburl.fun
life.welco.live
lifesms.cannca.shop
lifeu.welco.live
ligh.cannca.shop
light.fburl.fun
liifff.fburl.fun
lilit.urlfb.co
lilos.cannca.shop
list.urlfb.co
lite.fbcode.co
lite.fburl.fun
live.cannca.shop
live.fbcode.co
liveapps.cannca.shop
lkj.welco.live
lkldo.nowurl.fun
lky.nowurl.fun
llaopd.pplink.club
lldks.nowurl.fun
llemo.urlfb.co
llfol.cannca.shop
llk.fbcode.co
llk.fburl.fun
llpdoe.cannca.shop
llpo.cannca.shop
lmdn.pplink.club
lmmj.fbcode.co
lms.fburl.fun
location.nowurl.fun
log.fburl.fun
love.cannca.shop
love.fbcode.co
love.urlfb.co
love.welco.live
lovvve.cannca.shop
lpcai.cannca.shop
lt.fbcode.co
lunc.pplink.club
lvluo.nowurl.fun
magic.welco.live
management.welco.live
maoyi.welco.live
mark.pplink.club
mcdh.nowurl.fun
mcjsw.nowurl.fun
meilin.welco.live
messaging.welco.live
messenger.welco.live
mhcj.urlfb.co
mianmo.nowurl.fun
mianshua.cannca.shop
miaohua.welco.live
miaomi.welco.live
mihuan.urlfb.co
mkbnmg.fburl.fun
mkld.nowurl.fun
ml.nowurl.fun
mldke.nowurl.fun
mlsk.pplink.club
mmdh.nowurl.fun
mmfk.fbcode.co
mmjl.fburl.fun
mmk.urlfb.co
mmkfl.urlfb.co
mmklo.nowurl.fun
mmldops.cannca.shop
mmncjh.fburl.fun
mmnkop.cannca.shop
mmnop.cannca.shop
mmop.cannca.shop
mmvnj.pplink.club
mnvlp.cannca.shop
mood.fburl.fun
mood.welco.live
multi.urlfb.co
mvj.pplink.club
nahul.cannca.shop
naiba.welco.live
naicha.fburl.fun
namen.nowurl.fun
nanshou.fburl.fun
natunfinish.nowurl.fun
nbgd.nowurl.fun
nbjg.nowurl.fun
ncbv.pplink.club
nch.fbcode.co
nchd.nowurl.fun
ncjs.cannca.shop
ndhj.fburl.fun
nhds.pplink.club
nice.fburl.fun
njkd.nowurl.fun
njvh.fbcode.co
nk.pplink.club
nkdj.urlfb.co
nlvk.nowurl.fun
nm.nowurl.fun
nmdk.pplink.club
nmkfk.nowurl.fun
nnbmk.cannca.shop
nncd.urlfb.co
nnj.fbcode.co
nnmcj.homec.live
nnml.fbcode.co
nnnw.fburl.fun
nnvh.urlfb.co
nnvjx.pplink.club
nnzvg.pplink.club
nowem.fburl.fun
nsk.urlfb.co
nvdh.nowurl.fun
nvdj.fbcode.co
nvfh.nowurl.fun
nvfu.urlfb.co
nvhd.nowurl.fun
nvhye.cannca.shop
nvkff.nowurl.fun
nvm.fburl.fun
nvnd.fburl.fun
nyyhu.urlfb.co
ocr.fburl.fun
ocr.urlfb.co
ocsr.fburl.fun
odbvb.nowurl.fun
odhn.nowurl.fun
odkj.fburl.fun
odlks.pplink.club
odns.nowurl.fun
odun.urlfb.co
oefjgt.cannca.shop
oen.urlfb.co
oepw.fbcode.co
ofh.cannca.shop
ofhk.homec.live
ofi.cannca.shop
ofldj.cannca.shop
oicel.nowurl.fun
oih.pplink.club
okj.nowurl.fun
olkm.nowurl.fun
only.cannca.shop
onlywhy.nowurl.fun
ood.pplink.club
oodgn.cannca.shop
oofh.urlfb.co
oofi.nowurl.fun
oofk.nowurl.fun
oojfj.fbcode.co
ookide.fburl.fun
ookm.pplink.club
ookmn.fburl.fun
oolc.pplink.club
oolkjd.pplink.club
oons.nowurl.fun
oop.urlfb.co
oopfh.cannca.shop
ooremn.urlfb.co
oosp.pplink.club
opdn.cannca.shop
opeddf.nowurl.fun
opfg.pplink.club
opho.pplink.club
opmn.fbcode.co
opn.welco.live
opod.fbcode.co
oppg.welco.live
oqeyb.welco.live
orcc.cannca.shop
orm.nowurl.fun
orpitn.fburl.fun
out.cannca.shop
owg.nowurl.fun
pap.urlfb.co
pdf.cannca.shop
pdf.fbcode.co
pdf.nowurl.fun
pdf.welco.live
pdh.fburl.fun
pdhn.cannca.shop
pdhv.nowurl.fun
pdi.fburl.fun
pdkj.fbcode.co
pdn.fbcode.co
pdnw.nowurl.fun
pem.fburl.fun
per.fbcode.co
perrr.cannca.shop
person.fbcode.co
pes.urlfb.co
pfbh.pplink.club
pfim.cannca.shop
pfir.cannca.shop
pfnjd.pplink.club
pgth.cannca.shop
phd.fbcode.co
phhbeta.urlfb.co
phlhjk.cannca.shop
photo.cannca.shop
photo.fbcode.co
photo.welco.live
photomaker.urlfb.co
pic.nowurl.fun
pkdj.cannca.shop
pkf.cannca.shop
pkn.fbcode.co
pl.fbcode.co
pl.nowurl.fun
plan.fbcode.co
planner.fbcode.co
planner.nowurl.fun
pld.nowurl.fun
pldg.fburl.fun
plfdhe.fburl.fun
plmkf.cannca.shop
pltx.cannca.shop
pnvbhd.nowurl.fun
poda.pplink.club
podn.fbcode.co
poee.fbcode.co
pohjrid.urlfb.co
poiuhbrf.urlfb.co
pold.nowurl.fun
pom.fburl.fun
pop.fbcode.co
poqd.nowurl.fun
power.fbcode.co
power.fburl.fun
ppd.nowurl.fun
ppdhj.nowurl.fun
ppgld.nowurl.fun
ppkfhy.pplink.club
ppnd.nowurl.fun
ppole.pplink.club
ppolg.fburl.fun
pppfool.cannca.shop
ppploi.pplink.club
pproo.welco.live
ppsm.urlfb.co
pptt.urlfb.co
precise.cannca.shop
prou.pplink.club
psn.fbcode.co
psychedelic.fburl.fun
qepo.fburl.fun
qetfgkm.fburl.fun
qinya.cannca.shop
qpt.nowurl.fun
qqrr.cannca.shop
qrread.cannca.shop
qrtb.nowurl.fun
qtvchfg.fbcode.co
qucc.cannca.shop
quck.welco.live
quefa.welco.live
quick.cannca.shop
quick.fburl.fun
quick.pplink.club
quickfinding.nowurl.fun
qvf.nowurl.fun
qwbj.nowurl.fun
qwer.nowurl.fun
qwfdf.fburl.fun
qybe.urlfb.co
qydgb.nowurl.fun
rbf.welco.live
re.fburl.fun
reall.nowurl.fun
recover.cannca.shop
recover.urlfb.co
recover.welco.live
reliable.nowurl.fun
reminder.cannca.shop
renmen.welco.live
retae.welco.live
rev.urlfb.co
revf.urlfb.co
rfy.nowurl.fun
rhj.homec.live
rich.cannca.shop
righ.fbcode.co
rjgjkl.cannca.shop
rptril.cannca.shop
rriujlo.urlfb.co
rrkoop.fburl.fun
rrm.fbcode.co
rroj.urlfb.co
rrokl.pplink.club
rrujgl.pplink.club
rtgyh.cannca.shop
rth.nowurl.fun
rtuyn.urlvf.fun
ruruio.nowurl.fun
rwtygv.pplink.club
ryjnds.fburl.fun
ryr.fbcode.co
sanfen.cannca.shop
scan.urlfb.co
scan.welco.live
scanner.urlfb.co
scantext.welco.live
sck.urlfb.co
scm.nowurl.fun
sdehk.cannca.shop
sdg.fburl.fun
secret.fburl.fun
sel.urlfb.co
selfie.fbcode.co
selfiee.cannca.shop
selfiephoto.welco.live
send.urlfb.co
sendlove.fbcode.co
senlin.cannca.shop
shanbei.nowurl.fun
shangxin.pplink.club
sharefinding.nowurl.fun
shbc.pplink.club
shengyin.urlfb.co
shirly.urlfb.co
shouji.urlfb.co
shrar.urlfb.co
shuilian.fbcode.co
shuiru.cannca.shop
sia.cannca.shop
sidujf.nowurl.fun
signal.fbcode.co
siliji.nowurl.fun
simhd.cannca.shop
simp.cannca.shop
simpl.fburl.fun
simpl.welco.live
simple.urlfb.co
simple.welco.live
simplss.nowurl.fun
sitcker.fburl.fun
siteck.welco.live
sitecker.cannca.shop
sitejjs.fbcode.co
sitemo.fburl.fun
sitick.urlfb.co
sketch.cannca.shop
sketchph.cannca.shop
skp.fbcode.co
skybor.fbcode.co
sldk.fburl.fun
sm.fbcode.co
smartt.urlfb.co
smile.cannca.shop
smile.fbcode.co
smilejj.fburl.fun
smm.nowurl.fun
sms.nowurl.fun
smsms.cannca.shop
smspro.nowurl.fun
social.cannca.shop
sp.fbcode.co
speci.cannca.shop
ss.nowurl.fun
ssmclo.cannca.shop
sss.fbcode.co
sssmar.welco.live
sticker.fburl.fun
sticker.nowurl.fun
stickerp.fbcode.co
stickers.welco.live
stickerss.welco.live
studios.welco.live
suan.welco.live
subtitle.cannca.shop
suiyu.welco.live
sum.urlfb.co
super.urlfb.co
swee.fbcode.co
sweet.fbcode.co
sweetca.fbcode.co
sweethd.cannca.shop
swm.nowurl.fun
symbols.fburl.fun
talk.fbcode.co
tameni.welco.live
tangguo.welco.live
tangzui.urlfb.co
tcm.pplink.club
tdh.nowurl.fun
tdm.nowurl.fun
tegbd.nowurl.fun
tegdfh.welco.live
test.fburl.fun
test.pplink.club
tet.fburl.fun
tevf.nowurl.fun
tex.fburl.fun
textcamera.cannca.shop
textfunny.welco.live
teyhn.pplink.club
them.urlfb.co
theme.fbcode.co
theme.urlfb.co
themmm.cannca.shop
thenma.cannca.shop
thsweed.fburl.fun
tiingo.fburl.fun
time.fburl.fun
tkk.fbcode.co
tnk.nowurl.fun
topldk.cannca.shop
toubao.pplink.club
trac.cannca.shop
tracker.welco.live
trackers.urlfb.co
tran.fbcode.co
tteg.nowurl.fun
ttiom.fbcode.co
ttmm.welco.live
ttnj.fburl.fun
ttopl.pplink.club
ttt.fbcode.co
ttuinh.pplink.club
ttujg.pplink.club
ttxt.nowurl.fun
tuandui.fburl.fun
txtmes.cannca.shop
ubng.fburl.fun
udij.nowurl.fun
udjhnl.cannca.shop
uei.nowurl.fun
ufik.cannca.shop
ufjbfj.welco.live
ufjgkoh.fburl.fun
ufjndh.nowurl.fun
ufnhf.fbcode.co
ugitje.cannca.shop
ugldk.fburl.fun
ugyrh.cannca.shop
ui.pplink.club
uidj.cannca.shop
uieu.nowurl.fun
uitgnj.cannca.shop
ujh.nowurl.fun
ujn.fbcode.co
ujnd.pplink.club
ujnhg.urlfb.co
ukej.urlfb.co
ultimate.urlfb.co
ummko.fburl.fun
unfj.cannca.shop
unij.pplink.club
uniqu.fburl.fun
unique.cannca.shop
unjg.pplink.club
unker.fbcode.co
unlim.welco.live
unnlopl.welco.live
untive.fbcode.co
uolk.pplink.club
uopn.cannca.shop
uri.nowurl.fun
urjde.homec.live
uryhf.nowurl.fun
uty.nowurl.fun
uud.fbcode.co
uuds.pplink.club
uuer.fburl.fun
uufijl.cannca.shop
uufin.welco.live
uufjk.nowurl.fun
uugh.pplink.club
uuhds.pplink.club
uuj.cannca.shop
uujk.welco.live
uuklm.welco.live
uund.fbcode.co
uuo.pplink.club
uurifd.fburl.fun
uuyhu.nowurl.fun
uyfy.cannca.shop
uyhjnh.nowurl.fun
vbdh.pplink.club
vbryf.welco.live
vctw.fbcode.co
vdhe.fbcode.co
vgv.fburl.fun
vide.nowurl.fun
viss.fbcode.co
vitality.welco.live
vivi.urlfb.co
vivid.urlfb.co
vjnfm.nowurl.fun
vjnghjg.homec.live
vmk.fburl.fun
vnhd.nowurl.fun
vnhjd.cannca.shop
vnjf.urlfb.co
vnk.fburl.fun
vnmd.fburl.fun
voice.fburl.fun
voice.urlfb.co
voicelan.cannca.shop
vvanh.pplink.club
vyruhn.fburl.fun
wbx.nowurl.fun
wefthg.urlfb.co
weilai.fbcode.co
wejued.welco.live
weqwinh.fburl.fun
wfe.fburl.fun
wg.nowurl.fun
wm.fburl.fun
womende.nowurl.fun
wqer.pplink.club
wrecf.nowurl.fun
wrtfv.pplink.club
wtyfg.cannca.shop
wuyunhj.fburl.fun
wwomk.nowurl.fun
xccbhtrl.fbcode.co
xia.cannca.shop
xian.cannca.shop
xiangce.nowurl.fun
xingchen.fbcode.co
xuezi.welco.live
xxuujn.cannca.shop
yajiaoban.cannca.shop
yanse.fburl.fun
yanying.cannca.shop
yating.nowurl.fun
ydm.fbcode.co
ydn.fbcode.co
yeb.urlfb.co
yedk.nowurl.fun
yexuba.hurb.fun
yfbjs.nowurl.fun
yfeu.fburl.fun
yfgh.cannca.shop
yfhhgl.nowurl.fun
yfj.pplink.club
yfun.fbcode.co
ygbi.fburl.fun
yhgjn.hurb.fun
yhnkji.nowurl.fun
yifu.urlfb.co
ykl.pplink.club
yng.pplink.club
ynh.nowurl.fun
ynk.nowurl.fun
ynnx.nowurl.fun
yongjiu.welco.live
youxiu.fburl.fun
yrbc.nowurl.fun
yruih.fburl.fun
yrujfbj.cannca.shop
ytrb.nowurl.fun
yueijhcjj.fbcode.co
yuen.pplink.club
yufn.welco.live
yujnm.cannca.shop
yumeiren.welco.live
yun.fburl.fun
yun.pplink.club
yur.fburl.fun
yurb.fburl.fun
yury.cannca.shop
yyaogou.nowurl.fun
yybfh.urlfb.co
yydj.urlfb.co
yydn.pplink.club
yye.nowurl.fun
yyfb.nowurl.fun
yyhlop.pplink.club
yyurh.cannca.shop
zhidao.nowurl.fun
zhijin.urlfb.co
zhousi.urlfb.co
zhuanba.cannca.shop
zhuangyu.welco.live
zirun.pplink.club
zombie.urlfb.co
zzujllop.cannca.shop

# Reference: https://twitter.com/ReBensk/status/1597823519152173056
# Reference: https://twitter.com/midnight_comms/status/1598046572100845568

aoci.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1599723433696247808

metakamera.com
api.metakamera.com

# Reference: https://twitter.com/ReBensk/status/1601205157831712768

decepeoplesay.oss-me-east-1.aliyuncs.com
/dece08yjqn.syfm

# Reference: https://twitter.com/ReBensk/status/1602254672022020098

thoroughly.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1602946863912701952
# Reference: https://www.virustotal.com/gui/file/e6efc3c44781a1f2c9e64ddf89cf63504651fa0fba7b386113d0d2651419654b/detection

luha.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1603032573327859713
# Reference: https://www.virustotal.com/gui/file/909a05f9f7ac3c187afac226376ca0e85a64592dcf9d2ba2d5567ce021755732/detection

appear.oss-eu-central-1.aliyuncs.com
sasvn.hurb.fun

# Reference: https://www.virustotal.com/gui/domain/hurb.fun/relations

dps.hurb.fun
fdsfsrtrh.hurb.fun
fsdf.hurb.fun
henkun.hurb.fun
huarui.hurb.fun
jiaozi.hurb.fun
yexuba.hurb.fun
yhgjn.hurb.fun

# Reference: https://twitter.com/ReBensk/status/1604116363911385088

kbnt.oss-eu-central-1.aliyuncs.com
twens.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1605467154362601472

tightly.oss-ap-southeast-1.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1605556332047699969

leixia.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1610618796078960641
# Reference: https://www.virustotal.com/gui/file/fb2700623dc78232bc96220ccacf7777c527c4915aa15af31bda3356547c95c5/detection

cgfsdtdh.shop
log.cgfsdtdh.shop

# Reference: https://www.virustotal.com/gui/file/8346b1cb8accbb9ccf1af3e2a7e7a3b4f68323a13d5636e65dbd2cbe276eb831/detection

gfduytsdf.shop
log.gfduytsdf.shop

# Reference: https://twitter.com/ni_fi_70/status/1610940701054746625
# Reference: https://www.virustotal.com/gui/file/3b4fe1a9366a31b151f546cd933c426f4007cb22d140757685351d5a6cc0e633/detection

sightly.oss-ap-northeast-1.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1612392107850752000
# Reference: https://www.virustotal.com/gui/file/0c432397992f149521df05ff2184c3e32adabbc403e2b46d3ecf4f91d4640081/detection

kobant.com
magically.oss-eu-central-1.aliyuncs.com
tesjkl.oss-eu-central-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/file/eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5/detection

gory.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1614596204482166787

zwcb.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1614907492936609792
# Reference: https://www.virustotal.com/gui/file/9d862dc19c0422a1a8412e742070f700b2470defcfb5b7b30518435d3fe32e5d/detection

kbnt.oss-ap-southeast-1.aliyuncs.com
yyfnewbeterlayut.oss-ap-southeast-7.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1614907547189923842
# Reference: https://www.virustotal.com/gui/file/38b281b6d79aadb55349c55d18a8f61c55e5daabf387f2525340ff9343926b6b/detection

ds45yml.fburl.fun
suspend.oss-ap-south-1.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1615335332232286210
# Reference: https://www.virustotal.com/gui/file/56a4cc0472791e77f0bbe6e5fd6aaf6b52b3642b43389548ef52b109c44182c9/detection

venerate.oss-ap-southeast-7.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1617079861675425792
# Reference: https://www.virustotal.com/gui/file/fd86f5f736922fc0c1bf5b1e110d867e9854b70860fcee4b95bae1d470ae716a/detection

specially.oss-ap-northeast-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1617020418984140807
# Reference: https://www.virustotal.com/gui/file/8c2e3c0c7fd591f1377e9318fbcfbcae85db4875a2f405b99da46edf9b70eefc/detection

202319.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1617820068200747008
# Reference: https://www.virustotal.com/gui/file/ef99fa80f848ceb09a60c63a1d4933a2717d500edea85acc0975577f0180556c/detection
# Reference: https://www.virustotal.com/gui/file/ef99fa80f848ceb09a60c63a1d4933a2717d500edea85acc0975577f0180556c/detection

acidlylink-1301476296.cos.ap-mumbai.myqcloud.com
dewq23fdt.urlfb.co

# Reference: https://twitter.com/ni_fi_70/status/1618195239289913344

adcbk.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1619301912381370370
# Reference: https://www.virustotal.com/gui/file/94d6c2bbfd4493a5c191c971f0555bc385116a81a5786f4c03baea5ed273c6a9/detection

ya23.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1622572920173211648
# Reference:https://www.virustotal.com/gui/file/5d65476281ce15fd07117844a1b25036fe530dd9113d75a0084e6a869beccf0d/detection

gvbkopdf.life
fox.gvbkopdf.life

# Reference: https://twitter.com/muha2xmad/status/1622695789796462608

weco.oss-eu-central-1.aliyunc.com

# Reference: https://twitter.com/ni_fi_70/status/1625028460992143362
# Reference: https://www.virustotal.com/gui/file/216968101a29359e35ed52bc9c432aec3c0e142d02429720627e2a66246c2f25/detection

tiwnconag.store
sup.tiwnconag.store

# Reference: https://twitter.com/sh1shk0va/status/1626543670743691265

cuokghfs.xyz
top.cuokghfs.xyz

# Reference: https://twitter.com/ni_fi_70/status/1628689466142388225
# Reference: https://www.virustotal.com/gui/file/7f02b3b80b02d90be94f4b6d031eb43557df44e4647a03ddf8b81d8dee306b9d/detection

lihi2.cc
enthralled.oss-ap-southeast-5.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1630136745059577856
# Reference: https://www.virustotal.com/gui/file/03b001b5405aa77b9a61e5d28c57d3b10e8649ec039d72d21a40600a56fa00dc/detection

meurl.fun

# Reference: https://twitter.com/ni_fi_70/status/1630453600831827969
# Reference: https://www.virustotal.com/gui/file/d8ecc9e8323d46a152db71079ba9f3a0d2c60d286225ede80a12e2bd8da32529/detection

yjiao.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1630600697119928331
# Reference: https://www.virustotal.com/gui/file/8734e2533ae53516b46667a930e58df201e97ea03562b444fa50c19965cab4b9/detection

opmknbf.com
dop.opmknbf.com

# Reference: https://twitter.com/ni_fi_70/status/1630853012770963456
# Reference: https://www.virustotal.com/gui/ip-address/43.155.93.147/relations
# Reference: https://validin.com/ (# IP: 43.155.93.147 info)
# Reference: https://www.virustotal.com/gui/file/e360a9925871cbcc2a9f705e1ac42118e1145e4e3e144d15effa8507baa634e9/detection
# Reference: https://www.virustotal.com/gui/file/66ddcda438fdff9c4969fb57af01a828831e7b4e8824f31b87a93d82aea461a5/detection

redosll.shop
scdowns.shop
shorlt.shop
shorlturl.shop
slltg.shop
urlfbvf.fun
urlfbvf.live
urlfbvf.online
123.slltg.shop
21314.redosll.shop
2354.slltg.shop
23hi.redosll.shop
34324gd.scdowns.shop
4k.redosll.shop
ak47.urlfbvf.fun
amild.urlfbvf.online
androis.urlfbvf.live
bffa.redosll.shop
bfigjtjk.slltg.shop
bgf567.slltg.shop
bjkfuirejk.shorlturl.shop
bmcnjhu.shorlturl.shop
bnrthbvc.urlfbvf.fun
bogfjrioj.scdowns.shop
bvjyeu.scdowns.shop
byruejf.urlfbvf.online
byuefbjgf.urlfbvf.live
byurehj.shorlt.shop
candy.redosll.shop
cdfwdvg.scdowns.shop
cmcmnj.urlfbvf.fun
cmfjddu.shorlturl.shop
cmxnjkd.shorlturl.shop
cs3fddm.urlfbvf.fun
cvbyurjh.scdowns.shop
cvjkfjdks.urlfbvf.live
cvokdlks.shorlt.shop
cvuiensd.urlfbvf.live
cvvdfueijk.redosll.shop
cvxnmhy.shorlt.shop
cvyuhrjs.urlfbvf.live
cxiuijk.urlfbvf.fun
cxmkdsk.scdowns.shop
cxnjfhiujk.urlfbvf.live
cxvjuers.urlfbvf.online
d23sf.shorlt.shop
d34gfty.urlfbvf.live
d34u71.shorlt.shop
d3fd.shorlt.shop
d5tfl.slltg.shop
da2.redosll.shop
da23fd.urlfbvf.live
da3d.urlfbvf.live
da3fdf.urlfbvf.fun
de324fgd.shorlturl.shop
df12fs.urlfbvf.live
df23rdf.urlfbvf.live
df34gf.scdowns.shop
df3fsd.shorlturl.shop
df3r4fd.shorlt.shop
df45.slltg.shop
df68jlp.shorlt.shop
dffyewugj.urlfbvf.live
dfieomk.urlfbvf.online
dfopekf.slltg.shop
dfs34rg.scdowns.shop
dfs455.redosll.shop
dfs5gg.urlfbvf.fun
dfse21dsf.urlfbvf.fun
dfuejnk.urlfbvf.online
dfw3.shorlt.shop
dfyuewnj.shorlt.shop
djfyue.slltg.shop
ds2.shorlturl.shop
ds23fsd.shorlturl.shop
ds2ds.urlfbvf.online
ds3fdg.redosll.shop
ds3fdg.shorlt.shop
ds45gft5.urlfbvf.fun
dsa6u.shorlturl.shop
dsueiwjf.urlfbvf.online
dufiw.slltg.shop
duiejhds.urlfbvf.fun
dw3gfd.urlfbvf.fun
dweudds.shorlt.shop
dyuyeu.urlfbvf.fun
ekfdree.shorlt.shop
eopcbvhj.urlfbvf.online
erew4g.urlfbvf.fun
etyjdfj.urlfbvf.online
etyueghjj.redosll.shop
euiruiee.urlfbvf.live
euiwejk.scdowns.shop
euyurhj.scdowns.shop
ewuwhfd.urlfbvf.online
eyudhf.shorlturl.shop
eyuhgd.redosll.shop
f23fds34.shorlt.shop
fahuo.shorlt.shop
fd341es.urlfbvf.online
fd34gd.urlfbvf.fun
fd34gdf.shorlturl.shop
fd34gf.redosll.shop
fd3fd.redosll.shop
fd3fhm.shorlt.shop
fd4565h.redosll.shop
fd4tgh.scdowns.shop
fd67y7.slltg.shop
fdeiujfd.redosll.shop
fdf34g.urlfbvf.online
fdiwuij.redosll.shop
fdporek.urlfbvf.fun
fds34gf.urlfbvf.live
fds3yt.scdowns.shop
fds45gf.urlfbvf.online
fds45yut.scdowns.shop
fds5yj.shorlt.shop
fdt56.scdowns.shop
fdth67.slltg.shop
fduiends.urlfbvf.live
fdwe12.urlfbvf.live
fdwe2fd.urlfbvf.fun
fdyeuwd.redosll.shop
fdyuejnj.scdowns.shop
fe2fsd.shorlt.shop
fes45.urlfbvf.live
fes4y56.redosll.shop
fg45u7.slltg.shop
fg56jyl.redosll.shop
fgd45gf.shorlturl.shop
fgew34ht.scdowns.shop
fgiori.redosll.shop
fire.urlfbvf.live
firjkkk.urlfbvf.online
five.slltg.shop
fkfk.shorlt.shop
fodpvjf.scdowns.shop
fpkfiee.scdowns.shop
fpofkoew.scdowns.shop
fs342sdf.shorlturl.shop
fs34a23r.urlfbvf.online
fs34gf.scdowns.shop
fs34gf.urlfbvf.online
fs34gfd.redosll.shop
fs34gfd.urlfbvf.live
fs34gfh.urlfbvf.live
fs34gfp.urlfbvf.live
fs34gtf.urlfbvf.online
fs34hfg.urlfbvf.online
fs34i8.urlfbvf.online
fs3fd.urlfbvf.fun
fs3fgdg.urlfbvf.fun
fs4.urlfbvf.fun
fs43hfh.scdowns.shop
fs6ul.urlfbvf.online
fsd34gf.scdowns.shop
fsd34gfd.scdowns.shop
fsd34hgf.redosll.shop
fsd3gd.urlfbvf.online
fsd45f.redosll.shop
fsd45hf.urlfbvf.live
fsd45jygj.urlfbvf.online
fsd4hf.urlfbvf.live
fsd5h.scdowns.shop
fse34gf.urlfbvf.fun
fse4gf.redosll.shop
fse4hg.scdowns.shop
fserth.shorlturl.shop
fstreth.urlfbvf.online
fugirufjkd.redosll.shop
fuuejee.redosll.shop
fvuijek.urlfbvf.live
fvygruhfj.urlfbvf.online
fvyurhj.scdowns.shop
fyeuhjd.scdowns.shop
g7642gh.urlfbvf.fun
gd3sdg.urlfbvf.fun
gd4dgd.shorlturl.shop
gd4gf.scdowns.shop
gd56uj.shorlturl.shop
gdf34gdf.shorlturl.shop
gdf45hfg.shorlturl.shop
gdf45y.redosll.shop
gdf56.slltg.shop
gdr34d.urlfbvf.live
gdr5hg.urlfbvf.fun
gdr6kjk.urlfbvf.fun
gdrkloyu.shorlt.shop
gdrtu676.urlfbvf.live
gf45twht.redosll.shop
gf54.slltg.shop
gf56jkhuo.slltg.shop
gfd4tyt.redosll.shop
gfd6j.shorlturl.shop
gfh5tdg.urlfbvf.fun
gfporid.urlfbvf.fun
ghf6.slltg.shop
ghii.scdowns.shop
glitter.urlfbvf.online
grd5jgy.shorlturl.shop
gruehj.urlfbvf.fun
gt6.shorlt.shop
gtf89l.shorlt.shop
gtyi.shorlturl.shop
gurujjj.redosll.shop
gyeuhjk.urlfbvf.live
gyyiygt.scdowns.shop
hfeuhjk.redosll.shop
hft76.urlfbvf.online
hfye34gf.redosll.shop
hg667.slltg.shop
hgygu7.shorlt.shop
hhhjdujkla.urlfbvf.online
idioisun.urlfbvf.online
iioruwjjw.urlfbvf.live
iirueknm.urlfbvf.live
io78t.urlfbvf.online
jdkasuie.urlfbvf.online
jhdfuhjk.shorlt.shop
jnbgjkfk.urlfbvf.online
jok78.shorlturl.shop
jy76.slltg.shop
kiolp.shorlturl.shop
ksidg.scdowns.shop
kuyvcg.urlfbvf.online
lfid3.slltg.shop
mckjfkd.scdowns.shop
mel.redosll.shop
morn.redosll.shop
ms.redosll.shop
mxjue.urlfbvf.fun
new.slltg.shop
newsd.scdowns.shop
nl.slltg.shop
odfieofj.shorlt.shop
odnue.slltg.shop
oedfijdf.redosll.shop
oepdifsd.slltg.shop
oerif.shorlt.shop
oeriuyrh.slltg.shop
oeuifkd.shorlturl.shop
ofdvjkj.shorlturl.shop
oghpobcj.scdowns.shop
ogreuijdk.slltg.shop
osoppie.urlfbvf.live
ouytu56.slltg.shop
oweidkj.urlfbvf.fun
pdjuewiks.urlfbvf.fun
pefikds.scdowns.shop
pgijkdjks.shorlt.shop
pi95g.urlfbvf.online
pqioenj.slltg.shop
psdiokckds.urlfbvf.online
psdkd.shorlt.shop
pweoief.redosll.shop
qbu.urlfbvf.online
qeyfjd.shorlturl.shop
qfynbjd.shorlt.shop
qtyhcje.urlfbvf.live
quhnfvg.scdowns.shop
qyuewyjf.redosll.shop
rew5y.urlfbvf.live
ruiutunfjs.shorlt.shop
sd34g.shorlt.shop
sd3rsfs.urlfbvf.live
sdfye.shorlturl.shop
sdurei.redosll.shop
sdyuews.scdowns.shop
se23fd.scdowns.shop
sfr34gf.shorlturl.shop
shfydhj.shorlturl.shop
surf.scdowns.shop
syeufbhjfd.shorlturl.shop
trttt.urlfbvf.online
tyfdvrf.shorlturl.shop
ueoidsck.urlfbvf.online
uerfjnufd.shorlturl.shop
uewiuj.slltg.shop
uodmk.urlfbvf.fun
urefjk.slltg.shop
ureiuss.slltg.shop
urjkfgjk.urlfbvf.live
ush.shorlt.shop
v8378fwgl6j3ys0yf0l.urlfbvf.online
vbofdmk.redosll.shop
vbuirenk.urlfbvf.live
vcbhfgy.urlfbvf.fun
vcd23fd.shorlturl.shop
vcidojkd.shorlt.shop
vcjdmk.shorlt.shop
vcjhfuirek.scdowns.shop
vcklsjie.urlfbvf.fun
vcnbuu.shorlturl.shop
vcnhsedy.urlfbvf.online
vcnmhd.scdowns.shop
vcnsdjhue.urlfbvf.live
vcoioj.shorlturl.shop
vcpisdk.urlfbvf.live
vcuiejfks.shorlturl.shop
vcujhkd.shorlturl.shop
vcxhjdue.shorlturl.shop
vcyeurhjd.urlfbvf.online
vdsfefd.shorlt.shop
vfgvfrt.slltg.shop
vidjhekj.scdowns.shop
viudjkks.shorlt.shop
vmbjfure.urlfbvf.online
vnbnjgur.urlfbvf.online
vucijke.urlfbvf.online
vyiurehjk.redosll.shop
vyuehfjd.urlfbvf.online
w23f.shorlt.shop
w3rdr.urlfbvf.online
wall.scdowns.shop
we.scdowns.shop
weoikfds.urlfbvf.fun
wetyqhjd.urlfbvf.live
wpodk.urlfbvf.fun
wyeudj.shorlturl.shop
xcuvijks.urlfbvf.online
xiscjjdue.shorlt.shop
yeufhfvnj.redosll.shop
yeuhngj.redosll.shop
yeuhnjfd.urlfbvf.live
yeunjfd.redosll.shop
yfdjfjds.slltg.shop
ygbngfr.urlfbvf.live
yguerbn.slltg.shop
yguren.slltg.shop
yrehfjd.redosll.shop
yreuhjd.urlfbvf.live
yruhjd.slltg.shop
yuk.scdowns.shop
ewr1.vultrobjects.com

# Reference: https://twitter.com/ni_fi_70/status/1631229735991689218
# Reference: https://www.virustotal.com/gui/file/434f4838798080453de44526d5dcad16fef0019eddbe56f1a498390d0adad41f/detection

pitch.oss-eu-west-1.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1632734010177724419
# Reference: https://www.virustotal.com/gui/file/8473d7885b0909152e3c21c4a1cc4209c8e2dd2e66bccc7c7b2ddb59502c4fed/detection

lihi3.cc
singgproletupdate.oss-ap-southeast-1.aliyuncs.com

# Reference: https://twitter.com/ni_fi_70/status/1633375152888004608
# Reference: https://www.virustotal.com/gui/file/630432f4c7af644638ec7f4916394f08032e33368134dde88eda449557dadd07/detection

maybethreislvd.oss-ap-northeast-2.aliyuncs.com

# Reference: https://twitter.com/sh1shk0va/status/1635897600917352448
# Reference: https://www.virustotal.com/gui/file/114503f4ad18832eea40c24f4a4208f029192d4495db278bae5fe198521b2e1e/detection

kuaigdfux.com
fly.kuaigdfux.com

# Reference: https://twitter.com/ReBensk/status/1640666662302253056
# Reference: https://www.virustotal.com/gui/ip-address/47.251.36.185/relations
# Reference: https://www.virustotal.com/gui/file/505dc9df3b766ba4a5ec5339f62222f639aa75a5041049d89ec66710693174dd/detection
# Reference: https://www.virustotal.com/gui/file/961975500ccb4de12ba14b7681e5140487c15b13b33274d86ca4b7f6839a20f3/detection

jumphe.site
k2url.top
oturl.top
shortur.site
urlbet.site
urllink.site

# Reference: https://www.virustotal.com/gui/file/fca39d246e98afe37472170d87168b91fb1cec1ba7c5dba17ac5ce46e95c0fd3/detection

sunucvdg.com
niu.sunucvdg.com

# Reference: https://twitter.com/ReBensk/status/1642388166911852544
# Reference: https://twitter.com/ReBensk/status/1642414534605373442
# Reference: https://www.virustotal.com/gui/ip-address/47.88.33.239/relations
# Reference: https://www.virustotal.com/gui/file/530290f681d5f6380aed6fe8731861e26062ca041fd9a55645e38b6a7e759a80/detection
# Reference: https://www.virustotal.com/gui/file/700b641373e8b31ac975d560c45860e23d695aff0dc9c8e2e81b343798e323fc/detection
# Reference: https://www.virustotal.com/gui/file/530290f681d5f6380aed6fe8731861e26062ca041fd9a55645e38b6a7e759a80/detection
# Reference: https://www.virustotal.com/gui/file/30e8d8a7742345a913ddb4ee6741e44624fed905b8f9aba941550074f5fa334e/detection

fastlk.site
kulsi.site
qblink.site
qburl.site
ukurl.site
urlnb.site
usurl.site

# Reference: https://twitter.com/ReBensk/status/1642847705927139328
# Reference: https://www.virustotal.com/gui/ip-address/8.211.56.129/relations
# Reference: https://www.virustotal.com/gui/file/a8014973570c6b2b4383eb3a41d5624265ea1fde76596e5146d084288919d04e/detection

jumpit.shop
linkus.shop
pllink.fun
urlms.site
urlns.site
urlok.site

# Reference: https://twitter.com/josh_penny/status/1643021976024367108

balink.site
jumpme.site
juurl.store
linkaf.shop
linkssr.fun
qklink.co
shortlk.site
urlkame.online

# Reference: https://twitter.com/ni_fi_70/status/1643512983258005504
# Reference: https://www.virustotal.com/gui/ip-address/47.245.179.63/relations

linkhp.site
urlbe.site
urlno.site

# Reference: https://www.virustotal.com/gui/file/2b344d13d20cd3e0a84079fa5bd618bdc2c207b8caa4516ffbb71581f49491f1/detection

toponsu.com
uhh.toponsu.com

# Reference: https://www.virustotal.com/gui/file/cf5c0e628064187025b2e775f51569da4416efbfe0b4335614f902b3ee6e638b/detection

dkuiobb.com
suu.dkuiobb.com

# Reference: https://www.virustotal.com/gui/file/01a4f41b9537d8dbc429c2f6ccb73609cf09ae488c45cf06ce9fa763af271017/detection

plucky.oss-eu-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1644617216560705537
# Reference: https://www.virustotal.com/gui/ip-address/8.219.149.155/relations

wscp.shop
yesdo.shop

# Reference: https://twitter.com/ReBensk/status/1645677270458310657
# Reference: https://www.virustotal.com/gui/ip-address/47.74.65.90/relations
# Reference: https://www.virustotal.com/gui/file/f645f0e8c3c679244a7ca86460307eed1a681f5b1d0ba802e841a74ba36fd7f6/detection

fbmark.shop
ushe.life
vfka.shop

# Reference: https://twitter.com/ReBensk/status/1645686986991345664
# Reference: https://www.virustotal.com/gui/ip-address/3.76.148.229/relations

dourl.fun
dourl.site
jumpke.fun
jumpke.site

# Reference: https://twitter.com/ReBensk/status/1645707961787101184

mystical.oss-ap-southeast-6.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1645738027057291267
# Reference: https://www.virustotal.com/gui/ip-address/47.254.252.106/relations

mejump.site
meurl.shop
tolinks.site
urljum.site

# Reference: https://twitter.com/ReBensk/status/1647625898013646855

dirigible.oss-me-east-1.aliyuncs.com
skyfull.oss-ap-northeast-2.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1647652895683125248
# Reference: https://www.virustotal.com/gui/ip-address/8.222.216.193/relations

firelk.shop
rolado.shop

# Reference: https://twitter.com/ni_fi_70/status/1648942834794352642
# Reference: https://www.virustotal.com/gui/ip-address/47.74.70.114/relations
# Reference: https://www.virustotal.com/gui/file/5a6ced2b3c2190370ca1920224eb5cd7b5a685d7d023e3cba43e0f5d0cc5773a/detection

firega.shop
linkmt.club
softgb.shop
urlgi.fun

# Reference: https://twitter.com/sh1shk0va/status/1651479498448314368

kungdf.com
log.kungdf.com

# Reference: https://www.virustotal.com/gui/ip-address/8.222.230.21/relations
# Reference: https://www.virustotal.com/gui/file/74b3c7810b95ce1158792260de3ca0e8114535c42dbd10fdd78d7e1d6e7caf86/detection

cafrem.fun

# Reference: https://twitter.com/ReBensk/status/1652581346252931072

410-ahsabd.oss-us-east-1.aliyuncs.com
zr-swger.oss-eu-central-1.aliyuncs.com
daves.page.link

# Reference: https://twitter.com/ReBensk/status/1653422859312676864
# Reference: https://www.virustotal.com/gui/ip-address/8.222.204.85/relations
# Reference: https://www.virustotal.com/gui/file/2acb58b2f28b043a5ab340447cd9250393a54ddd7f400890f54a4dab153a6584/detection
# Reference: https://www.virustotal.com/gui/file/b6dd02f6e981dc7775414bc1907433dae1caa9070ff51e67385b75f9c3f092d0/detection

bnmeala.fun

# Reference: https://twitter.com/ReBensk/status/1653729219493638144
# Reference: https://www.virustotal.com/gui/file/acddaf54a4fd70c1997a9970bdc84590072de9f4125319bd427445aa43001fcd/detection

4re.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1653759266870947841
# Reference: https://twitter.com/Maluig1Team/status/1653770658327961600

eoks.ai

# Reference: https://twitter.com/ReBensk/status/1653758211995111427
# Reference: https://twitter.com/Maluig1Team/status/1653770551931064321
# Reference: https://www.virustotal.com/gui/ip-address/8.219.201.51/relations

ringax.shop

# Reference: https://www.virustotal.com/gui/file/4e93584033433e80f9f725c7c1b5aec0d1d16d7788a9f1bd4db5025df88fe077/detection

qiklay.top

# Reference: https://twitter.com/ReBensk/status/1654763945238904834
# Reference: https://twitter.com/Maluig1Team/status/1654899167066718208
# Reference: https://www.virustotal.com/gui/file/cf4498391afb3a90c614b418675f2382e252f979ebb1627463f9d1958085ddaf/detection

2iz.cn

# Reference: https://twitter.com/ReBensk/status/1654767579766849536
# Reference: https://twitter.com/Maluig1Team/status/1654899220913205249
# Reference: https://www.virustotal.com/gui/ip-address/8.222.184.93/relations
# Reference: https://www.virustotal.com/gui/file/30846d77a76ab6f27de1a3335081f63c51501973a7e0fa68179174c8c4dc3711/detection

xjrjsee.live

# Reference: https://www.virustotal.com/gui/ip-address/47.236.28.202/relations
# Reference: https://www.virustotal.com/gui/file/ec97f3ede81c7f8ac0127198985b25027765ff81ae9dede543d8931f0787d1ce/detection

adjer.wang

# Reference: https://twitter.com/ReBensk/status/1659123665072709632
# Reference: https://www.virustotal.com/gui/ip-address/8.219.180.197/relations
# Reference: https://www.virustotal.com/gui/file/bad13604e49870880452134b0e48595add31db070fc95745ace7b1bb228daf1a/detection

gwqijg.fun

# Reference: https://twitter.com/ReBensk/status/1659841808917053441
# Reference: https://www.virustotal.com/gui/file/47c8aee1d37b794ea61e9b9e73ebb31c1b59994b3d3410f8dc10cfcf692f4e62/detection

attentively.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1660201028631896064
# Reference: https://www.virustotal.com/gui/ip-address/8.219.182.57/relations

plvfk.shop

# Reference: https://twitter.com/ReBensk/status/1660207333606039553
# Reference: https://www.virustotal.com/gui/ip-address/8.222.162.47/relations

asunamiya.shop

# Reference: https://twitter.com/ReBensk/status/1660315641432121344
# Reference: https://www.virustotal.com/gui/ip-address/47.236.22.62/relations
# Reference: https://www.virustotal.com/gui/file/1cdf0ea00ae849d948022485ee15cfeee77f8447de058d3cfce7d0310e05df8d/detection

ssesayba.icu

# Reference: https://twitter.com/sh1shk0va/status/1665297196277723137
# Reference: https://www.virustotal.com/gui/file/de9e93ce1905d91f3a1deab15f09e142a9449670ef102df646dbd50051898f80/detection

oubfgday.com
stt.oubfgday.com

# Reference: https://twitter.com/ReBensk/status/1672265318981423106
# Reference: https://www.virustotal.com/gui/file/66d5574800f7ac4fc0ea119e038bc88009a96e1750a639c67ab09d43df272e38/detection

6bfuifg8pdskuqu2.win
liuyue-0601.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1672504984582213633
# Reference: https://www.virustotal.com/gui/file/c7f8f3e63ddc7bd857b65616755ec6c55a47fcb19dbe49a3c9b35aead6d3871c/detection

rabittaa.world
multitude.oss-ap-northeast-2.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1675166170461208580
# Reference: https://www.virustotal.com/gui/ip-address/8.219.206.233/relations
# Reference: https://www.virustotal.com/gui/file/a4cffbe884fdf64d62dc43f8d8503c991394214696137cbfcc71eb1014000c1c/detection

ysndl.cloud
impedimenta.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1680096802282913792
# Reference: https://www.virustotal.com/gui/ip-address/8.222.191.173/relations
# Reference: https://www.virustotal.com/gui/file/5b6485fa919a4fae82b958d4d93df555d75324ff6a260821acb70541669857eb/detection
# Reference: https://www.virustotal.com/gui/file/161ea4ffc7264d1cc0c37d9437d329713da077d0ba0e77e094b45156b069b8ea/detection

lanalfu.wiki
uwhjac.fun

# Reference: https://www.virustotal.com/gui/file/0c4851cfc2fde74bac1f9cf52f77284439e528436c5e2d601754dc4ce1a13bf8/detection

co99.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1681538166787035137

septum.oss-ap-southeast-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1681708091144798227

thatto.oss-ap-southeast-2.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1684438363829596160
# Reference: https://twitter.com/ni_fi_70/status/1684446036444553216
# Reference: https://www.virustotal.com/gui/ip-address/8.219.148.111/relations
# Reference: https://www.virustotal.com/gui/file/a43ff1a112d23e5df221a976d0e8c532cff080fa3579286eabca760394746e67/detection

metyy.fun
miefoo.oss-eu-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1689911651687153664
# Reference: https://tria.ge/230811-kepwmsdg3s/behavioral1

y77.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1690621940862455808
# Reference: https://www.virustotal.com/gui/ip-address/8.222.130.117/relations
# Reference: https://www.virustotal.com/gui/file/6dd8ef7779d0c814cced732476bb249b561ebc3abb39f747a1104a4cfe58036f/detection

minlas.top

# Reference: https://twitter.com/ReBensk/status/1696412101756194954
# Reference: https://www.virustotal.com/gui/file/a6041e124a9f3e09a793df428d401172210b4136cdd17fb8877ae32bf999676d/detection
# Reference: https://www.virustotal.com/gui/file/2d16931094208fcb44c60ba1b857dcb4f8bbd8e2781999c04356edc893693ef0/detection

xk68.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1698232482384994399

coo3.oss-eu-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1698746947308286443
# Reference: https://www.virustotal.com/gui/file/0d369c79c94920f0e003eb63f75ff1426df501e446c9fd94ca09b69cfc2c1705/detection

lj-98d3h000-13.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1698946351466483799
# Reference: https://www.virustotal.com/gui/ip-address/8.219.249.235/relations
# Reference: https://www.virustotal.com/gui/file/944ffa673019bc3a4cf257f8ed23c08a3ab05048dcc8dc20e6cf2b0577271c50/detection

fuion.co

# Reference: https://twitter.com/ReBensk/status/1698955816144105771
# Reference: https://www.virustotal.com/gui/file/1d19999cbbfde8ff9935ffd0a8ff303268953d167918f370e2822e7ccf21b7d4/detection

snuggle.oss-eu-central-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1704378347911025011
# Reference: https://www.virustotal.com/gui/file/06af8fe0823ccbd8d89039b63539f6868ea663c1a4bcc7f9b63158e08ff05bac/detection
# Reference: https://www.virustotal.com/gui/file/c05674431a9469af943b0b6401f1aae9226b32e6a25a6e0040e3d0d07d596326/detection

biquaurall.site
calculatorope.online
viplive.win
neons.biquaurall.site
nicephoto.biquaurall.site
rust.calculatorope.online

# Reference: https://twitter.com/ReBensk/status/1716676493651182046

jwhua.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1717066772040610280

weco2.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1719608026762764317

bsmt.oss-ap-southeast-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1719697097308676162

23vb.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1722589841873944752

lucky66.oss-us-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1722904496659915162
# Reference: https://www.virustotal.com/gui/file/0e4ed67c98d03ba2e23a487348a60d4afc6dbc7802eb07f0b8a0f54f6cab3f1d/detection

ebysto.oss-me-east-1.aliyuncs.com
fgnj.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1723029498843504711
# Reference: https://www.virustotal.com/gui/file/dc2fb2c741e5ce0f59864e5ffe75a7b2949cd278e78b50004ab60d61f30f939c/detection

mxbzl.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1723304308530409599
# Reference: https://www.virustotal.com/gui/file/c6f6c979b6d5585d5899670e2e9ffb060edc3fecad810e96c27e97131eca20e9/detection

nov5.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1723608416407724345
# Reference: https://www.virustotal.com/gui/file/b34749c3a055e02728dbe58146635e234ce717b6d204dbec691d61df8b6e5e37/detection

osmosis.oss-me-east-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/ip-address/47.91.99.21/relations

bg-1214-1.mygoodidea.xyz
bg-1214-2.mygoodidea.xyz
bg-1215-2.mygoodidea.xyz
z-1130-1.mygoodidea.xyz
z-1130-2.mygoodidea.xyz
z-1214-2.mygoodidea.xyz

# Reference: https://twitter.com/ReBensk/status/1723970867875741746
# Reference: https://www.virustotal.com/gui/file/20b3ae2c636fc19915fb56b823114629fe1907ae7c8df38fa810d5f576b22b81/detection

margar.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1724701276448174390
# Reference: https://www.virustotal.com/gui/file/d1c82eadb3be420b2410c4a1b91171c38e2059250d36df2e596b715500dc480f/detection

231z.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1726636183311225083
# Reference: https://www.virustotal.com/gui/file/ae75b33285f2858c173fad59150611963fbbb808300dfec43f3413bc337b95c2/detection

native66.oss-us-west-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1737781243906072739
# Reference: https://www.virustotal.com/gui/file/14117704faccd75698062403b1160da8de56c627998cd882261340ca9182330b/detection

amidst.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1754166413365821792
# Reference: https://www.virustotal.com/gui/file/7ec3b3c3a602497b531322660a1446da420ae24dc5ba2aa1d3927ce51d20da59/detection

noontide.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1754738026482401552
# Reference: https://www.virustotal.com/gui/file/a665f78d3ade2d1dd80fd94826c77428d69a626e8ddd49b24f4ed793721439ce/detection

1ovvi31lz9.execute-api.us-east-2.amazonaws.com

# Reference: https://twitter.com/ReBensk/status/1754749676014960945
# Reference: https://twitter.com/ni_fi_70/status/1754804234791326065
# Reference: https://www.virustotal.com/gui/ip-address/8.219.117.212/relations
# Reference: https://www.virustotal.com/gui/file/2a003ae37fe91adc7b5f15b6162e71d9dcca1474a2e8b91f758dce3106f5fc1e/detection

calator.fun

# Reference: https://twitter.com/ReBensk/status/1756734825250115778
# Reference: https://www.virustotal.com/gui/ip-address/8.219.117.112/relations
# Reference: https://www.joesandbox.com/analysis/1390432#iocs

amale.site

# Reference: https://twitter.com/ReBensk/status/1756732501760856300
# Reference: https://www.virustotal.com/gui/ip-address/8.219.171.236/relations
# Reference: https://www.joesandbox.com/analysis/1390433#iocs
# Reference: https://www.virustotal.com/gui/file/c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6/detection

piiccre.ink

# Reference: https://twitter.com/ReBensk/status/1759239929303900386
# Reference: https://www.virustotal.com/gui/ip-address/8.219.196.81/relations
# Reference: https://www.virustotal.com/gui/file/e257e558a5451f46a6bce153481bacd6b7132904400a219063f12830b80f17ed/detection

gneon.ink
ketare.work

# Reference: https://twitter.com/ReBensk/status/1760979142504509721
# Reference: https://www.virustotal.com/gui/ip-address/47.245.95.152/relations
# Reference: https://tria.ge/240223-mzjlgafa3z/behavioral2
# Reference: https://www.virustotal.com/gui/file/e7d71efb5a0ed704378966e835efb1de6208a4e48f77b79aadcd69f93680c182/detection

nblcc.co
gttk.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1763152356320088561
# Reference: https://www.virustotal.com/gui/ip-address/8.219.144.101/relations
# Reference: https://www.virustotal.com/gui/file/5cdef8b7ef4ec1bd10445d688b951cf401d3119814b2207ed43481df8a5f5924/detection

engedu.shop
golpo.ink
tiply.work

# Reference: https://twitter.com/ReBensk/status/1768201690627604524
# Reference: https://www.virustotal.com/gui/ip-address/47.236.161.23/relations
# Reference: https://www.virustotal.com/gui/file/bb851dd505415c3b6609a35977124315914e5176effc756ad81656b664788ad0/detection

voshu.art

# Reference: https://twitter.com/ReBensk/status/1768888788074262635
# Reference: https://www.virustotal.com/gui/ip-address/47.236.171.10/relations
# Reference: https://www.virustotal.com/gui/file/f3c76e9165d02a2ea612f3dfc335bacf137c1ee83093e369008158787d66b562/detection

huot.ltd

# Reference: https://twitter.com/ReBensk/status/1769339425295601770
# Reference: https://www.virustotal.com/gui/ip-address/101.36.127.55/relations
# Reference: https://www.virustotal.com/gui/ip-address/118.26.38.239/relations
# Reference: https://www.virustotal.com/gui/ip-address/161.117.190.116/relations
# Reference: https://www.virustotal.com/gui/ip-address/27.0.232.41/relations
# Reference: https://www.virustotal.com/gui/ip-address/47.236.22.65/relations
# Reference: https://www.virustotal.com/gui/ip-address/47.236.25.60/relations
# Reference: https://www.virustotal.com/gui/ip-address/47.236.30.81/relations
# Reference: https://www.virustotal.com/gui/ip-address/8.219.48.152/relations
# Reference: https://www.virustotal.com/gui/ip-address/8.222.182.205/relations
# Reference: https://www.virustotal.com/gui/ip-address/8.222.183.14/relations
# Reference: https://www.virustotal.com/gui/file/0e42a496d532c63cc4f2dae6af678e01f67723b6664b5deddc13393a12694be0/detection
# Reference: https://www.virustotal.com/gui/file/318b39070cf369459534fdd982597f440e4de9aceba5740bf0f2f83e0fc773a6/detection
# Reference: https://www.virustotal.com/gui/file/3d72c350b9224b295c6e3eb3ac6496dab786514f02ce31fbf69b19b1a17c8dd0/detection
# Reference: https://www.virustotal.com/gui/file/4fb7083954209e5024eb809d4fe8cd60e731959605087ed949b1d1ec05c2d32e/detection
# Reference: https://www.virustotal.com/gui/file/fdf5c9637e303eda0efccad38a408e02818ee339674583f59d55cdde74ce5c12/detection
# Reference: https://www.virustotal.com/gui/file/bfe9ba804acb29e7183563a1a709a68c3a9b30f6786308770ab0de60ff6d12ca/detection

4url.vip
4url312.vip
6lpc.online
aane.xyz
azmmhh.tech
beuces.cool
cdrawhi.art
cpritn.city
cyskop.shop
desesn.asia
dre4.vip
eyedr.art
fboadbns.shop
hygxq.xyz
lmmqgd.website
lpcwww.fun
lxszgs.icu
melyre.tech
modpk.asia
nowurl.me
ogcegd.fun
pabox.cc
paolio.shop
paseofyou.xyz
rknloco.tech
sotepo.info
soudes.icu
tkteew.tech
us17.xyz
utlyter.cloud
viopde.fun
vstoea.wiki
wall4k.site

# Reference: https://twitter.com/ReBensk/status/1771758153949905140
# Reference: https://www.virustotal.com/gui/ip-address/8.222.234.141/relations
# Reference: https://www.virustotal.com/gui/file/06908123aef50606a47146b1abe41c5eab8cb5cac9e157bd52fff1f5d1a16d23/detection

thpataa.chat
grasping.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1771862888904380668
# Reference: https://www.virustotal.com/gui/ip-address/8.222.131.205/relations
# Reference: https://www.virustotal.com/gui/file/c9253184b706cb99cbcf84a6916b5a2b82d75aaf153cf1561caa2ab030eb04be/detection

flonea.live

# Reference: https://www.virustotal.com/gui/ip-address/152.32.225.33/relations
# Reference: https://www.virustotal.com/gui/ip-address/47.236.21.41/relations

lindabe.shop
tedkc.online

# Reference: https://www.virustotal.com/gui/ip-address/8.222.232.152/relations

morino.top
shohag.ltd

# Reference: https://www.virustotal.com/gui/ip-address/47.236.199.141/relations

gaanaa.ink

# Reference: https://www.virustotal.com/gui/ip-address/47.236.193.50/relations
# Reference: https://www.virustotal.com/gui/file/bd64c2afd4555117c280c638d8c5cf121cfbcc3949b7a544787ec7c1662b268f/detection

zumbla.cool

# Reference: https://www.virustotal.com/gui/ip-address/47.236.187.139/relations

tictoe.wiki

# Reference: https://www.virustotal.com/gui/ip-address/47.236.175.248/relations
# Reference: https://www.virustotal.com/gui/file/e1616487ef346801a31c6691cc1ce9361082ffee74da3c71c801ebf928c92cdc/detection

dasrji.ink

# Reference: https://www.virustotal.com/gui/ip-address/8.219.188.86/relations

apprafo.info
mereyc.cool
methi.fit

# Reference: https://www.virustotal.com/gui/ip-address/8.219.179.103/relations

dlgaaroya.cloud
yednan.art

# Reference: https://www.virustotal.com/gui/ip-address/47.236.175.118/relations
# Reference: https://www.virustotal.com/gui/file/25f051a9b5f5ed78326c9c3973a14216b6cf5ce57b20b1b0ef43f3c7344b2f71/detection

flipy.fun

# Reference: https://www.virustotal.com/gui/ip-address/47.236.175.41/relations
# Reference: https://www.virustotal.com/gui/file/0b7d4e6aebcdc35a28c51562c45de4776a468343f6a720e91e325bf7886b2d25/detection

taimur.chat

# Reference: https://www.virustotal.com/gui/ip-address/47.236.162.217/relations

oiptapsn.club

# Reference: https://www.virustotal.com/gui/ip-address/47.236.161.189/relations

gytkf.top

# Reference: https://www.virustotal.com/gui/ip-address/47.236.156.197/relations

hnbg.fit

# Reference: https://www.virustotal.com/gui/ip-address/47.236.148.196/relations

eodabr.space

# Reference: https://www.virustotal.com/gui/ip-address/47.236.147.199/relations
# Reference: https://www.virustotal.com/gui/file/e23a5b99cb212c28b0a4e1846ae6fff9fb49bb10d37464b8564caa7312656aa6/detection

licspe.space

# Reference: https://www.virustotal.com/gui/ip-address/8.222.237.66/relations
# Reference: https://www.virustotal.com/gui/file/b22415985b6831d10b9c2c6531db575f76fbafd55e94bec2f4cb7844037eabd1/detection

acade.guru

# Reference: https://www.virustotal.com/gui/ip-address/8.222.187.163/relations

sepre.wiki

# Reference: https://www.virustotal.com/gui/ip-address/8.219.251.19/relations

dstudi.live

# Reference: https://www.virustotal.com/gui/ip-address/8.219.218.16/relations

uaumri.art

# Reference: https://www.virustotal.com/gui/ip-address/8.219.173.139/relations

arkhsp.tech

# Reference: https://www.virustotal.com/gui/ip-address/8.219.135.208/relations
# Reference: https://www.virustotal.com/gui/file/a613bbc178f048b9e04745121b48abb439c9003e46ca9293e4afd5f7ba7834a2/detection
# Reference: https://www.virustotal.com/gui/file/abbe15b36b348af78c8c1de8fa2f1e42d933e260fa490ac20c32ff613fa501c2/detection

zxlar.info

# Reference: https://www.virustotal.com/gui/ip-address/47.245.90.200/relations
# Reference: https://www.virustotal.com/gui/file/1eb71e31171cfe9cc25593e795dc1ec38bbb8393d6de94735bd5ace423ea1b58/detection
# Reference: https://www.virustotal.com/gui/file/86a7648565f19dfca8acc0fa039b86c494ee19aaf94f8773f8758fb3465c1fde/detection

meiel.fit

# Reference: https://www.virustotal.com/gui/ip-address/47.245.103.5/relations
# Reference: https://www.virustotal.com/gui/file/6a40ad7930e34a9df9ebf12b1b4b8be0a36ede12ca277d6f9a74fe398167d467/detection

chil.ltd
gtuing.cool

# Reference: https://www.virustotal.com/gui/ip-address/47.245.86.170/relations

chseedia.cc
ladem.art
taeehs.fit

# Reference: https://www.virustotal.com/gui/ip-address/47.236.174.175/relations
# Reference: https://www.virustotal.com/gui/file/593a8f0fa5db0f12eab8169aa7f05fd91bd525bc040028972a5c85dff8200b52/detection

nirob.kim

# Reference: https://www.virustotal.com/gui/ip-address/47.236.170.22/relations
# Reference: https://www.virustotal.com/gui/file/1176d9ab297ec9c8f270dd7b890a02feeb22060291fea3d8ebf98fbfbc8817c5/detection

charie.life

# Reference: https://www.virustotal.com/gui/ip-address/47.236.166.67/relations
# Reference: https://www.virustotal.com/gui/file/189fab6babab9ff7e70f50dadc380309a11e2122f0f7c47e22d96c7325613124/detection

seinar.ink

# Reference: https://www.virustotal.com/gui/ip-address/47.236.160.152/relations

havep.fun

# Reference: https://www.virustotal.com/gui/ip-address/47.236.151.70/relations

chillr.fun

# Reference: https://www.virustotal.com/gui/ip-address/47.236.95.42/relations

chmbate.group

# Reference: https://www.virustotal.com/gui/ip-address/47.236.13.131/relations

perad.life

# Reference: https://www.virustotal.com/gui/ip-address/8.222.166.33/relations

adongoss.top
marbon.work

# Reference: https://www.virustotal.com/gui/ip-address/8.219.143.156/relations
# Reference: https://www.virustotal.com/gui/file/c9042b8b3949279124da9fa82a4b5ce9f8599ea6d73141752fb863d7f5dcb4eb/detection
# Reference: https://www.virustotal.com/gui/file/bcea03a38aa8c165ae0f8edec81e43def448dc7f2464d0258e9f9dcdc8b4e253/detection
# Reference: https://www.virustotal.com/gui/file/7b7955ee451220c3dd25f03df9afa1d8a91f0007c743a2dca4d75873da258125/detection
# Reference: https://www.virustotal.com/gui/file/71c0f5625b77688b3b2904dd0d1761f61bb9ca830e5d76a3b16f2611d26d5424/detection

ampde.club
godson.fun

# Reference: https://www.virustotal.com/gui/ip-address/47.236.166.214/relations
# Reference: https://www.virustotal.com/gui/file/62b8b54435136ce4296b4f57bbb38ae8e3c7debd210c215470e5060cd58e4754/detection
# Reference: https://www.virustotal.com/gui/file/a94fb815722bd30de293067d520cda667a2f338e6a08d094860134116dc29802/detection

ahzaz.xyz

# Reference: https://www.virustotal.com/gui/ip-address/8.222.213.204/relations

tqoz.site

# Reference: https://www.virustotal.com/gui/ip-address/8.219.104.11/relations

chias.tech

# Reference: https://www.virustotal.com/gui/ip-address/8.219.91.32/relations
# Reference: https://www.virustotal.com/gui/file/a5be0fbfcf88066576c96b91487ae3d741902d438bbed1526f01be22fb21fea8/detection

slaingpk.love

# Reference: https://www.virustotal.com/gui/ip-address/47.245.96.204/relations
# Reference: https://www.virustotal.com/gui/file/55c2f339eb10a1d06a4e8372d67d4301adff04fd08ad568dbaf4b98d69dcd1a1/detection
# Reference: https://www.virustotal.com/gui/file/f633417bd750dd30a77b13494ba9e34969bafbce2316119d1dd79651e6e4867e/detection

amdgp.fun
nasreen.games

# Reference: https://www.virustotal.com/gui/ip-address/47.236.17.185/relations

emkey.fun

# Reference: https://www.virustotal.com/gui/ip-address/47.91.99.31/relations
# Reference: https://www.virustotal.com/gui/file/2bfdd8efc82869160fc05c7591d7277af5c99b4a42aa09901091e6e06f0fbb05/detection

spepper.oss-me-east-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/ip-address/47.91.99.31/relations
# Reference: https://www.virustotal.com/gui/file/d7842dc9d4eb74c1c0a687c91c53a9e2a0c5fa718261e7d3e1bb4c346bdbc33e/detection
# Reference: https://www.virustotal.com/gui/file/b2e7c5f369f7dd86f4f8df3eeebcf19dd5358fb131e0cf2ba83dc2b83a095339/detection

cqsn.oss-me-east-1.aliyuncs.com

# Reference: https://www.virustotal.com/gui/ip-address/47.91.99.31/relations
# Reference: https://www.virustotal.com/gui/file/52d604b5e41ceaeaac9c71d8d163d5c69a123fc8aeec8cbd4e55bf45ff438d42/detection

gead.oss-me-east-1.aliyuncs.com
loder.oss-me-east-1.aliyuncs.com

# Reference: https://twitter.com/ReBensk/status/1782664100792660130
# Reference: https://www.virustotal.com/gui/ip-address/8.219.220.48/relations
# Reference: https://www.virustotal.com/gui/file/1c0d96fbcdfb7ccc311de88d2feffe1925eda790f46596cba6e2e8ed34d15f03/detection

abmua.store
machme.kim
voicexy.top

# Reference: https://twitter.com/ReBensk/status/1782665873586540556
# Reference: https://www.virustotal.com/gui/ip-address/8.219.184.25/relations
# Reference: https://www.virustotal.com/gui/file/9da73bf0d818a41b5851e040ef26765c4d6568d83db016e239adc6b92418544f/detection

oemnbdpe.work

# Reference: https://twitter.com/ReBensk/status/1783736884763459648
# Reference: https://www.virustotal.com/gui/ip-address/47.245.81.242/details

ricke.press

# Reference: https://twitter.com/ReBensk/status/1786638992961609893
# Reference: https://www.virustotal.com/gui/ip-address/8.219.189.206/relations
# Reference: https://www.virustotal.com/gui/file/dc4a7fafa05369ec043772bba72ae8e96565badc81e3ac3af4778abb1be6aacb/detection

ccmaony.pub

# Reference: https://twitter.com/Protectstar/status/1786741799614111810
# Reference: https://www.virustotal.com/gui/file/16a00b98242918c87aa7f6b56af662288f8c781ef56819e377ccce4933e91327/detection

211.151.146.65:8080

# Reference: https://twitter.com/ReBensk/status/1787405412158865528
# Reference: https://www.virustotal.com/gui/ip-address/47.236.89.204/relations

macrs.space

# Reference: https://twitter.com/ReBensk/status/1788175738165756137
# Reference: https://www.virustotal.com/gui/ip-address/47.237.83.153/relations
# Reference: https://www.virustotal.com/gui/file/fb59a7dd25ec2c3fe4b5c9fafa20ff2bdeac804b95c60103d7a892b04f376fef/detection

biace.tech
sjmesms.pub

# Reference: https://twitter.com/ReBensk/status/1788176439818223859
# Reference: https://www.virustotal.com/gui/ip-address/47.236.75.49/relations

liveca.tech

# Reference: https://x.com/ReBensk/status/1792507373489377414
# Reference: https://www.virustotal.com/gui/ip-address/47.237.88.164/relations
# Reference: https://www.virustotal.com/gui/file/94cf7ba72821d72e4237f7bcd10898e22c02077c4554498a52c2019d2506c882/detection

sjball.live

# Reference: https://x.com/ReBensk/status/1792510339999051838
# Reference: https://www.virustotal.com/gui/ip-address/47.237.77.248/relations
# Reference: https://app.validin.com/detail?find=211.161.36.86&type=ip4&ref_id=d20bf7daa84#tab=resolutions

kazer.club
kazer.cn
lazycat.cool
lazycat.ink
potpvp.cn
pvp.vin
yelor.asia

# Reference: https://x.com/ReBensk/status/1795068648547127403
# Reference: https://www.virustotal.com/gui/file/d6c8b06cf05e71f852d05944c94442fa802f686ee4c9fa8f802a5eb934e307c8/detection
# Reference: https://www.virustotal.com/gui/file/1c53d195aed52f6f376634f10db4ebba39e5a98cad9a4a91397907a72131c8d0/detection

vertexs.wiki

# Reference: https://twitter.com/h_krobot/status/1749447223631290527
# Reference: https://x.com/0x6rss/status/1826196071321682121
# Reference: https://x.com/ReBensk/status/1826313954135584959
# Reference: https://x.com/cyberfeeddigest/status/1835416411998388536
# Reference: https://www.virustotal.com/gui/file/d852f48e1c8a37d11f9dfb90f339316a5a3fa012bf152db43de1e81b45a69ba7/detection
# Reference: https://www.virustotal.com/gui/file/bcae6ea26fe1dd1fa5652e05c1b888186307ad277ce238a255908061b837a484/detection
# Reference: https://www.virustotal.com/gui/file/8bbb6cd5277177beb86b037ef77d6fcbae4a51a19668063d4d1b40ce2453dad3/detection
# Reference: https://www.virustotal.com/gui/file/7ffbc88e97be67214ad17325142ceb54823a5bdcebdbd4e4c9d0c65b3f0a1813/detection
# Reference: https://www.virustotal.com/gui/file/4b43f7145eebe4c07d208911b9d74c7c996a5037a04d52e4c38a80c2456d1187/detection
# Reference: https://www.virustotal.com/gui/file/22988cbb286f387036ced6fca6bb72b9f5e326706ad99065bc04bb8cb5dc4a12/detection
# Reference: https://www.virustotal.com/gui/file/22046aaef8a6439d1f5f2980b4d6282e7b69e98c95a0f52010d8953f0cb5e736/detection
# Reference: https://www.virustotal.com/gui/file/6da8e49d8e083ec705985effa03cdb60cdd736f04ed711211b2a3842c815a708/detection
# Reference: https://www.virustotal.com/gui/file/7b3262b6c3ad52e50e2ec6faf1ffb12ca08f0d17ac4f90420f13a6053b7f9622/detection
# Reference: https://www.virustotal.com/gui/file/8b05684a73f44ed82c0faf424b2d41a0c7b00c2fef4d7dc232c5433739a59f6c/detection

http://80.251.153.96
176.124.32.39:51033
176.124.32.39:51144
176.124.32.39:52997
80.251.153.96:51144
80.251.153.96:52997
80-251-153-96.cprapid.com
animeku.fun
animeku.ink
animeku.live
astriroma.com
film21.click
film21.life
film21.lol
scarica-app.icu
cpcontacts.animeku.fun
e1.animeku.fun
mail.animeku.fun
webdisk.animeku.fun
/injectionsupload/zipped/

# Reference: https://x.com/ReBensk/status/1827777074830229844
# Reference: https://www.virustotal.com/gui/ip-address/47.236.247.246/relations
# Reference: https://www.virustotal.com/gui/file/3d0bbd0a59d546dac325e7253d8783b765948cda671eecd0a0bd881ba48a4dea/detection

appmo.asia
craftcamera.ltd
yang-ning-yi.top

# Reference: https://x.com/ReBensk/status/1827776475434541479
# Reference: https://x.com/ni_fi_70/status/1827995468384678065
# Reference: https://www.virustotal.com/gui/file/c70b62bee9abf73c4a288a2fcecfbc18556ccc4baa0d23e88302a7e666acb727/detection
# Reference: https://www.virustotal.com/gui/file/89afe073499f237b35bfb5546cb5e444b589b469bc0e6060a4f732d12e5c6491/detection

sanku.red

# Reference: https://x.com/ReBensk/status/1829433745645949368
# Reference: https://www.virustotal.com/gui/file/936c19d03c181c926f8bd55abe6e729a61f548866a95b37ea172e372b08fd5a4/detection
# Reference: https://www.virustotal.com/gui/file/1baf532f002f318cbfb9f20462ab6a60a635b44cb2d1edbf2ee39eab7b5dfc34/detection

dramac.me

# Reference: https://x.com/ReBensk/status/1834832261117509745
# Reference: https://www.virustotal.com/gui/ip-address/47.236.177.39/relations
# Reference: https://app.validin.com/detail?type=ip&find=8.219.76.99#tab=host_pairs_v2
# Reference: https://www.virustotal.com/gui/file/673f309c9939db4040d2dcca2088244f2384b99103d4bc20719a37bd188de164/detection
# Reference: https://www.virustotal.com/gui/file/7b8b9b29f34cc23254e9f377a81b75b900b552328c24d3f9c8e4a246a30a261f/detection

adatjamb.work
procam.icu
shamb.fun

# Reference: https://x.com/ReBensk/status/1837344575632843114
# Reference: https://www.virustotal.com/gui/file/453a25fa1babac3fa6dbd59c77e655cf9f641cb8edda61c79f051342b81bc2f9/detection
# Reference: https://www.virustotal.com/gui/file/6d1cc154d5dfe1504d447e0b72602b71d062c5a7c96df909cb1c808248e6bd6d/detection

kamisatu.top

# Reference: https://x.com/ReBensk/status/1838513112330224008
# Reference: https://www.virustotal.com/gui/file/77c33a576601f466d7d8cc261e8ca4a2fdc490175b4cc82eec40a640a57b29d3/detection

cammind.press

# Reference: https://cert.pl/en/posts/2024/10/analiza-joker/
# Reference: https://www.virustotal.com/gui/ip-address/47.91.99.42/relations

forga.oss-me-east-1.aliyuncs.com

# Reference: https://x.com/malwrhunterteam/status/1847019471170310287
# Reference: https://x.com/0x6rss/status/1847022527740092688
# Reference: https://www.virustotal.com/gui/file/c6951df71e46f1a9b3b481a0c45efe146b038cd43426168f7f30a90454d776fc/detection

http://195.54.160.241

# Reference: https://x.com/ReBensk/status/1860253027577258367
# Reference: https://www.virustotal.com/gui/file/fe807473950b61bb2fe4332506f22f5a2e1e199b8835fc498efcceaa9721927f/detection

run3drace.me

# Reference: https://x.com/ReBensk/status/1860246575357771781
# Reference: https://www.virustotal.com/gui/file/6f3e07d9e1f932bfc4d3f1eac975a62d98465aa16f70f7bc51fb4b1569902f68/detection

comagic.ink

# Reference: https://x.com/ReBensk/status/1860666319286202858
# Reference: https://www.virustotal.com/gui/file/d7e73fca71646a066eb8607dae1858b4d12fcb864a5650b6dcecf3829abf8bf7/detection

wathemxd.live

# Reference: https://x.com/ReBensk/status/1863920523681632538
# Reference: https://tria.ge/241203-szrjzawraj/behavioral2

dicegame.tech
thembrd.top

# Reference: https://x.com/ReBensk/status/1865316864185757884
# Reference: https://www.virustotal.com/gui/ip-address/47.236.60.66/relations
# Reference: https://www.virustotal.com/gui/file/4b0316ed9cf8cdb26810460a1f43e129f99dbd621a9ccb37690ef4f6463715e3/detection

bustrack.xin
crecoa.quest

# Reference: https://x.com/ReBensk/status/1865727596002177062
# Reference: https://www.virustotal.com/gui/ip-address/47.236.140.89/relations
# Reference: https://www.virustotal.com/gui/file/1fb0a52d9b6f98e650a07d61caa3196b81091cd95932fa3b30956b2a69e1870d/detection
# Reference: https://www.virustotal.com/gui/file/cb8fbe9bc0131dfd0c1b671620f6ee1e488a97acb1d0141e7818af04262bb864/detection

hcsounds.hair
langbridge.fun

# Reference: https://x.com/ReBensk/status/1867174027384746098
# Reference: https://www.virustotal.com/gui/ip-address/47.245.94.193/relations
# Reference: https://www.virustotal.com/gui/file/2af207bedb51e9df494544cc7637af6b76b7473a79aac28afd1332b6dc7bf8fd/detection
# Reference: https://www.virustotal.com/gui/file/e346ef59219fcb5de178067576c9bb7467bab59fe266577abd509e22df5c3afe/detection

comedaxs.art
glispalin.xin

# Reference: https://x.com/ReBensk/status/1874061309656129563
# Reference: https://www.virustotal.com/gui/file/7283ac5320ebf19a75cf055b45c017d09f641a0220f5d8e89893c61e475f4376/detection

cscpio.store

# Reference: https://x.com/ReBensk/status/1874060897033085311
# Reference: https://tria.ge/241231-pv7hvasrfp/behavioral3

flang.site
natpro.oss-me-east-1.aliyuncs.com

# Reference: https://x.com/ReBensk/status/1874420618239853011
# Reference: https://www.virustotal.com/gui/file/ee0d1c4f5ba1b509e58a54f2d87d81660a8485a7b8d730550632c94631b9ae30/detection

loveface.fit

# Reference: https://x.com/ReBensk/status/1874420872062337364
# Reference: https://www.virustotal.com/gui/file/675b5891fe236fcbb97b33f7388856a2c5d80e7c32a750cfbfa8b8bc743b846f/detection

fagic.live

# Reference: https://x.com/ReBensk/status/1874428163364901129
# Reference: https://www.virustotal.com/gui/file/672ed8d9836ab2f4f06cca5b6da2e1b46dcf3dfc9b06c6555d1f93164b01e5e6/detection

atxy.fun

# Reference: https://x.com/ReBensk/status/1875891343509393508
# Reference: https://www.virustotal.com/gui/file/e1a7bbfaa282a5118ca3086786dd610227afd2dd8e11b42e66dbe31dae3e5c44/detection

aldi.rent

# Reference: https://x.com/ReBensk/status/1876183857789317384
# Reference: https://www.virustotal.com/gui/file/f5a8aa35c4459c3a2c28dd303860d0bbea294d5afc23f837ae9ce706bce55153/detection

wasweet.bond

# Reference: https://x.com/ReBensk/status/1876183857789317384
# Reference: https://tria.ge/250106-kv1m3sslfy/behavioral1

afafaf.oss-eu-central-1.aliyuncs.com

# Reference: https://x.com/ReBensk/status/1878812262565314806
# Reference: https://tria.ge/250113-weksga1pdv/behavioral1
# Reference: https://www.virustotal.com/gui/file/dc0db27cba44af2d289845ec99c3fc82e24c1b40efdc88f24279f20b297802f0/detection

fildio.top

# Reference: https://x.com/ReBensk/status/1878616027187282373
# Reference: https://tria.ge/250113-wx6gwsslgy/behavioral1
# Reference: https://www.virustotal.com/gui/file/047aa00f56b67d1a5b6be217ca32c3d9707f60726856e21d96ca2c9c9c711257/detection

yudan.oss-eu-central-1.aliyuncs.com

# Reference: https://x.com/ReBensk/status/1879149860416557177
# Reference: https://www.virustotal.com/gui/file/551e5be6fdd4456f24ebff99a49d001364179cffb2c69deb5a1929ae2369e16e/detection

wondacu.oss-eu-central-1.aliyuncs.com

# Reference: https://x.com/ReBensk/status/1879151524020142364
# Reference: https://www.virustotal.com/gui/file/021c7751e4bb89be2581ff0592941415f686c46b7fcb49dfcbb0dae80d0cd944/detection
# Reference: https://tria.ge/250114-q7h7fszkhw/behavioral3

polor.info
yindua.oss-ap-southeast-5.aliyuncs.com

# Reference: https://x.com/ReBensk/status/1880467280259326059
# Reference: https://www.virustotal.com/gui/file/273278948c9a2c783ed35e26fc9a528a4012173dc3886ce8bb61ccd8e4cd59ee/detection
# Reference: https://app.validin.com/detail?type=dom&find=hosound.top#tab=host_pairs
# Reference: https://www.virustotal.com/gui/ip-address/47.84.188.186/relations

artofdesign.tech
gatezpiano.tech
hosound.top
myhmit.top
pianowork.store
pojys.vip
tigart.club
tomomsg.xyz
voisu.online
yumeworks.art

# Reference: https://www.virustotal.com/gui/file/486710052476a4748ca6c62b74d829c3954e5b8b3467793274af549a717b011d/detection

beselfie.beauty

# Reference: https://x.com/ReBensk/status/1881008285991698938
# Reference: https://tria.ge/250119-va4jcaxkgl/behavioral1

nxvbih.vip
yamer.oss-ap-southeast-5.aliyuncs.com

# Reference: https://x.com/ReBensk/status/1881012120378351855
# Reference: https://tria.ge/250119-vct3pawqgx/behavioral3

imfilm.makeup

# Reference: https://app.validin.com/detail?find=8.222.172.160&type=ip4&ref_id=c8dbf5eedb9#tab=host_pairs
# Reference: https://www.virustotal.com/gui/ip-address/47.84.41.173/relations

haovps.info
gofinder.work
ruball.pro

# Reference: https://x.com/ReBensk/status/1881589081601364001
# Reference: https://www.virustotal.com/gui/file/4bdb4a4dd20cb449e41c59a264279392f405b53ccfb83d47f478e60e42936821/detection

depthen.website

# Reference: https://app.validin.com/detail?find=adatjamb.work&type=dom&ref_id=a2cf060cf5b#tab=host_pairs (# 2025-01-21)
# Reference: https://www.virustotal.com/gui/ip-address/47.237.152.233/relations

aompiano.xyz
ayangelv.icu
banlits.cyou
blureditor.club
ccdbeauty.top
colorfulmsg.fun
colorfulwallpaper.xyz
cutekb.fun
darwinprankx.art
digsword.cloud
easyim.art
ezlifeplugone.art
ezstudio.cloud
facesmile.fun
fastbrain.cloud
fluidard.store
fullclass.site
funnylab.xyz
gamodamo.store
gazgazwall.art
goepos.id
gsspirit.art
handmadekb.art
hdphoto.uno
jackmars.online
joymaker.top
kagamiprocam.art
lingdong.xyz
litehdcam.top
lmgui.xyz
marvispdfs.com
mlichonc.red
mmstudio.tech
mmyzj.xyz
nag.rent
palret.top
partymaster.top
politan.site
quickmsg.art
retrowallpaper.pro
rickyemoji.shop
rocketemoji.art
rollingscanner.pro
rungump.art
stickerlab.fun
stickerlogi.art
stikeyboard.store
tesme.quest
trecool.space
twerkhero.xyz
ualp.top
ucbatlas.pro
wallpaper4k.online
watermakr.xyz
yudomar.com
panel.goepos.id

# Reference: https://www.virustotal.com/gui/ip-address/47.84.39.139/relations
# Reference: https://www.virustotal.com/gui/file/5a9ac21b0eb766f4e5efcef33459374f79c0a6a98f84db36d678c7bff6cf92af/detection

keycute.club

# Reference: https://x.com/ReBensk/status/1881946473384092158
# Reference: https://www.virustotal.com/gui/file/a7827b2fa1c5084f2961cfb25b9aaafd792f6426411dd68e0306a9405441afd2/detection

mablefam.art

# Reference: https://x.com/ReBensk/status/1882342798189547993
# Reference: https://app.validin.com/detail?find=47.236.52.163&type=ip4&ref_id=5c4f2f7e1c4#tab=host_pairs
# Reference: https://app.validin.com/detail?find=8.219.85.251&type=ip4&ref_id=cec436527d9#tab=host_pairs
# Reference: https://tria.ge/250123-1cf4qatphx/behavioral3
# Reference: https://www.virustotal.com/gui/file/584de7d823d90796f3289fc428206a2737008882f646ba42e3100c86f900b933/detection

airsound.fit
graffity.fun
ohhu.pet
rok.quest
tuatol.store
vocall.club

# Reference: https://x.com/ReBensk/status/1882664267423596705
# Reference: https://tria.ge/250124-l1mtvaspgw/behavioral1
# Reference: https://www.virustotal.com/gui/file/a742a1f117742c010d177c2f7651dfa0e177b5179a941a15ce0d161f9ae96dc2/detection

goldseek.cc

# Reference: https://app.validin.com/detail?type=hash&find=1f0786e9c3dae4e05b8b880582805be8#tab=host_pairs (# 2025-01-24)
# Reference: https://www.virustotal.com/gui/ip-address/8.219.77.90/relations
# Reference: https://www.virustotal.com/gui/file/1c4e9cb08a462c57874b1db3664ca78eec6fa38cb6bd84b76b6d5911df8fb3c6/detection

1m1ng.tech
6628.ai
ablefee.wiki
ably.fan
acasuit.love
achat.quest
afer.pw
aferm.help
afstakz.fun
agipit.skin
agk.quest
ahaw.pw
aidk.group
aihub.skin
ajmer.work
akbtolls.fun
alatv.bond
ale.quest
alienpaper.icu
aliyunbgp.wccc.pp.ua
allmeds.top
amanibsc.com
amazingcam.xyz
amdes.cloud
amenvo.fun
amli.work
androapp.icu
ane.monster
aninesk.cc
anmac.quest
anrme.top
anxtaun.fit
aoisey.art
apbbm.life
apevito.info
api.heist.run
api.jo2kw.cc
api.ws2bmi.cc
api.xdweb4k.cc
apslight.uno
arevine.cyou
argic.fashion
argrege.work
arito.fun
arkould.bond
arof.space
arsals.skin
artistchoice.fit
artpain.ltd
arvacu.top
asymbol.site
atck.wang
atop.uno
atuan.com.cn
aunark.work
autuma.group
auvieck.biz
avtar.fun
awange.pro
awsives.art
ayur.space
azcamera.pw
bactor.uno
bahg.cloud
bahq.shop
balock.top
baon.uno
baparu.xin
barskel.uno
bastp.bond
bayisii.info
beatprice.com.sg
befa.yachts
begonee.art
belovin.uno
benfu.site
betms.cyou
bevonc.wiki
bfyc.store
bg001122.com
bhc.beauty
bhkkfddcyh.icu
bigd.click
bik.yachts
biskt.cloud
bit.lubane.cc
bitcol.top
bitvt.top
biwell.club
biwov.uno
bnext.tw
boicube.fun
bokni.life
boluno.click
bomtp.help
bondov.pro
boneight.fit
bothon.group
botmg.click
botoa.shop
bowing.biz
brace.yoga
britn.top
brkun.bond
brucize.beer
bubd.club
bulsiw.cc
buo.cleanmymp.cc
buojal.homes
buram.pw
burayu.uno
bwfok.cyou
bwgap.quest
bybeta.top
cambios.ltd
capgr.club
carcoan.ink
carga.baby
carige.me
cariiy.fan
carpk.yoga
carsp.shop
casde.tech
catkk.cloud
caturax.info
cbs.motorcycles
ccdbeauty.top
cctuiguang.xyz
cdvcloud.cn
cecato.skin
ceimon.shop
ceislet.skin
cenbom.love
cenp.quest
cepale.info
cepith.uno
cetalpre.me
cetanfa.wiki
cgan.info
chatm.cyou
chedee.bond
chenyuxi.fun
chief.skin
choasad.yachts
choms.click
cidtal.info
ciker.click
cikimon.ink
cipashe.homes
cirlate.work
citinaon.asia
ckhu.store
clapclapfindphone.store
claumit.ltd
cleaf.uno
clearboard.fun
clgdashboard.webdevprojects.cloud
clk.aninesk.cc
cln.mutocleangp.cc
clsr.odoosys.cloud
cnain.online
cobolash.com
cobtart.cc
cocech.bond
cocvey.help
coderdomini.shop
colamati.fun
collin.skin
color.yoga
colorchat.tech
colorfulmsg.store
colortex.xin
comme.work
confie.work
congora.info
connworld.me
contourx.tech
contrast.uno
coolvuesilicone.com
coptu.help
corech.live
cosms.luxe
cotaked.uno
cowud.store
crdn.uno
creative4k.art
crun.pw
crwals.space
cswift.help
cuaiuch.top
cuarlay.ltd
cude.click
cudrace.cloud
cusont.store
cutemowa.help
cutepiano.fun
cutihe.fun
cyrebu.shop
d1yal3pnv.com
dacport.ink
dampg.shop
damv.top
daonac.uno
dass.live
datpice.luxe
dats.uno
davior.art
daytripperapp.xyz
dcent.fit
ddgface.wiki
debam.click
debona.xin
decorze.online
deeliy.store
defusebomb.org
defusebomb.top
defw.top
degox.store
degoy.store
deks.space
delinha.cloud
denlaje.art
depal.uno
derout.xyz
descend.yoga
desir.pw
desonal.shop
detg.fun
detg.top
dewser.club
dgczsd.top
diatum.uno
dinell.help
disf.cloud
distinctcam.xyz
divoicejoy.cc
diycont.art
djer.space
dkva.tech
dlab.monster
dles.click
dnki.click
dnri.online
doa.green
dobenoy.top
dodoca.com.sg
doob.pw
dopg.art
doqm.work
dpo.quest
drat.pro
drawph.ink
drcu.store
drie.quest
droined.world
drux.fun
drxo.cloud
duju.art
dumv.online
duroao.luxe
dutong.xin
dvwey.work
dwab.click
dxts.work
dxvw.cloud
easdr.cyou
easihod.biz
easychat.uno
easypi.ltd
easytexting.art
ebans.top
edcious.shop
eduap.luxe
edwz.club
eeda.uno
effeai.me
efkp.work
eflin.shop
efmy.top
eino.top
eis.makeup
eiwi.fun
ekat.space
eligar.quest
elima.bond
elknira.work
emix.beauty
emoji4fun.fun
emojiplus.autos
emojisa.mobi
emusa.pro
enansu.skin
enchan.cloud
endow.bond
enfg.art
enperla.love
eocp.uno
eqim.club
equaltemperament.xyz
erecte.ink
esgxiehui.com
esieaze.click
esomunt.online
etankin.top
eulmenis.yoga
eureca.fit
eutma.world
evcma.xyz
eveitre.xin
everestlv.com
exptran.online
exquens.world
ezmessage.cloud
facorge.top
fadrun.space
faikv.shop
falyn.pw
faqm.top
fartsounds.xyz
fasmo.vip
fastme.pw
fatrose.ink
fatyu.uno
feary.cyou
feltwod.fun
femk.top
fibiod.online
ficout.tech
filarii.luxe
fileea.cyou
finawe.shop
fint.click
fishysea.tech
flebe.top
flexdo.work
flyrid.biz
fncr.xyz
foha.uno
fokx.shop
fone.wallter6.xyz
fonlong.group
foredall.fun
forsan.shop
fosn.top
fossify.art
fotun.fun
fpem.online
frude.biz
fs.xos2wt.cc
fssp.work
fuhad.work
funspel.yoga
fupv.shop
furb.click
furtec.xin
fusionworks.me
fussage.cloud
galax.quest
gameboybox.art
garbeg.cyou
garend.group
gasu.pw
gauonic.fun
gaxa.help
gealins.art
gecatin.art
gedord.online
gehanse.biz
genad.click
getark.cyou
getony.autos
gfam.top
gfuyo.info
ggfchhb.icu
gheidocola.icu
ginal.work
ginny.click
ginolus.biz
github.green
glap.top
gnucaten.work
go365.top
goanven.ltd
goespass.biz
gofr.cloud
golaby.cyou
gomp.store
goodview.store
goozi.shop
goozmoj.host
gpractic.pro
gpsmpcam.top
grahod.work
grak.work
granery.store
graus.help
graz.quest
grivans.homes
growlin.pw
guawa.uno
guefly.skin
gufs.pw
guidimy.ink
gulfen.bond
gumblerumble.art
guople.luxe
gurm.top
gutee.store
gxbake.pro
gxmer.bond
h5emu.top
hagarre.club
halcyon.host
hamede.shop
hana-care.com
hangeo.luxe
hasopory.fun
hauste.yoga
haxp.top
hazgour.com
hazipin.club
hdbea.click
hdcam.beauty
hdcamera.beauty
hdphoto.shop
hdpoy.world
healthywalk.cc
heartrate.me
heist.run
hekdy.me
hellojni.com
hespy.fun
hfufn.top
hg.hnjrdzkj.xyz
hhdhdbdd.icu
hibanto.uno
hidanstop.run
hillock.help
hiock.online
hiotsa.life
hlopssi.ru
hnjrdzkj.xyz
hnngcvh.icu
hoajota.art
hoful.homes
hofw.pw
horetic.xin
horipa.top
hortrem.homes
hosvock.skin
hovage.quest
hshhshxdb.icu
hudiar.club
hurias.fit
hvip.store
hxjejhdd.icu
hxype.vip
hydrotimer.cc
hyfour.pw
hym.icu
hyperpanorama.cc
hypolen.skin
hznvf.xin
ichilaf.xin
igeek.fun
iglaboi.fun
iiiuusswer.cc
imadras.ltd
imsca.xin
infinitiapp.xyz
infkm.bond
inisan.fit
inopese.work
inspd.club
intoxit.club
ionnati.quest
ipank.fun
is-you.com
ismatria.online
itoop.wiki
ivot.uno
jadraw.art
jague.work
jamiox.click
jampiano.tech
jetcall.ink
jevq.art
jimplus.quest
jjvggh.icu
jkicker.art
jubike.fun
jueo.quest
jufc.click
jurainto.fun
jusm.space
jwtz.work
jzhsbbdnx.cyou
kabesen.fit
kativa.fit
kctiff.cyou
kelt.work
kether.top
keuser.skin
kfpz.cloud
kilogo.xin
kinjaku.online
kirteno.cc
kiwa.store
kiwww.cc
klc.skwixt.cc
kloi.top
kora.yoga
kotp.online
kroyo.xin
kt.kirteno.cc
ktbn.fun
kuhld.info
kuxyo.fan
kxnwf.fun
kytdsz.top
labkey.fun
lacibi.tech
ladopin.art
lads.cc
lagefan.cloud
laiyrin.yoga
latanz.club
latobe.store
lawaba.click
leabor.art
lebeye.quest
lederiy.club
ledflash.pro
legendary-space.com
legol.uno
legss.store
len.quest
leser.uno
lesum.fit
letar.shop
lewaay.skin
licoaud.tech
lifeqo.tech
liger.xin
lightsaber.icu
likeand.cloud
litamoy.quest
litenera.cc
liyuhao.xyz
lizeria.wiki
lodra.help
log.litenera.cc
lopart.click
loplexlar.fit
lopppwerasd.cc
lorope.group
lot.report
lubane.cc
luganye.art
lumuner.art
lunsouy.shop
luripen.art
lushere.host
luxcaro.art
luxuryul.com
luyisim.wiki
lwdhgfvw.shop
lymph.cloud
m.thepage2.com
magc.click
magichorn.autos
magicpicedi.fun
mannada.cc
mapre.work
masc.quest
masdop.shop
mating.click
matson.work
mavhian.yachts
mawore.tech
maxtr.biz
maxwe.cloud
mazeo.club
mbo.quest
mdop.asia
mdrhetongzhuanyong.com
mealvato.top
meantry.shop
meceral.top
mediqo.net
medoop.info
meetro.store
mekoi.bond
melanu.info
memearena.com
mememaker.cloud
menado.uno
meosne.fit
mer.college
merois.club
merrisu.store
mes.yachts
mesmes.store
met.yachts
metgle.quest
metlena.cyou
metormy.uno
metual.cyou
meyan.uno
mgfgk.top
mgph.online
micap.top
mifas.vip
migow.online
migulf.fan
mikoo.pw
mimok.click
mint.uuprk.cc
mionway.beer
miop.uno
mipo.uno
mitvok.cyou
mjwallpaper.tech
mmafjewjsll.bond
mmjh.art
mniwb.top
mobap.cloud
modan.cyou
mogra.uno
mojifu3d.wiki
momentra.live
monlovely.xyz
moodern.fun
moomit.shop
morons.yachts
morvily.homes
mosriok.beauty
mosto.quest
motrac.fun
mowas.pw
mpaqc.fun
mpaytes.top
mpaytjp.shop
mpaytjp.top
mpcr.cyou
mpkeb.top
msg.skwixt.cc
mtpmoji.cc
mucdd.help
muikif.ink
mukit.fun
mulame.store
mulame.tech
munotel.co
mutupal.world
muyo.click
mxjjdhshsu.icu
mxph.cloud
my.cctuiguang.xyz
mya.quest
nateniss.xin
nayana.wiki
nbxhdhjswq.icu
nearse.top
neatsu.ink
necaself.uno
neklacon.store
nelano.online
nepad.cyou
nepanika.ltd
nerand.info
neric.ltd
nestar.click
nesums.quest
networks-app.com
newcat.work
ngxs.work
niance.click
nicefit.work
nieniba.com
nixwac.autos
njjsndjjd.icu
nmzusnexx.cc
noceser.art
noe.pink
nomina.wiki
northreon.info
nossipo.work
notidy.art
nowaon.fit
nowaute.top
noyfut.online
ntlu.fun
nucset.store
nuffhoc.love
nugoon.space
numeo.space
obatan.cc
obemg.work
obsual.art
oclrm.click
odoosys.cloud
ogcfy.click
ohd.makeup
oki.pop2hit.cc
onecandy.tech
onek.fun
oneyipose.vip
ontak.ltd
onxi.top
ooouni.com
opansin.mobi
openjoycam.xyz
ordibi.top
ordin.uno
orgn.uno
orxp.art
otnxr.work
ounsumy.yoga
outro.click
ovtated.click
oxblet.quest
pagiam.space
painks.fit
pakhop.top
palmt.fun
paltric.xin
pamit.click
panaker.online
parcur.click
partygame.host
pasaoks.fit
passroad.beauty
patonie.ltd
patress.club
pay.thepage2.com
pce.beauty
peats.art
peksin.store
pelage.bond
pelsile.top
pencilart.site
penupe.xin
perflapo.pro
perp.monster
persein.pro
pertiver.online
pesirei.website
petala.ink
petitle.cloud
petiver.art
pexse.yoga
phcp.uno
phen.beauty
phet.fan
photoes.pw
photolove.tech
photopal.art
photy.top
phraselan.top
pianomaster.store
picapass.com
picoret.cyou
pikeb.fit
piloaus.xin
pixelpan.top
platgia.online
pledg.pw
pleixt.help
ploen.skin
plusonepic.cloud
pnidh.fun
pocketocr.xyz
podka.club
pofchc.uno
pop2hit.cc
popgas.fashion
posonla.wiki
posoupnet.ltd
pouren.wiki
powwowscan.cloud
poyhint.cyou
ppadssi.com
pphrc.top
pran.space
prank4fun.cc
pranksps.store
preppy.run
prgc.cyou
prmax.bond
prmessage.click
prui.online
prun.online
ptcloak.vip
pudeye.store
pujas.fit
pukese.club
puks.work
pung.work
punow.space
punya.live
puqoy.vip
puretexting.art
puty.asia
puym.fun
puym.help
puyou.cloud
pvcamera.pro
pvfm.pw
pvn.mobi
qeck.click
qhtechsms.top
qidakan.com
qigu.black
qirv.top
qoute.uno
qqmber.wtf
qsoups.bond
qtmes.cyou
quarkih.com
quench4log.top
qufny.pw
qzpienv.pro
radj.top
rapm.store
rathoize.click
ratibee.help
ratiiby.click
ravt.top
rayrost.art
rbin.uno
reaotos.tech
rechoder.cloud
recrond.work
regown.store
rehyp.club
reimun.pro
restom.xin
restorb.online
richtt.top
richv.top
richv.vip
ridin.online
rihead.tech
rinaps.tech
risad.bond
robanum.club
roild.info
rophatic.website
roplay.skin
rosagra.ink
roudoas.me
rowed.space
rowend.homes
rstage.vip
rtwa.online
rtwist.click
rukee.cyou
rully.space
rumblesc.fun
rusom.click
rvtm.pw
ryowzs.fit
ryoz.baby
sacv.store
sadenley.ltd
sagwekar.tech
sakig.top
salida.cloud
sanson.skin
sawotf.pro
scanmst.com
scannerinpocket.store
scanshot.cc
scolaun.cloud
screenlocker.art
seand.cloud
seblu.pro
sechat.uno
securemsg.store
seeliwa.love
seenetck.site
seffick.fit
seladom.top
semer.bond
senion.yoga
senspom.info
sentime.design
sepo.click
setan.store
setonat.group
shemon.info
shmily.icu
shock.yoga
shoela.uno
shortfile.top
shortmes.uno
shpum.work
shrtv.cyou
shu.college
sicale.tech
siodw.cc
situsen.skin
sivesib.tech
skido.bond
skive.xin
skullbd.top
skwixt.cc
sleaity.homes
slitmodc.ink
smad.cloud
smebu.work
smfc.help
smoothflow.art
smpdoc.pro
so.lubane.cc
sobutn.cc
solaoki.online
solocs.live
sosky.work
soundbutton.art
sparse.help
sparse.quest
spere.yoga
spond.store
sprenow.quest
sptao.top
sremm.uno
stc.sobutn.cc
stg.vootiny.cc
stintopa.top
stk.obatan.cc
stmuis.help
subn.uno
sudebe.space
sufforin.top
suluk.cyou
sunda.aisbir.cloud
sundanese.aisbir.cloud
sundone.store
sunflowerpte.com
suntate.yoga
suprow.shop
surdeva.art
suretu.store
suthed.ink
swgar.pw
sycm.work
symp.quest
tagiar.ltd
tagrity.cyou
tamf.top
tansum.tech
tebuta.store
techoringtones.icu
teckreal.asia
tecula.biz
tedipet.mobi
temarzi.cloud
temos.shop
tered.pw
terror.pw
tesme.quest
tespin.work
test.nexfon.ir
teyvata.com
tfitoka.beauty
theprank.click
thine.one
thmm.fun
tianfei.fun
tidee.uno
tik.siodw.cc
timescroll.top
timestam.fun
timestampmark.me
timsidian.duckdns.org
tipmian.fit
tisag.uno
tkbike2.cc
tkrzg.club
tmvp.xin
todet.pw
togn.pw
toinben.space
tokyojihen.store
tombs.fashion
top.v2vclean.com
toptaic.asia
tovi.quest
townkio.tech
towp.space
tp.mtpmoji.cc
tramlup.art
trast.help
trescc.com
trone.bond
trpa.cyou
tryself.quest
tsgdkldlpqq.icu
ttps.live
tuched.click
turefiy.uno
twgwjlwlqf.icu
twink.uno
tyro.quest
uekps.xyz
uelobu.store
ufep.online
ugkon.fun
ugof.click
ukma.fun
ulrece.college
umerz.info
ungag.online
unsk.online
upom.uno
urbanoutfitters.digital
utcharm.red
utstar.top
vaboler.cloud
vacound.live
vaculty.homes
vagalka.quest
vagtur.quest
varsien.xin
vatab.cyou
vaultr.online
vb.xmk22w.cc
vegu.shop
veiok.ink
veqr.homes
veradic.online
verg.uno
vetican.run
vetos.top
veture.top
vfe.quest
vgue.quest
victom.online
viousan.art
viship.xin
viteive.luxe
vithend.xin
vitoest.autos
vkoui.top
voconte.pw
von.xbhiy.cc
voodoovalley.art
vootiny.cc
vop.quest
vvvip.fit
vxan.quest
w9uwz5966.com
waedble.info
walc.store
wallpaperocket.icu
wallszf.top
wallter6.xyz
wanis.cc
wanoni.top
wanteau.mba
wapopin.space
wappanbs.store
watom.life
wauk.top
waychone.fit
wayond.yoga
wb.c2wnclean.com
wdjkolk.icu
wearn.shop
wehland.top
wetanra.fit
wexty.ol.icu
wexty.online
wfhjooa.fit
wfhjoool.icu
whamyewmw.com
whisun.xin
wholly.ink
whten.uno
willnate.shop
winstoe.club
winsum.cloud
wiouthy.fashion
wit.yachts
wither.life
wodonay.info
woguke.bond
wordgeeks.net
worshep.info
wosoha.beauty
wothr.help
wotn.yachts
wouyazi.bond
wozcasual.website
wrenoby.work
wrpo.click
wrspo.uno
wtic.monster
wuep.xyz
wufp.click
wuqk.art
wuxo.top
wuym.shop
wxguhjik.icu
wxxsappo.cc
xbhiy.cc
xdweb4k.cc
xepak.top
xerb.cyou
xjai.cc
xmk22w.cc
xont.top
xos2wt.cc
xswcd.asia
xuge.click
yamibox.store
yanteno.skin
yardm.cyou
yasenge.tech
yeii.uno
ylayi.store
ymrg.live
ynur.online
youngerpiano.xyz
yox.skin
ytky.tech
yuetg.cyou
yzwa.fun
zagat.cyou
zagluo.top
zainsam.icu
zais.work
zalit.top
zarg.click
zast.cloud
zaubo.xin
zay.quest
zeez.xin
zenaf.cyou
zewephy.group
zewide.fun
zifeng.net
zigzagski.icu
zog.quest
zogg.online
zotigs.tech
zoutunis.wiki
zufr.online
zvaz.top
zxoms.top
zy1987.cn
zymu.love
api.networks-app.com
apiproxy.xjai.cc
apitest.xjai.cc
app.thine.one
bun.hyperpanorama.cc
epusdt.mmafjewjsll.bond
garden.40409.cn
imap.angchaodongli.com
imap.yingchi-asia.com
jgp.kokolati.cc
mapi.ppadssi.com
plustoapi1.xjai.cc
secret-santa.qqmber.wtf
sgp.1m1ng.tech
smtp.yingchi-asia.com
srv1.server-kelas.web.id
test.respina.net
wl.bulsiw.cc

# Reference: https://x.com/ReBensk/status/1883080811190350223
# Reference: https://tria.ge/250125-nk13msslam/behavioral1
# Reference: https://www.virustotal.com/gui/file/54cf66bc27dd7031051eb0ef34f75f68f36b58a6e7f0c40adf23b1ce4262af6d/detection

leybusi.cc

# Reference: https://x.com/ReBensk/status/1885582537004925055
# Reference: https://tria.ge/250201-rsk8yaxrep/behavioral1

mess2.oss-eu-west-1.aliyuncs.com

# Reference: https://x.com/ReBensk/status/1887404564196040963
# Reference: https://tria.ge/250206-jh8bqazpgp/behavioral1

rocketbox.cc
rocketboxcc.oss-me-east-1.aliyuncs.com

# Reference: https://x.com/ReBensk/status/1888636741642272803
# Reference: https://www.virustotal.com/gui/ip-address/8.219.0.154/relations
# Reference: https://tria.ge/250209-xap23ayqep/behavioral1
# Reference: https://www.virustotal.com/gui/file/5dbf645f87028195c0e9defbcb958ef7a93b0ac2621045eeffd3666bcbe487e3/detection

genebin.top
yimuhe.cc

# Reference: https://x.com/ReBensk/status/1888092999931838546
# Reference: https://www.virustotal.com/gui/file/59c71dbf65316456f3c3c9125e0c8c807bdda375dfd0d6d54529211de5b3faa2/detection
# Reference: https://www.virustotal.com/gui/file/29b34850a9c29c90cec515ef5230768ed475d2ec8ef8cbd1931913b0169f3e28/detection
# Reference: https://www.virustotal.com/gui/file/23d9d925e1ad6f2e568a7c40aa664683489b4a8b0221d0f2b29a771d097e5aa5/detection

vokepru.art

# Reference: https://x.com/ReBensk/status/1889186952785928331
# Reference: https://tria.ge/250211-gfb5dsxrbl/behavioral1
# Reference: https://www.virustotal.com/gui/file/61ea7758e9e7bb55cae66590cd3e2735063181012b78aa94af78367bf9c527f4/detection

prankfun.cc

# Reference: https://x.com/ReBensk/status/1889187927604789531
# Reference: https://www.virustotal.com/gui/file/4e82f72cc44424ec5790c4ca27a5983d480e7de5c8aabf4d70376ff3744a49cf/detection

gordid.work

# Reference: https://x.com/ReBensk/status/1889194305082036478
# Reference: https://www.virustotal.com/gui/file/8169c510ae68b524cb22586cc49910d7db37368fcbccf070f79359d9c4e505b9/detection

zxuudc-cdn-settings.appsflyersdk.com

# Reference: https://x.com/ReBensk/status/1892455122317561929
# Reference: https://www.virustotal.com/gui/file/2c0845ff2ef220b6fcdd57c30471ee854bcd886b5c7d78c468bef47436197f36/detection

kuen.work

# Reference: https://x.com/ReBensk/status/1892856153908138402
# Reference: https://tria.ge/250221-zzjmpa1kcr/behavioral1

ydunpt.online

# Reference: https://x.com/ReBensk/status/1893170218920214919
# Reference: https://tria.ge/250222-njj3qswqw3/behavioral1

66.42.50.32:8080

# Reference: https://hunt.io/blog/uncovering-joker-c2-network

appapi.cepatcairc.cc
bsjk-jp.82021819.com
cepatcairc.cc
eoes.fun
gbclm.info
goodivew.store
helljni.com
kdo.monster
kefu.esgxiehui.com
me-east-1.oss.aliyuncs.com
monitor-hospot.rinjanihost.com
pallet.top
polar.info
pranfun.cc
pugoy.vip
timeschord.co
toniben.space
valenstickers.me
fuprankzd.oss-me-east-1.aliyuncs.com
mome.oss-me-east-1.aliyuncs.com
hdphotouno.oss-me-east-1.aliyuncs.com
zaky-public-dev.oss-me-east-1.aliyuncs.com

# Reference: https://x.com/ReBensk/status/1896804052190867622
# Reference: https://tria.ge/250304-v5ll1swvfs/behavioral1

bot-az.oss-ap-southeast-1.aliyuncs.com
/ydunpt.online/mesmes2
/ydunpt.online/mesmes10

# Reference: https://www.virustotal.com/gui/file/022844c915b4739a1b54efbd6d7720014e8e603acce27703012808afb415845e/detection

http://118.178.152.152
kanju8.oss-cn-shanghai.aliyuncs.com

# Reference: https://www.virustotal.com/gui/ip-address/47.236.80.249/relations

bibibi.icu

# Reference: https://www.virustotal.com/gui/ip-address/47.237.184.6/relations

xyaly.top

# APK

/000166ssshH5.apk
