redpacketsecurity[.]co 138[.]124[.]102[.]188 150[.]241[.]100[.]243 150[.]241[.]73[.]82 150[.]241[.]96[.]46 193[.]233[.]210[.]232 213[.]108[.]22[.]160 62[.]60[.]159[.]153 79[.]137[.]203[.]132 91[.]184[.]241[.]245 aeza[.]ru edgecenter[.]ru falseplace[.]ptr[.]network hxxps://api[.]valtersit[.]com/api/v1/ip/138[.]124[.]102[.]188 hxxps://api[.]valtersit[.]com/api/v1/ip/feed?type=botnet_c2&min_confidence=75 hxxps://www[.]fortsmithar[.]gov/ api[.]telegram[.]org checkpoint[.]com cyber[.]netsecops[.]io cybernetsec[.]io thehackernews[.]com bynar[.]io calif[.]io support[.]apple[.]com 202[.]144[.]192[.]149 210[.]1[.]231[.]13 38[.]180[.]150[.]19 api80[.]c2iznja[.]com c2iznja[.]com cache[.]c2iznja[.]com chat5188[.]tk icanihazip[.]com 11168833[.]com 11170011[.]com 146[.]103[.]91[.]133 157[.]185[.]143[.]150 1862[.]cc 312zym001[.]cc 80074[.]cc 843470[.]cc am125[.]cc amazon[.]com appcasino[.]online asg78[.]com cache-cdn[.]org cache-mcp[.]com dollycasino[.]com githubassets[.]net hxxps://dragobet[.]net/ infoblox[.]com interisle[.]net js[.]cache-mcp[.]com mcp-source[.]online myctgs[.]com puqxr[.]com realz[.]com trustpilot[.]com vip311[.]cc zenplay77-x[.]space zzyud[.]com 106[.]214[.]9[.]64 106[.]215[.]155[.]180 106[.]215[.]159[.]248 106[.]215[.]162[.]253 122[.]170[.]196[.]217 122[.]183[.]32[.]193 122[.]183[.]45[.]134 223[.]181[.]15[.]251 223[.]185[.]35[.]55 airtel[.]com hxxps://api[.]valtersit[.]com/api/v1/ip/106[.]214[.]9[.]64 cebraspe2026[.]cfd cebraspe[.]cfd exp[.]py intel[.]threadlinqs[.]com libglthread[.]so 179[.]43[.]139[.]126 179[.]43[.]139[.]126:5000 179[.]43[.]186[.]0 179[.]43[.]186[.]194 179[.]43[.]186[.]214 179[.]43[.]186[.]223 179[.]43[.]186[.]239 179[.]43[.]186[.]246 19[.]43[.]186[.]239 257de0e2744c99a12cbc1c1b37c76e0e8a010dde3125ec09468a16e4f8e0f121 31[.]7[.]58[.]226 95[.]142[.]40[.]51 api[.]ipify[.]org ipapi[.]co khinkal[.]net onionmail[.]org 8[.]146[.]227[.]247 9b6e1bcce3c8c962ca7915304e7052f011490079a12dd0cacf8fada7138c302c 775e36e7486e1f474ea6755bfa80014bc10b42063f162b6b2443612e9d6ec66b 156[.]239[.]224[.]131 c0d7fb473254bc5255d3d5a59eed8e974e59e49207e9d3e71f2d5d17c865a885 3b4c8316168b9c80a629a1ccb807356a8da0de709ac069def1d2ee1aaa2616c7 60[.]247[.]206[.]23 894857119e8e567ec259b47ab5c2dfa54b75c95711bf03fa5eed99ad56bdb82a 99e92805eb7063ff22841eeb4c9713942ed6bce7d2891345b0a62c8d461ad503 774243a3019a387b2bc479f828a661a46071baa77789ab855ca4243f859fb50e e04b40317f175cbec5548d43060a665d703f5c4ef9054bd54f93d08a1dfa29da f2905c3354c99a435c9b2a2f906819d82e606df49bc75f332f50cacbd2b79937 10[.]11[.]152[.]4:8009 110[.]164[.]129[.]67:443 110[.]164[.]192[.]228 92[.]63[.]180[.]133:8888 agent[.]3bb[.]co[.]th hunt[.]io mail[.]3bb[.]co[.]th www[.]ayuthayatech[.]com 128[.]64[.]uzpak[.]uz 144[.]124[.]196[.]48 198[.]163[.]194[.]64 213[.]230[.]100[.]21 213[.]230[.]78[.]181 213[.]230[.]78[.]32 213[.]230[.]79[.]128 213[.]230[.]87[.]8 213[.]230[.]92[.]116 213[.]230[.]92[.]15 bkm[.]uz hxxps://api[.]valtersit[.]com/api/v1/ip/213[.]230[.]79[.]128 spamhaus[.]org 114ec028a3fc4ed50056ee8166b0c39acff6ff03 1795eacd2c58894ccdd6be8854fe6456c3b069a3a873432343b57b475b256aee 19021e53b9929fdf4b7d0e0707434d56bb73c1a9b7403c8837b44d1c417198dc 1rpc[.]io 2d4b4bb18b8445e49eeda571982874403befcecf78266e3d405f6529d98bee46 3d5ee8429ef00824c0351cba507dfeb92b54f83b 4142d5efd4ea2abab77f2f0a917610e2ff976bf9e19d7ad1e9156eccdc5412db 73ce2438d4ed475e03727b7b000d2794 77fbe265fd65c7f7b6d323fb6de6a4fd 7[.]2[.]9[.]0 8c2665adf8bfab65463f2a9bd1b7bb0231de3f5c1e6a2e51479e44aaac2e7bf0 aa9218994798ae31a19d3e7e39cfac2e2ee55840 arweave[.]net b188fbc6ff5557767e73e4c883a553a3 b2d51212744f404714fd909e87254d98 b44c8084b88d31113ee51758740eb84c251bdae8 ba80d7b038758a129861e1e498e462cc3d68ae20 borjumaniya[.]store c92cf9a1af5b1fe25cdcb8771ce52be4 c98ee41f09ae079a5643626f57eb84f92205bb2b d9487fdc097f770e5661f9e5dee130068cb179d33716abff1a21c8cb901f25a6 ep-lively-cherry-a80bmwii[.]eastus2[.]azure[.]neon[.]tech f985b8d6d635c266fc4779dad77aa75c g8way[.]io goldsky[.]arweave[.]net hxxps://afford-effect-construct-tricks[.]trycloudflare[.]com hxxps://entered-medications-motherboard-advanced[.]trycloudflare[.]com hxxps://fields-pct-easier-vancouver[.]trycloudflare[.]com hxxps://howto-tar-naturals-coordination[.]trycloudflare[.]com hxxps://mode-exit-legendary-trusted[.]trycloudflare[.]com hxxps://nodejs[.]org/dist/v18[.]20[.]5/node-v18[.]20[.]5-win-x64[.]zip hxxps://rapids-lil-lending-charleston[.]trycloudflare[.]com hxxps://seasonal-estimation-heating-necessarily[.]trycloudflare[.]com hxxps://thedfirreport[.]com/company/contact-us/ hxxps://walt-messaging-affairs-occurring[.]trycloudflare[.]com hxxps://when-architectural-cdna-faster[.]trycloudflare[.]com hxxps://witch-skins-lip-coal[.]trycloudflare[.]com hxxps://workshop-lighting-protective-customs[.]trycloudflare[.]com installeduiculture[.]name k135neflez[.]westus3[.]azure[.]clickhouse[.]cloud muurfzqprzmdkzoibxaz[.]supabase[.]co thedfirreport[.]com trycloudflare[.]com vefbdzzuaadnascpeqcn[.]supabase[.]co vngz3ntdrb[.]us-east1[.]gcp[.]clickhouse[.]cloud yazoul[.]net express[.]de 45[.]130[.]83[.]115 45[.]130[.]83[.]172 45[.]130[.]83[.]91 45[.]92[.]229[.]117 45[.]92[.]229[.]123 45[.]92[.]229[.]129 45[.]92[.]229[.]131 45[.]92[.]229[.]132 45[.]92[.]229[.]137 hxxps://api[.]valtersit[.]com/api/v1/ip/45[.]130[.]83[.]172 vpnconsumer[.]com 31[.]156[.]181[.]5:9002 07d3bbdc69437b255cd489c930119f35c704c884 128[.]65[.]210[.]183 128[.]65[.]223[.]150 134[.]119[.]225[.]193 142[.]132[.]246[.]153 145[.]14[.]228[.]37 185[.]158[.]192[.]18 193[.]158[.]50[.]182 212[.]12[.]54[.]179 212[.]12[.]55[.]4 212[.]7[.]179[.]203 212[.]7[.]179[.]217 217[.]160[.]0[.]125 252fe-accounting[.]talanx[.]com 292e47bbb3d50acc2b89e5f3cead2cd45e8416bf 2[.]207[.]247[.]42 2cf0b346b2bb20b17258a1a02f5f658a 2fmatomo[.]dietrich-logistic[.]com 2fwww[.]spiegel[.]de 2fwww[.]toll-collect[.]de 40frachtcontor[.]de 40gmail[.]com 46315c697445219334086e2c6e68ade2d1b415e2 533c19359bba7bab85922883e86c07e2 60019cb29a63161e09fec1f42c82c2be 78[.]46[.]0[.]195 78[.]46[.]117[.]83 78[.]46[.]2[.]173 78[.]47[.]54[.]5 7f134812b05fa5f78ca65c6bb4ce0daa 80[.]158[.]4[.]78 80[.]245[.]144[.]145 87[.]106[.]71[.]8 91[.]194[.]230[.]124 91[.]194[.]230[.]84 92[.]205[.]228[.]104 96c8580a3fb0feb190921d1d8597d9cd 9a68db4a23d728add5b207866e36fb3a a9dda31876fc9abc68335f1569ddff00bdfb5454 ac320130a97a56f3c9469b9bfa3b6871 anrede[.]group archiv[.]dietrich-logistic[.]com bdbc1a79940ef5938694e393a5691306 bitwarden[.]swhl[.]de c157edb2720bc1f98dbfcf8752c0418c52d716f9 c440f3eb73539da98558e9fa3c72693f citrix[.]seifert-logistics[.]com e-accounting[.]talanx[.]com e45b2cf9fe4fbd29344c4cbdad50709e gruppenkonto[.]spiegel[.]de hxxps://sso-us[.]toll-collect[.]de/de/account_management/forgotpassword/forgotpassword[.]html\ khd-tracking[.]riege[.]com kundenportal[.]swhl[.]de matomo[.]dietrich-logistic[.]com media[.]talanx[.]com nutzungsbedingungen[.]group parken[.]swhl[.]de rdscb[.]frachtcontor[.]de remote[.]frachtcontor[.]de seifert-logistics[.]com sso[.]toll-collect[.]de webmail[.]bds-dgv[.]de webmail[.]bundespolizei[.]de webportal[.]trans-bavaria[.]com witha[.]name www[.]bds-dgv[.]de www[.]bundespolizei[.]de www[.]dietrich-logistic[.]com www[.]faehre-honnef[.]de www[.]frachtcontor[.]de www[.]nwl-info[.]de www[.]spiegel[.]de www[.]swhl[.]de www[.]toll-collect[.]de www[.]trans-bavaria[.]com 60[.]175[.]91[.]53 cyberworldops[.]eu ocr[.]opusaccel[.]top 119[.]152[.]240[.]92 119[.]156[.]89[.]2 182[.]176[.]92[.]143 182[.]181[.]208[.]231 39[.]39[.]240[.]152 39[.]50[.]183[.]97 39[.]55[.]143[.]220 39[.]60[.]210[.]72 39[.]60[.]73[.]106 hxxps://api[.]valtersit[.]com/api/v1/ip/39[.]55[.]143[.]220 ptcl[.]net aca[.]pescara[.]it zoominfo[.]com hattiesburgeyeclinic[.]com indicelectronics[.]com ati-1[.]com gtg[.]se alchinlong[.]com gelarti[.]com[.]pe balkanpolymers[.]com cedarsfoods[.]com assicurazionilodi[.]it downrite[.]com neff-drexel[.]ch iveta[.]hr rocketreach[.]co humboldt[.]com[.]br highoakham[.]co[.]uk tentac[.]co[.]jp danginvestgroup[.]com bgrcorp[.]com ardomeilot[.]com technicalasia[.]com contabilmultipla[.]com[.]br somit[.]com wadafarms[.]com aforpa[.]fr mareshki[.]com santafelibros[.]com[.]ar sarkujapan[.]com tmipal[.]com medskin-suwelack[.]com 128[.]65[.]210[.]87 85[.]22[.]53[.]155 www[.]dortmund[.]de 120[.]53[.]19[.]157 a7c6b8d708920e98ca8ae73af1acce62920e8671ac345cdcae0ec3da1337892d f5bd784a555e68ee8b011d7a23a3dc0ddd53906972276008674697f4ba942919 01be773922734c96b87263627164d671d3f8ad908e9a3390e01ec9fe49db3172 5b55367d7cfae2106dc561f0f63ddd18c8a930bc74cc62026b8f52749ce1b8ed 6e7298775bfe3879470f26b578c1d37e77855d49d686aa3f18161bff3d026705 85[.]175[.]101[.]203 165[.]99[.]207[.]153 crowdsec[.]net cyberpotveille[.]ch hxxps://cyberveille[.]ch/map/ 176[.]103[.]0[.]230 176[.]103[.]11[.]16 176[.]103[.]2[.]134 176[.]103[.]5[.]26 176[.]103[.]6[.]110 176[.]103[.]6[.]251 176[.]103[.]7[.]177 176[.]103[.]7[.]207 91[.]222[.]78[.]251 hxxps://api[.]valtersit[.]com/api/v1/ip/176[.]103[.]7[.]207 komsomolske[.]net 177[.]102[.]101[.]235 177[.]139[.]105[.]166 177[.]139[.]125[.]138 177[.]188[.]224[.]166 179[.]98[.]84[.]186 187[.]10[.]170[.]48 187[.]74[.]242[.]41 189-18-236-127[.]dsl[.]telesp[.]net[.]br 189[.]18[.]236[.]127 191[.]254[.]124[.]44 hxxps://api[.]valtersit[.]com/api/v1/ip/189[.]18[.]236[.]127 136[.]112[.]29[.]199 205[.]210[.]31[.]169 207[.]175[.]105[.]235 34[.]131[.]170[.]117 34[.]141[.]204[.]87 34[.]154[.]2[.]98 34[.]168[.]205[.]47 34[.]86[.]192[.]84 34[.]86[.]50[.]253 98[.]2[.]154[.]34 98[.]2[.]154[.]34[.]bc[.]googleusercontent[.]com hxxps://api[.]valtersit[.]com/api/v1/ip/34[.]154[.]2[.]98 187-120-73-116[.]pso-fb[.]mastercabo[.]com[.]br 187[.]120[.]72[.]134 187[.]120[.]72[.]87 187[.]120[.]73[.]116 187[.]120[.]73[.]175 191[.]240[.]71[.]232 191[.]53[.]111[.]218 191[.]53[.]126[.]8 191[.]53[.]189[.]219 191[.]53[.]9[.]174 hxxps://api[.]valtersit[.]com/api/v1/ip/187[.]120[.]73[.]116 172[.]233[.]67[.]176 172[.]237[.]29[.]147 38[.]54[.]56[.]95 blog[.]talosintelligence[.]com index[.]py blob[.]core[.]windows[.]net 164[.]90[.]161[.]147 165[.]22[.]199[.]85 45[.]94[.]47[.]204 77[.]91[.]65[.]13 77[.]91[.]65[.]13:443 apple[.]clean-disk-guide[.]com arkypc[.]com code-desktop[.]com codex-craft[.]com filequanticore[.]com hbomax-macos[.]com hbomaxx[.]app hbomaxx[.]us hxxps://ember-bridge[.]com/curl/a44a37519au/setup[.]sh loop-lumen[.]com setup[.]sh whack[.]sh secretsdump[.]py 45[.]61[.]170[.]191 fbd3eb41adbb38c4fe26d3f7f1d5be512fa1ad8399cee532263af28dc7037bb6 6a340b5508799f1b8b1938b28ec0d6412492c7cc2fd2416067a25b12f8e8c1a7 2189bd4e5825edf8e02b1cc64db20dd4c98d9ff703c853e8645a2c253611df20 47[.]108[.]25[.]113 db78503f2ccd6d58d75159dc2dde01d869410febc3f8717eb0d6e82d426e1b66 138[.]124[.]102[.]179 138[.]124[.]91[.]222 150[.]241[.]97[.]35 hxxps://api[.]valtersit[.]com/api/v1/ip/138[.]124[.]102[.]179 images[.]apple[.]com reserved-by-avm[.]ptr[.]network www[.]apple[.]com www[.]apple[.]com[.]cn geekybunch[.]com rity[.]com 163[.]136[.]252[.]35 163[.]136[.]252[.]35[.]bc[.]googleusercontent[.]com 205[.]210[.]31[.]166 34[.]141[.]133[.]4 34[.]162[.]129[.]168 34[.]55[.]12[.]4 34[.]7[.]24[.]213 34[.]83[.]118[.]116 35[.]193[.]36[.]230 35[.]221[.]62[.]98 35[.]252[.]136[.]163 hxxps://api[.]valtersit[.]com/api/v1/ip/35[.]252[.]136[.]163 valtersit[.]com tpi[.]tw comune[.]robeccosulnaviglio[.]mi[.]it httoy[.]fi 177[.]52[.]145[.]49 200[.]215[.]160[.]168 206[.]0[.]10[.]32 206[.]0[.]11[.]131 38[.]250[.]64[.]13 38[.]250[.]64[.]48 38[.]250[.]65[.]176 38[.]250[.]65[.]216 38[.]250[.]70[.]109 b-206-0-11-131[.]brsulnet[.]net[.]br hxxps://api[.]valtersit[.]com/api/v1/ip/206[.]0[.]11[.]131 go[.]darkwebsonar[.]io wordpress[.]org 34[.]62[.]57[.]225 34[.]81[.]135[.]70 34[.]94[.]75[.]77 35[.]187[.]76[.]18 35[.]221[.]70[.]117 35[.]252[.]13[.]77 77[.]75[.]94[.]34 77[.]75[.]94[.]34[.]bc[.]googleusercontent[.]com hxxps://api[.]valtersit[.]com/api/v1/ip/34[.]94[.]75[.]77 www[.]lawmlg[.]com hxxps://codeberg[.]org/IFIN/lists[.]ifin[.]network hxxps://lists[.]ifin[.]network ifin-intel[.]org steelhausinc[.]com glasfloss[.]com redpacketsecurity[.]com 109[.]205[.]195[.]211 109[.]205[.]195[.]211:443 124a48b78060fa851e1cc077ca35713c 127[.]0[.]0[.]1 170[.]130[.]55[.]223 171[.]22[.]183[.]43 172[.]96[.]137[.]160 185[.]174[.]100[.]203 185[.]174[.]100[.]203:22 186b26df63df3b7334043b47659cba4185c948629d857d47452cc1936f0aa5da 188[.]40[.]187[.]145 188[.]40[.]187[.]145:443 192[.]121[.]22[.]94 193[.]242[.]184[.]150 194[.]127[.]178[.]21 2rxyt8yrhq0bgj[.]org 2rxyt9urhq0bgj[.]org 4[.]239[.]95[.]1:8080 5ka8rxp6t6eup2[.]org 6cimu4mc085em8[.]org 84[.]32[.]84[.]32 8c113b3aa82c81eee7c6b4ed0ba9a90f 8doj8uvx604eck[.]org a6df0b49a5ef9ffd6513bfe061fb60f6d2941a440038e2de8a7aeb1914945331 ab82bf27132323861810c0efcac6d5dd01600dd4 atexec[.]py ca8646dfc88423bb9fffda811160cebe certgraveyard[.]org d1hmxkpwby0d4s[.]org d66944e1a57daf04d3e809f22cd01946d593acaf de730d969854c3697fd0e0803826b4222f3a14efe47e4c60ed749fff6edce19d delete[.]me detection[.]fyi download-center[.]online download-server[.]online ev2sirbd269o5j[.]org ewujsfb1dp5ran[.]org febbaf5f08a8e0782ffcce8beef1f2b4e249a52b hxxps://tria[.]ge/250530-ttmjhayzhw hxxps://tria[.]ge/250812-zw4tfszpy4 ip-scanner[.]org ks501oz9nm3v05[.]org kwywztxoo2xdot[.]org ky1d1p1daahe5t[.]org mmcexec[.]py netml[.]shop opmanager[.]pro ovh1kn1tcqw5kp[.]org shopping5[.]shop sigmasearchengine[.]com smbexec[.]py soft-hub[.]pro soft-server[.]online urlscan[.]io v5rjsdqogstopr[.]org wmiexec[.]py yj6jurm5qqkye5[.]org zenmap[.]pro www[.]atlasoceanvoyages[.]com 1269759915aff3d94a6047eaa391f507108ceb70419d9c5084852a24368800e7 14[.]225[.]212[.]124 4b88f0a1a098005415f400fe16a962e7ff902e6bc40deaf76ca387459d7fabd4 a907ef33088ab8d524f3714a0fd375778bc67c910478ea2c3885ce84c555ee8d beaconbeagle[.]com 08b6ca300dc206930ec509f1793ee87d432b3f97f712ec2ab913473b1e927f7e d511e4bcaf75ce79ae766b3a2eb71fdf4d9696205d18e96156ad1b1d9068f4c4 de45752c3f4e396a011d252210147855dfa5a67e9f1bddc1ac243e59b022bc18 47[.]121[.]130[.]18 c3f69d944acb7e6ec94299cc188d787d305499fbc163e7d9c1d7434051562981 a3b37924944070474ddd77979c68c407fd88f6e3a624aa397556014dcc96ead8 deploy[.]sh developer-tech[.]com hxxps://git[.]disroot[.]org/git-ecosystem/{product}/raw/branch/main hxxps://rubygems[.]org rubydoc[.]info 048800a4e2285fbe2636ccd56f93d21d 054fea1d2173b3bbe27db27e658fb651 0b16458732001ef0fe8e5cdb048041b8 128[.]65[.]213[.]41 141[.]91[.]172[.]100 147[.]28[.]52[.]171 159[.]255[.]168[.]134 185[.]132[.]24[.]223 185[.]150[.]51[.]26 185[.]155[.]109[.]38 185[.]204[.]97[.]98 185[.]252[.]214[.]235 185[.]5[.]80[.]119 185[.]85[.]0[.]138 188[.]40[.]124[.]117 193[.]26[.]15[.]51 193[.]27[.]22[.]39 194[.]156[.]220[.]33 194[.]31[.]23[.]64 194[.]77[.]238[.]184 195[.]243[.]56[.]182 1bd2da7104676997c12585360038da50 212[.]86[.]132[.]169 217[.]70[.]160[.]234 24[.]40[.]191[.]66 27702c8caa5ad6f50387a68e87c0eff042b5ab72 2fwww[.]dorsten[.]de 2fwww[.]tradinghub[.]eu 4689d6b35a72aecbbfd7d5db2e460ea7a3362a69 5383e9b35f163641ce22b455de2591d0 5678a277a34d0e955c4873be2ac9d5b4 80[.]228[.]49[.]173 82[.]165[.]231[.]212 83[.]138[.]60[.]47 83[.]138[.]60[.]92 83[.]246[.]48[.]37 83[.]246[.]85[.]162 87[.]79[.]15[.]140 93[.]184[.]133[.]133 93[.]184[.]133[.]231 94d2036bbacee92c5612b8d1c782ee1d 9f6c5e96b780618a6e577eb7c0fce549 a322880c64d19003494b4dabfae2d945 b62de86d5511e771858c9edd471e0bf9 bundesnetzagentur[.]de frankfurt[.]de hessen[.]de hxxps://www[.]tradinghub[.]eu/de-de/Start/Datenschutz\ solingen[.]de www[.]bayernets[.]de www[.]bergischgladbach[.]de www[.]bezreg-duesseldorf[.]nrw[.]de www[.]bochum[.]de www[.]bonn[.]de www[.]bottrop[.]de www[.]bremerhaven[.]de www[.]dorsten[.]de www[.]duesseldorf[.]de www[.]duisburg[.]de www[.]essen[.]de www[.]gladbeck[.]de www[.]hamburg[.]com www[.]hamburg[.]de www[.]hannover[.]de www[.]krefeld[.]de www[.]niedersachsen[.]de www[.]nrw[.]de www[.]oberhausen[.]de www[.]rbk-direkt[.]de www[.]remscheid[.]de www[.]stadt-koeln[.]de www[.]wiesbaden[.]de www[.]wirtschaftsfoerderung-hannover[.]de beesint[.]com www[.]instagram-one-alpha[.]vercel[.]app jeetbot[.]cc securityonline[.]info www[.]tradinghub[.]eu 0210b24b393b5855037e2fd00ded6c217decf5c90ba6427819cc4b048c92790b 0d9813e3ccd8c0a547c091629e044602c91717b2e27e4d006809590149cd5038 150[.]187[.]25[.]242 28ef0d2000d585a4cf1146b76dfcdbfe74e20332b81f9a4e4fc2a838886c8883 4413bfd770cae12bdb8b36988a6f3207a04b6338eb71bd31433eeeb125850273 568df5e135f3ca6124f84893140dda0f7e28b65c55b41dd5a3c7c6802eeecdd7 595d5162f08ddf1055094fe017aacb70472ddd1ee06e84d6f024711bf3c7c85f 7dbe84658a31bf33b1d9d33d21b5be9f7d6ded5d9df297ff892d1f254fe471ef 866bef0abb4a8478e174abbe85f3a413c7ed728404f745ac9b01ac43d352b68c 87ef6071fedf9176a19dac226cbd7f9012d9ed5f187a6e628d7410a087e3f396 8c4358d6b371514ef6bb727aad00097c3f90174a357b929e82de2eb66ae985b2 b026f3042486f4d0e3c4d5e1abb2c3bf223605de1647eaea355d609e006bd926 c282cdae9895b310336a4c27b6110200ce7f493209906f162de4738d3a8a0809 cce9cb20f4086ccd0f5348b0e9377d066105de83cf00a4b509d71a86d97efa1e 222[.]255[.]215[.]42 160[.]250[.]132[.]238 chess[.]com security[.]nozominetworks[.]com 185[.]28[.]119[.]179:1234 84[.]54[.]44[.]48 ratatui[.]today saaadnesss[.]shop securemetricsapi[.]live sleepyduck[.]xyz 216[.]128[.]137[.]31 8[.]209[.]71[.]53 bing[.]com co[.]ug smokeloader[.]md 105[.]235[.]130[.]123 105[.]235[.]130[.]231 105[.]235[.]131[.]88 105[.]235[.]132[.]174 105[.]235[.]132[.]209 105[.]235[.]132[.]252 105[.]235[.]132[.]34 105[.]235[.]133[.]138 105[.]235[.]135[.]55 hxxps://api[.]valtersit[.]com/api/v1/ip/105[.]235[.]132[.]174 110[.]179[.]81[.]201 111[.]113[.]89[.]77 119[.]132[.]175[.]160 120[.]38[.]14[.]56 163[.]com 171[.]104[.]81[.]253 175[.]10[.]57[.]135 183[.]142[.]156[.]25 183[.]157[.]253[.]220 58[.]56[.]128[.]190 hxxps://api[.]valtersit[.]com/api/v1/ip/183[.]142[.]156[.]25 jobsoon[.]fun sancity[.]in vieijibfm[.]jobsoon[.]fun 103[.]176[.]79[.]139 103[.]181[.]143[.]216 103[.]186[.]1[.]9 103[.]31[.]39[.]189 103[.]59[.]94[.]89 103[.]76[.]120[.]114 157[.]10[.]160[.]71 157[.]10[.]252[.]74 210[.]79[.]190[.]251 hxxps://api[.]valtersit[.]com/api/v1/ip/103[.]181[.]143[.]216 idnic[.]net muki[.]or[.]id cyberpress[.]org cybersecuritynews[.]com first[.]org gbhackers[.]com bug404found[.]com libsqlite3[.]so lsd[.]cat privesc[.]so 0626e6641f6b467447c81dd7678a69c66f7746cf bpf-tracer[.]sh run-qemu[.]sh 91[.]233[.]185[.]13 91[.]233[.]187[.]100 dcenter[.]pl hxxps://api[.]valtersit[.]com/api/v1/ip/91[.]233[.]185[.]13 ip-185-13[.]ip4[.]ejedrzejow[.]pl horizon3[.]ai 3[.]8[.]1[.]0 3[.]8[.]1[.]7 4[.]2[.]0[.]1 4[.]4[.]0[.]0 cve[.]org services[.]nvd[.]nist[.]gov 8[.]218[.]50[.]207 hxxps://noht1ng[.]top/fuckujjbangx[.]html mail[.]uaiubifas[.]top qq[.]com sogou[.]com tencent[.]com woa[.]com www[.]kashkha[.]com 177[.]181[.]4[.]224 179[.]209[.]228[.]95 179[.]218[.]17[.]248 186[.]206[.]175[.]230 187[.]180[.]160[.]115 187[.]2[.]106[.]208 187[.]39[.]159[.]24 187[.]3[.]212[.]235 189[.]29[.]175[.]232 bd1dafe8[.]virtua[.]com[.]br hxxps://api[.]valtersit[.]com/api/v1/ip/189[.]29[.]175[.]232 capricornlogistics[.]com www[.]facebook-six-ivory[.]vercel[.]app daryn[.]online 2559730380c8b2f0e0048994b8352670eda6a164b3bab5d05652389d66992793 39[.]96[.]201[.]230 9a1d315d095e9d78a17561e80335f097f99f05e1b8b8bf16a8167549f4675a25 185[.]105[.]143[.]6 194[.]181[.]1[.]100 195[.]14[.]3[.]115 195[.]14[.]3[.]247 195[.]78[.]67[.]61 46[.]242[.]128[.]65 4bondnet[.]bondspot[.]pl 7609f821c295a1f846bb870c66d33ab8 77[.]65[.]213[.]183 77[.]65[.]213[.]82 85[.]128[.]230[.]114 87[.]204[.]19[.]140 87[.]204[.]19[.]99 91[.]223[.]135[.]93 91[.]237[.]149[.]139 94[.]152[.]166[.]22 aeced2201a2411f092daafc5f570033e dezamet[.]com[.]pl grupaazoty[.]com inpzu[.]pl inwestor[.]grupaazoty[.]com powiat[.]krakow[.]pl pulawy[.]grupaazoty[.]com pwe[.]pzu[.]pl www[.]belma[.]pl www[.]bondspot[.]pl www[.]cba[.]gov[.]pl www[.]gamrat[.]pl www[.]geoportal[.]gov[.]pl www[.]netia[.]pl www[.]powiatzary[.]pl www[.]psl[.]pl zaloguj[.]netia[.]pl 34[.]77[.]240[.]35 cyberveille[.]ch you[.]com 45[.]142[.]193[.]132 hxxps://cyberscoop[.]com/gitlab-critical-flaws-path-traversal-scans/ hxxps://thehackernews[.]com/2026/09/cisco-fmc-flaws-exploited-to-steal[.]html hxxps://thehackernews[.]com/2026/09/claude-used-to-automate-exploitation[.]html hxxps://thehackernews[.]com/2026/09/papercut-attacker-uses-hundreds-of-ai[.]html hxxps://www[.]aveva[.]com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-006[.]pdf hxxps://www[.]bleepingcomputer[.]com/news/security/artifactory-flaws-chained-in-attacks-deploying-backdoor-malware/ hxxps://www[.]bleepingcomputer[.]com/news/security/trezor-347-000-users-targeted-in-phishing-attacks-after-brevo-breach/ hxxps://www[.]securityweek[.]com/4-1-million-impacted-by-adapthealth-data-breach/ hxxps://www[.]securityweek[.]com/bluemoon-exploit-kit-chains-recent-chrome-windows-zero-days/ threatnoir[.]com 181[.]45[.]133[.]140 181[.]45[.]196[.]40 181[.]46[.]39[.]21 181[.]46[.]66[.]125 181[.]46[.]66[.]223 181[.]46[.]9[.]217 181[.]47[.]223[.]162 186[.]19[.]123[.]83 186[.]22[.]238[.]196 cpe-181-47-223-162[.]telecentro-reversos[.]com[.]ar hxxps://api[.]valtersit[.]com/api/v1/ip/181[.]47[.]223[.]162 telecentro[.]net[.]ar 1[.]2[.]3[.]4 apnic[.]net hxxps://api[.]valtersit[.]com/api/v1/ip/1[.]2[.]3[.]4 104[.]207[.]82[.]105:4443 106[.]75[.]86[.]108:3333 54[.]37[.]156[.]213:3333 54[.]38[.]203[.]26:4433 103[.]39[.]79[.]216:3333 169[.]58[.]128[.]13:4444 208[.]123[.]76[.]183:3333 45[.]142[.]203[.]37:3333 64[.]227[.]1[.]44:3333 101[.]195[.]132[.]66 101[.]195[.]132[.]66[.]censys-scanner[.]com 66[.]132[.]172[.]43 66[.]132[.]186[.]173 66[.]132[.]195[.]101 66[.]132[.]195[.]107 66[.]132[.]195[.]33 66[.]132[.]195[.]39 66[.]132[.]195[.]40 66[.]132[.]195[.]43 66[.]132[.]195[.]47 censys[.]com hxxps://api[.]valtersit[.]com/api/v1/ip/66[.]132[.]195[.]101 217-180-52-170[.]theonebroadband[.]co[.]uk 217[.]180[.]52[.]133 217[.]180[.]52[.]154 217[.]180[.]52[.]170 89[.]31[.]212[.]215 hxxps://api[.]valtersit[.]com/api/v1/ip/217[.]180[.]52[.]170 theonebroadband[.]co[.]uk hexsdk[.]com holadns[.]com lunaproxy[.]com packetsdk[.]xyz as210558[.]net haveibeenpwned[.]com politie[.]nl remotesystem[.]in simplecarrier[.]net venomlicense[.]com virtualine[.]org 103[.]253[.]42[.]34:31337 129[.]226[.]150[.]240:31337 169[.]58[.]252[.]86:31337 192[.]155[.]92[.]211:31337 38[.]76[.]215[.]245:31337 103[.]227[.]225[.]194:31337 104[.]253[.]79[.]117:31337 130[.]94[.]105[.]104:31337 40[.]90[.]235[.]75:31337 45[.]38[.]20[.]151:31337 103[.]121[.]92[.]249:31337 144[.]31[.]89[.]11:31337 185[.]112[.]59[.]221:31337 198[.]251[.]91[.]17:31337 43[.]156[.]184[.]213:31337 109[.]233[.]21[.]109:31337 179[.]199[.]198[.]208:31337 38[.]76[.]205[.]40:31337 43[.]130[.]127[.]89:31337 45[.]221[.]118[.]139:31337 daily[.]dev publicdomainregistry[.]com digi[.]no ftrcrp[.]org idscan[.]net proton[.]me udi[.]no 165[.]154[.]68[.]30 5b69a3566fe51474f0f44386c98ae5a6a91d2ea15d2a34f23e836ab1bbe57846 3b420ca6dfa54f3cc78e32e8da9e2196082325673893d779db89860c9430da63 43[.]173[.]64[.]0 s-account[.]workers[.]dev 116[.]26[.]104[.]168 116[.]26[.]108[.]185 116[.]26[.]87[.]177 116[.]31[.]189[.]22 116[.]31[.]190[.]217 183[.]44[.]234[.]50 183[.]50[.]32[.]140 183[.]7[.]173[.]166 183[.]7[.]198[.]175 chinatelecom[.]cn hxxps://api[.]valtersit[.]com/api/v1/ip/183[.]44[.]234[.]50 109[.]236[.]50[.]145:8888 111[.]231[.]116[.]164:4443 115[.]190[.]161[.]178:1234 116[.]198[.]233[.]179:6666 119[.]45[.]160[.]160:8889 120[.]76[.]143[.]184:443 137[.]220[.]151[.]95:8888 152[.]32[.]132[.]177:8899 196[.]251[.]121[.]183:4433 1[.]15[.]76[.]39:8443 203[.]91[.]75[.]89:5006 217[.]154[.]212[.]25:7443 46[.]151[.]182[.]190:4443 47[.]109[.]198[.]8:6000 82[.]156[.]219[.]31:8443 8[.]163[.]49[.]50:80 154[.]12[.]94[.]16:2087 154[.]12[.]94[.]16:8443 190[.]100[.]133[.]222 190[.]100[.]96[.]165 190[.]161[.]9[.]51 190[.]164[.]12[.]61 200[.]83[.]191[.]225 200[.]83[.]30[.]27 200[.]83[.]9[.]209 201[.]239[.]53[.]235 201[.]241[.]220[.]116 hxxps://api[.]valtersit[.]com/api/v1/ip/201[.]241[.]220[.]116 pc-116-220-241-201[.]cm[.]vtr[.]net watchops[.]com www[.]tiflispalace[.]ge www[.]tender[.]mx www[.]ibnsinatrust[.]com eracm[.]fr lasultanahotels[.]com pss[.]ht www[.]metalware[.]ca meridian16[.]hr www[.]eac-airports[.]com 162[.]128[.]129[.]106 185[.]65[.]134[.]246 193[.]32[.]249[.]161 45[.]148[.]10[.]242 unite[.]ai 578d28f6c9f2379164516e689418f92ac74a3445 8d432b090e08f141ce9156dc728afbed4636301b osv[.]dev ifin[.]network forkast[.]news hendryadrian[.]com hxxps://rubygems[.]org` rubygems[.]org rubyhack[.]ai 82[.]215[.]102[.]212 82[.]215[.]103[.]133 82[.]215[.]103[.]53 82[.]215[.]103[.]77 82[.]215[.]104[.]133 82[.]215[.]105[.]124 82[.]215[.]107[.]9 82[.]215[.]107[.]9[.]ip-trans[.]turontelecom[.]uz 82[.]215[.]110[.]103 82[.]215[.]96[.]204 hxxps://api[.]valtersit[.]com/api/v1/ip/82[.]215[.]107[.]9 turontelecom[.]uz 31[.]70[.]103[.]174 e69536e0cca346e8d4381dcc7bf4e36c16e2bf5d47120c23502b8d4a5d0c518a f54249184e1237a5291c13f131177a993ba9adc690601baad39d7103e2e471ab 6e0870ebef11852763b40cf16ef84df448c9d38c0fbcb06acbb493fd8c8faf00 9057c5063a0264161bc133f12dbd01b059ed953f7df35cf85c46b962fd97ea88 38[.]147[.]185[.]54 68ef10da8d94c4e38d0d074c772b2927c38356300e290b02739aaf0b787d8639 e4e2f672cb22c5e00bdaaf75419270cec836dfb3f8830f2ab9e33debe9ff4026 r[.]jina[.]ai 4e791c25ea3e6fe490e9b53a1b13eaafef56d9cfc75930b380fc49fb843212b9 8bf7886775bfd69b6867b44a6bad2ee06df4243d814c6245975e78bb1ca2f4ab analytics[.]green-it[.]lu dff61a394c14f23537b490f7ea1530a456c57bca24bfc317691ce118aa34ee6a microsoft[.]otp[.]lu 147[.]185[.]133[.]176 34[.]12[.]107[.]164 34[.]175[.]76[.]5 34[.]181[.]164[.]170 34[.]19[.]143[.]212 34[.]7[.]231[.]138 34[.]81[.]210[.]27 35[.]229[.]172[.]195 8[.]228[.]90[.]24 hxxps://api[.]valtersit[.]com/api/v1/ip/147[.]185[.]133[.]176 paloaltonetworks[.]com 185[.]153[.]198[.]115 docu[.]sign-platform[.]app alchemy[.]com check[.]mentor-square80[.]click drpc[.]org infura[.]io polygon[.]drpc[.]org intherpro[.]com swadeshicipl[.]com 108[.]167[.]191[.]6 161[.]153[.]113[.]113 161[.]33[.]202[.]176 162[.]144[.]3[.]250 162[.]241[.]151[.]164 162[.]241[.]218[.]193 163[.]176[.]172[.]27 84[.]13[.]142[.]21 92[.]5[.]66[.]49 hxxps://api[.]valtersit[.]com/api/v1/ip/161[.]33[.]202[.]176 oracleemaildelivery[.]com mend[.]io abourametals[.]com instagramcheck[.]blogspot[.]com swiftbook[.]io 217[.]162[.]66[.]225 3c1f069c679a3e9a1a85243cac3dbc865fb9495c38eada139fb7c14c3cc5ebe6 40ab1716db53405152e4f725d160fabbff0fef8da9695b6a46431eba12e6e64d 0715b3e3f00b8c5a50f92b6709eb2c3c96686dd50ec944a2338b6efb4577da1c 0c33482938943c018679789fc7870f8c9191fd438604cd5da9b944d9868c4e48 1d39791f57d9c6bbe35b242e244c278525218c47cf69ed32a641cf84dd6d7085 2e95032a178672c400ae762e2cc7804e50aca9ca9a074ce96d08e73d1c98de0f 3f6a8450fc67861110c3a4dbf7e453f71b8fcb95e66e25925036fd6e5c8da80f 54301a802f3096a314550f8a1bed60a5967c7d9402d50ea6629ccb55074d0274 59e0fc52850c3141a2083d6751ff24d526f2c876cacc1ddf51e3b2829c165f6f 61bc2d1cab10db6a102ee58535658effe6165d90ddc750a9e4d83b7cba8947f2 7009a74ecf9656afa166d056d5b3498dc7c5640541f5492d3295180b66026953 71472f3cb47dc1884afbb4c0dcba12fb952e939b9e1525c0dd018fe8a7985db8 87f111144cc1da215ea0744aeabb18a1431639035e58f36bb1c228ee702d620a 97add1b9f68fa32ba5c4b28da72449f44bcf35a09f223dd57d896fb5e5858187 a541b0f2e1c33cfef3ba9004d2fb9d4155e17216702adb76fe833dc7721e6d26 assiprime[.]it c51bc270aac28815cec2faa64abfbd3980f6c10dac5424e7cf7b6951b342e62c cannonpuntana[.]com cenmar-manila[.]com gayafores[.]es gsngestion[.]es hbpro[.]pt mcnishsteel[.]com palmettoeyeinstitute[.]com recoverycafe[.]org reichenau[.]at www[.]gtdist[.]com www[.]redstaroil[.]com 185[.]247[.]137[.]204 185[.]247[.]137[.]58 195[.]96[.]139[.]159 195[.]96[.]139[.]218 195[.]96[.]139[.]228 195[.]96[.]139[.]33 195[.]96[.]139[.]75 87[.]236[.]176[.]171 87[.]236[.]176[.]99 driftnet[.]io hxxps://api[.]valtersit[.]com/api/v1/ip/195[.]96[.]139[.]33 r5-33-21[.]monitoring[.]internet-measurement[.]com 0829b654568aa0cd9f48e1920cc58cf440d550eb 0be5185bd226b51429cec17951f238f51df5440f 0ea5f35312a28876dbd9b7066c5179a0 136[.]144[.]203[.]97 140f3a5b0953eff85359f233b552ae5a 141[.]90[.]2[.]74 17f110235a0ad32e312d0f9cbfb71afd 185[.]166[.]22[.]42 185[.]215[.]158[.]186 185[.]233[.]53[.]156 185[.]99[.]57[.]68 194[.]49[.]61[.]130 213[.]23[.]231[.]133 213[.]23[.]231[.]136 213[.]23[.]231[.]137 213[.]23[.]232[.]67 265ba518f22656967f48a24b03f6d01a 2fmatomo[.]maritimes-cluster[.]de 2fstats[.]eswe-verkehr[.]de 31[.]24[.]146[.]81 33a2026ed220c64e45863df3426b60e3e73b6459 36ece9ddaf41a86b2b9de6f7681f5dcf 38a5a707e85412a4494b50f9c00aedad7d085ca1 410d046ae7119745889ed33706912946feb2d93c 428b89133f3e54095dfd948dfa69d7f5 45[.]142[.]20[.]41 46[.]19[.]89[.]217 46[.]243[.]125[.]53 46[.]243[.]125[.]96 47c4d25aa7548d7e0d7feef5c3eef773 5ec578b1b61f9d88aeab7d889c2b96a89a2a4f33 6237b4f45945e778612b3b7423f23eca 62[.]93[.]246[.]101 6b8121dca83977f069bbcd459825262b 6fa63b13f04e7000958f2f7fdef45cb3 73cd6ba84bd2ae3fe369304c85249d1c 7b61426eb4a35228dc25070867703d9f00af9847 80[.]158[.]60[.]86 80[.]72[.]140[.]182 84d7e5f24a9375d53fedc2ee872d9ad9 85258cf692c02e4d875985c93f991ba3 85[.]239[.]102[.]231 88[.]215[.]194[.]4 8c57e7072484ff760935fedcff21fc29 91[.]249[.]143[.]16 93[.]159[.]110[.]201 94[.]152[.]147[.]131 9eea59b5143f58e9311487169c115c041c6bfda8 9f25789b585ae86263a30c3612ab2295 9f37b70394a7cb0eefe33622b2193ded avb[.]rmv[.]de bf-backend[.]rmv[.]de c33d51cd8561d35467b8f50b45d49355 ddd603b21c7295b6c0e3359ade3c9517227f3d1d de2ddbfb9557ada2d53982e1aa09a364 dtms[.]wiesbaden[.]de e35237702300711e631af727d3680b2cb08ffa9d ecm[.]karlgross[.]de etracking[.]karlgross[.]de f74bb03fab3bbff8829eb8573e976bc8a8b7d670 f89dce9bd4b58c6dc398c4a5756f98deb10d76eb f94f90b86de5c51a9cf431fcf21248c408e06de6 fa4e5d217ad3845a362cbfaa662bf3b8 fbb795a642e125d3599ea9bfc38ed0e9 gascade[.]de geo[.]rmv[.]de gts[.]rmv[.]de hxxps://einnahmen[.]rmv[.]de/EviLNO_INT/evilno/|6FA63B13F04E7000958F2F7FDEF45CB3|de[.]gvp[.]evilno[.]client[.]service[.]LoginService|checkLogin|java[.]lang[.]String/2004016611|java[.]lang[.]Boolean/476441737|$_1|$_1|1|2|3|4|4|5|5|6|6|7|8|6|0|-1| hxxps://einnahmen[.]rmv[.]de/EviLNO_INT/evilno/|6FA63B13F04E7000958F2F7FDEF45CB3|de[.]gvp[.]evilno[.]client[.]service[.]LoginService|passwortVergessen|java[.]lang[.]String/2004016611|$_1|1|2|3|4|1|5|6| input[.]email matomo[.]maritimes-cluster[.]de membership-application[.]maritimes-cluster[.]de piwi[.]wiesbaden[.]de stats[.]eswe-verkehr[.]de thyssengas[.]com wohnungswirtschaft[.]wiesbaden[.]de www[.]auswaertiges-amt[.]de www[.]caritas[.]de www[.]erfurt[.]de www[.]eswe-verkehr[.]de www[.]gasunie[.]de www[.]ihk-muenchen[.]de www[.]jadeweserport[.]de www[.]karlgross[.]de www[.]kreis-oh[.]de www[.]maritimes-cluster[.]de www[.]maskpol[.]com[.]pl www[.]nasa[.]de www[.]rmv[.]de www[.]saalekreis[.]de 111[.]228[.]49[.]20 a270430e8008a4429eb7ac4675430dfbafdff32cb9b3ff116172004c2692c48d b3a62d6e2c2a87e6e1579039943b34f2bbe31c70cd80da845dc20e621f3c5ba6 162[.]35[.]122[.]126 c08f027b6b2df4a9e3ba1d932a91c1a211132f4b00bb8b5cf102e41977e7e8dc c9bc2ac1ff78237644c5ee699a63115b669eea9031af622756ea47fa8126b253 213[.]209[.]159[.]154 hxxps://cyberveille[.]ch/map 138[.]84[.]54[.]106 148[.]222[.]205[.]210 148[.]227[.]115[.]251 148[.]227[.]87[.]81 168[.]140[.]254[.]71 179[.]238[.]21[.]152 179[.]64[.]115[.]39 179[.]64[.]69[.]23 74[.]244[.]195[.]96 customer[.]splobra1[.]isp[.]starlink[.]com hxxps://api[.]valtersit[.]com/api/v1/ip/179[.]238[.]21[.]152 spacex[.]com 115[.]242[.]60[.]75 115[.]245[.]115[.]158 115[.]246[.]223[.]196 152[.]56[.]142[.]165 152[.]58[.]16[.]117 49[.]36[.]114[.]221 49[.]37[.]154[.]206 49[.]47[.]132[.]19 49[.]47[.]132[.]4 hxxps://api[.]valtersit[.]com/api/v1/ip/152[.]56[.]142[.]165 ril[.]com policenationale[.]cc 177[.]192[.]252[.]78 177[.]64[.]213[.]19 177[.]82[.]187[.]246 179[.]158[.]129[.]13 179[.]232[.]217[.]50 186[.]204[.]63[.]148 186[.]221[.]114[.]200 189[.]34[.]141[.]21 189[.]6[.]235[.]20 b140d513[.]virtua[.]com[.]br hxxps://api[.]valtersit[.]com/api/v1/ip/177[.]64[.]213[.]19 144[.]172[.]115[.]59:8041 41d2097e8ac636a478aa011e12128c03b3b9bb3c8efca43d3c4f214ac8b1f07b 9f5910d69a4fbc56ff1854e7e0df3199fbfddd7fe6b374f7d816fa6ae70ef991 adoube[.]vu f048400c23add8c75abe189393d33c873c02c74eeaf43d47b950c8d643763b35 fc96a04c615847f0fb1391f04d9d1aac7f78ddfb7d459168df0a4172b98354e2 get[.]adobe[.]com hosthiifran[.]screenconnect[.]com instance-uxh86b-relay[.]screenconnect[.]com relay[.]goldenmelon[.]us relay[.]illuminantgroup[.]net scx[.]illuminantgroup[.]net selectstructure[.]com[.]au victory[.]mkc1[.]digitaloceanspaces[.]com wir[.]consultingics[.]com compunnel[.]com mallory[.]ai 3113290cdd182c622f2eac33c7ce537f335ea78a13e71f9f517b09c87edbbd16 4a5f5b44079ab3db7e1f8f9a0f553df8482133ac14c29d07c440480386180eb8 5[.]104[.]86[.]108 08472df1973d6106f9380786c099a59c8234d61209b74ca9bf92cd5685430659 1b7308fad6e4dba2320ff96434c50f4bb5300687861f39c2331dd6e2aded3649 0d08e4211427535c770bb74629cace8b037a6fae97140b66d2451921a9e40c5d 42[.]194[.]241[.]92 be6098c084f481214047cf928028553fc1e81afc0a53e1f104949bc3f9ff71ef 213[.]218[.]160[.]253 bc30fcbd13a2f6d9f309189afd2a2bd5412c37caddfff33547fbf245c25df621 b685a7ef03cfc760f4719c1e2f9f640f285467132b3b995095e5dacf9e933540 192[.]253[.]248[.]181 86[.]54[.]25[.]213 87[.]120[.]104[.]88 apple[.]eu03hub[.]com docsend[.]online hxxp://192[.]253[.]248[.]181/api/v1/getscpt/ hxxp://86[.]54[.]25[.]213/log` hxxps://1foqo[.]lat/core4` hxxps://apple-googleapi[.]com/i hxxps://docsend[.]web12api[.]com/api/launcher/start` hxxps://eu03hub[.]com/get_file?file=X` microsoft[.]eu02hub[.]com msedgewebview1[.]pro msedgewebview2[.]pro signow[.]web12api[.]com web12api[.]com sophos[.]co gmbh[.]com oneplace[.]marketplanet[.]pl platforma[.]org www[.]m-net[.]de www[.]powiat[.]kielce[.]pl 148-222-97-38[.]race[.]com 148[.]222[.]97[.]38 69[.]173[.]180[.]110 hxxps://api[.]valtersit[.]com/api/v1/ip/148[.]222[.]97[.]38 race[.]com 0396d5a9bd82aed91e8b07a5651d81ee 104[.]20[.]33[.]251 104[.]248[.]102[.]190 142[.]132[.]185[.]245 148[.]251[.]80[.]144 157[.]97[.]108[.]88 16c6a190f3ab412c4a0931de12812aa7 178[.]250[.]163[.]22 188[.]40[.]148[.]139 188[.]40[.]218[.]17 188[.]94[.]28[.]245 195[.]205[.]148[.]130 195[.]8[.]101[.]28 195[.]8[.]101[.]29 195[.]8[.]101[.]63 1ticket[.]de 20[.]52[.]197[.]32 212[.]122[.]43[.]4 213[.]73[.]31[.]19 217[.]153[.]27[.]60 252fswpp2[.]gkpge[.]pl 2foneplace[.]marketplanet[.]pl 2fplatforma[.]org 40gmai[.]com 462e6d9af1f66e19325eebd250dd1c9d 4685558b5a35aa76f980cdecc817cccf 46[.]242[.]131[.]189 5[.]9[.]173[.]35 62862c29c4c492ce0d8e55bc99abac24 62[.]116[.]165[.]244 80[.]48[.]169[.]1 81[.]21[.]192[.]204 85[.]128[.]196[.]78 85[.]13[.]163[.]235 89[.]161[.]250[.]101 91[.]223[.]33[.]82 93[.]104[.]207[.]139 93[.]104[.]207[.]150 93[.]104[.]207[.]151 9ec2d5f95c5f995006860584c87120e7 a6939557b007db6111269fc0343d739d13d6e636 a8eeb2b6c796c8847d8925b6e73e423c6fe905d9 anmeldung[.]mdv-verbundgebiet[.]de auth-portale[.]m-net[.]de auth[.]m-net[.]de bc3672510830a0f3843b49e9f86b72bd bestellen[.]glasfaser[.]swhl[.]de biznes24[.]pgnig[.]pl c10bb22bb937701c090150338f5081ac duisport[.]de e457e559f7ee22e05825519e612286a7 ebok[.]pgnig[.]pl f3d87bda6d857b6a17683b0c0dfa1ff317882962 faehren[.]net login-netzplan[.]swhl[.]de nominacje24[.]pgnig[.]pl oge[.]net pgnig[.]pl pho[.]pl start-ni-mitte[.]de stellenangebote[.]swhl[.]de warmia[.]mazury[.]pl www[.]hafen-trier[.]de www[.]kielce[.]eu www[.]nowega[.]de www[.]ontras[.]com www[.]orange[.]pl www[.]stex-gmbh[.]com zary[.]pl zugang2[.]wiesbaden[.]de exatrack[.]com darktheme[.]club fosstodon[.]org kylereddoch[.]me mas[.]to mastodon[.]online 154[.]217[.]251[.]226 154[.]91[.]56[.]111 154[.]91[.]56[.]113 154[.]91[.]61[.]107 154[.]91[.]62[.]100 183[.]90[.]187[.]111 183[.]90[.]187[.]73 38[.]14[.]248[.]138 38[.]55[.]151[.]63 hxxps://api[.]valtersit[.]com/api/v1/ip/154[.]91[.]61[.]107 cyfirma[.]com 2[.]3[.]66[.]8 2[.]9[.]173[.]59 80[.]13[.]68[.]187 90[.]89[.]97[.]37 92-129-204-132[.]ftth[.]fr[.]orangecustomers[.]net 92[.]129[.]204[.]132 92[.]170[.]112[.]46 92[.]184[.]96[.]220 92[.]184[.]96[.]66 92[.]184[.]96[.]84 hxxps://api[.]valtersit[.]com/api/v1/ip/92[.]129[.]204[.]132 orange[.]com gov[.]uk z[.]ai 110[.]53[.]234[.]120 121[.]27[.]238[.]110 122[.]96[.]28[.]50 124[.]95[.]70[.]110 175[.]17[.]189[.]184 175[.]19[.]75[.]108 182[.]115[.]190[.]36 184[.]189[.]17[.]175 184[.]189[.]17[.]175[.]adsl-pool[.]jlccptt[.]net[.]cn 220[.]202[.]112[.]87 58[.]19[.]105[.]203 chinaunicom[.]cn hxxps://api[.]valtersit[.]com/api/v1/ip/175[.]17[.]189[.]184 43[.]155[.]9[.]112 70611a025333775a1665be90064e433eaa716df7d3ef9671fae072ef1693ecd3 ef55c2f7a0052a134b6d6010b314c1c955f585a88c5e1e854dc4c44042647f89 54ac866f2e8f9d4420458ffdcda9863bb5836b0278313d682e9f197fea9664fd 8a35bf96c0aa90d1b2ca95bfa5162b7e5ddcd1077d9099a6f52dd1f8761ab5c3 044c1c683fa654687ed32c1e2e7859faed0606f2ff50e5d9abe61e32ec35aacb 217[.]154[.]212[.]25 fbf11fc0e94b49aa03a393cbca52b7004ce8d67adf799dff3b7c640ef8a07177 fd25b51ae6ce18c3ac71fb90f643371b029c579e62868d8c428b2cb5ce4011eb 73ade67b61c8eecb56bac68a10a8dc2756cd49029245a9c266292b56b8d9538d 8e5890d7fc0bb1cb2e2e0b97dc673b0864314dfc034552bff086042173a08eab f291332e48ee68e2151f878d4e3435c13480b81ddf9a2d3376b3e505d3c9ff1e trezor[.]io gigabud[.]loan gitlab[.]com 89[.]34[.]90[.]217 dallasbackstage[.]com gemscocl[.]com ipinfo[.]io leappoploaderinstantly[.]monster namu[.]wiki socialseoguru[.]com 167[.]61[.]38[.]153 167[.]62[.]0[.]214 179[.]24[.]79[.]40 186[.]48[.]160[.]158 186[.]49[.]245[.]249 186[.]52[.]207[.]32 186[.]53[.]246[.]49 186[.]53[.]3[.]27 190[.]64[.]90[.]158 antel[.]net[.]uy hxxps://api[.]valtersit[.]com/api/v1/ip/179[.]24[.]79[.]40 r179-24-79-40[.]dialup[.]adsl[.]anteldata[.]net[.]uy ericzimmerman[.]github[.]io drive[.]google[.]com 187[.]188[.]26[.]254 187[.]189[.]155[.]109 187[.]189[.]248[.]107 187[.]189[.]36[.]97 187[.]189[.]68[.]75 187[.]189[.]98[.]162 187[.]190[.]163[.]120 189[.]203[.]89[.]122 189[.]203[.]89[.]196 fixed-187-189-36-97[.]totalplay[.]net hxxps://api[.]valtersit[.]com/api/v1/ip/187[.]189[.]36[.]97 totalplay[.]com[.]mx 29c7ee41d0cc9e07d981e451df56d0c3d37c41ac4ec10c7b516cc033ee397a63 749160a2f20f82744026719cf72e483595c6aad718efa74d675a98662e02422e d7a3c7eb94edc0e020f74c678743d71d61e944634aade4a67a96c3589e828b3a noht1ng[.]top gis[.]gov[.]bd 179[.]211[.]185[.]128 187[.]183[.]24[.]90 187[.]21[.]106[.]198 189[.]100[.]70[.]196 189[.]29[.]116[.]103 189[.]34[.]167[.]10 189[.]6[.]238[.]6 191[.]178[.]59[.]49 191[.]183[.]40[.]26 b3d3b980[.]virtua[.]com[.]br hxxps://api[.]valtersit[.]com/api/v1/ip/179[.]211[.]185[.]128 c3571730d344c86505c2453f7990bd1f86e3c925ead69bac7f812c27e9f818d5 47[.]236[.]173[.]77 177[.]203[.]136[.]254 187-5-185-168[.]fnses700[.]e[.]brasiltelecom[.]net[.]br 187[.]5[.]185[.]168 189[.]11[.]233[.]113 200[.]138[.]112[.]45 201[.]11[.]41[.]199 201[.]11[.]7[.]102 201[.]2[.]140[.]186 201[.]41[.]151[.]104 201[.]89[.]98[.]118 hxxps://api[.]valtersit[.]com/api/v1/ip/187[.]5[.]185[.]168 177[.]140[.]217[.]16 177[.]194[.]83[.]237 179[.]157[.]54[.]89 179[.]159[.]208[.]168 179[.]217[.]154[.]198 186[.]206[.]180[.]18 189[.]102[.]33[.]127 191[.]177[.]197[.]94 191[.]178[.]195[.]207 b1c253ed[.]virtua[.]com[.]br hxxps://api[.]valtersit[.]com/api/v1/ip/177[.]194[.]83[.]237 hxxps://indialei[.]in/detailed-information/353561/335800GR1DJMM8YD7J14/the-gudivada-co-op-urban-bank-limited/ capgo[.]app 288e80dcec2c6d5922f1c8995ce70caac86a9b7fdccd2dcd4aabf3550367236a 38[.]76[.]183[.]197 f3f02406fa0199faf4a076f37d52c5fec56f058e5742dc966395c14226311664 3a4d6db66604261d4f7df15d265c11d962a9a23b4b172bc033b5fa6ba70b0f4f 80efc75f5008324ed20843f8c5f78b9d07726aab73b58f863d82fa1ef39eaeaa alphaomega-eng[.]com abliteration[.]ai mankatoclinic[.]com artiflexmfg[.]com 141[.]98[.]10[.]154 141[.]98[.]10[.]205 141[.]98[.]10[.]216 141[.]98[.]11[.]70 141[.]98[.]9[.]100 141[.]98[.]9[.]119 141[.]98[.]9[.]120 185[.]169[.]4[.]194 185[.]169[.]4[.]236 hxxps://api[.]valtersit[.]com/api/v1/ip/141[.]98[.]9[.]119 serveroffer[.]lt 184[.]95[.]51[.]165 28a9982cf2b4fc53a1545b6ed0d0c1788ca9369a847750f5652ffa0ca7f7b7d3 64[.]95[.]12[.]71 8afd6c0636c5d70ac0622396268786190a428635e9cf28ab23add939377727b0 evidence-deleted-procedure-bringing[.]trycloudflare[.]com existed-bunch-balance-councils[.]trycloudflare[.]com ferrari-rolling-facilities-lounge[.]trycloudflare[.]com galleries-physicians-psp-wv[.]trycloudflare[.]com hxxp://deadly-programming-attorneys-our[.]trycloudflare[.]com\ nowhere-locked-manor-hs[.]trycloudflare[.]com ranked-accordingly-ab-hired[.]trycloudflare[.]com 217[.]77[.]102[.]18 77[.]245[.]220[.]136 81[.]22[.]51[.]129 81[.]22[.]51[.]64 hxxps://api[.]valtersit[.]com/api/v1/ip/81[.]22[.]51[.]64 metromax[.]ru n51-h64[.]smr-rsk[.]metromax[.]ru gobot[.]su homess[.]web[.]id xantibot[.]net 187[.]187[.]202[.]124 187[.]187[.]202[.]243 187[.]187[.]203[.]249 187[.]187[.]205[.]246 customer-mred-246[.]static[.]metrored[.]net[.]mx hxxps://api[.]valtersit[.]com/api/v1/ip/187[.]187[.]205[.]246 izzi[.]mx computerweekly[.]com cyberverso[.]net cypro[.]co[.]uk futurumgroup[.]com inc[.]com itbrief[.]co[.]uk nccgroup[.]com securityweek[.]com 1429079c1722d8ce248c2dca181f9369dd63d1db373985876438a6698cbfd11e 248fea9bfb128bfe5a613f9606cac6d3d19e67cf3599c7c6744554942b1fcf70 3f6d9fb3a1795c66e74d490c9d0280d21aeb256d6ce2dd4745106a357a18a240 62c2950c9c9d03926eb8cd20062eeec36b2fb3802d35f01ae52dc745f09b2061 6edf46d8bce4fa8a60043fa27c1ecd8ef972ef8b711c9425ad3d703b6ee74708 77e9a7e855a90e039ca38e0d08e17f9527ec292151d590bb057fc55273c9cd07 8f01112d28fc797ce45b57b963c3db374739b5ae9161d3381a0952b905d5b30a contreras[.]com[.]ar ems1r[.]com f63c74c1ca7122894e860591fe639c854427732bc656b950ffeea3fc5f8f00a4 fdcputman[.]nl salesboomerang[.]com sanjoseattorneys[.]com ttgasia[.]com 0aa800cc6759b02a3e2f33559dfcfb76e166f75436057284577983bd8c248ecd 59[.]110[.]153[.]133 add-passkey[.]com company-name[.]integratedsso[.]com company-name[.]secure-passkey[.]com companyname[.]maliciousdomain[.]com contoso[.]add-passkey[.]com integratedsso[.]com keysyncos[.]com modifiedprop[.]name myconnectkey[.]com oktasession[.]com oskeyconnect[.]com oskeyregister[.]com oskeysetup[.]com oskeysync[.]com passkeyhelpdesk[.]com portalsetuphub[.]com secure-passkey[.]com setupmypasskey[.]com syncmykey[.]com validationsetupac[.]com harley-davidson[.]com henrypratt[.]com 104[.]32[.]164[.]37 172[.]116[.]247[.]110 23[.]242[.]193[.]144 66[.]8[.]135[.]142 72[.]134[.]10[.]124 75[.]82[.]100[.]9 76[.]33[.]126[.]169 76[.]33[.]189[.]38 76[.]86[.]5[.]47 charter[.]net hxxps://api[.]valtersit[.]com/api/v1/ip/76[.]33[.]126[.]169 syn-076-033-126-169[.]res[.]spectrum[.]com 157[.]97[.]111[.]103 178[.]33[.]48[.]172 185[.]233[.]55[.]89 185[.]51[.]13[.]216 193[.]239[.]44[.]108 193[.]243[.]142[.]50 193[.]243[.]143[.]102 193[.]243[.]143[.]103 193[.]243[.]143[.]97 193[.]243[.]143[.]99 213[.]202[.]246[.]10 217[.]160[.]0[.]17 225cfe6f8bedc246e2dbe8f4f700dc6f 22a936e0c9366687a93738a30422dc95 24[.]energa[.]pl 2fgetin[.]pl 2fkartuskipowiat[.]pl 2fmatomo[.]eswe-verkehr[.]de 46[.]229[.]156[.]134 51[.]77[.]42[.]129 674fe636c935c4d250510aca5fb6071c89b99d66 678ae14691ea6d33b163435dc0179c33 766337dda25ceb02add122b76db37897 77[.]65[.]215[.]19 81[.]169[.]145[.]162 84[.]242[.]9[.]128 85[.]128[.]158[.]125 91[.]211[.]221[.]119 91[.]212[.]223[.]175 9d55a9f948d4dc434553e5d86fc66836 a5b126ef2e1a5abf5aa2ff86f3091821 aboonline[.]eswe-verkehr[.]de b01bf4d557b3c07edcbf131dbe5ad0e6 bfd9f76349f4551d06196af7e012226e crist[.]com[.]pl ee7895a81ae1ec10c96615d2cdad57d2 elsen[.]pl energa-operator[.]pl f6515815e4ea18b5efaf06c2de77b5358fb44bc0 fe3608b26c674f6e9f123a94b8b99081 getin[.]pl grupa[.]energa[.]pl ir[.]energa[.]pl kartuskipowiat[.]pl matomo[.]eswe-verkehr[.]de media[.]energa[.]pl newhurt[.]orlen[.]pl operator[.]pl www[.]brot-fuer-die-welt[.]de www[.]ekolot[.]pl www[.]energa[.]pl www[.]hafen-mannheim[.]de www[.]hafenstuttgart[.]de www[.]malteser[.]de www[.]navikon[.]pl www[.]portgdansk[.]pl www[.]pzlswidnik[.]pl zgloszenia[.]energa-operator[.]pl amorsaude[.]com[.]br 181[.]44[.]48[.]184 181[.]45[.]216[.]64 181[.]45[.]46[.]181 181[.]46[.]69[.]226 181[.]46[.]9[.]213 181[.]47[.]50[.]210 186[.]19[.]186[.]31 186[.]23[.]223[.]117 190[.]55[.]123[.]152 cpe-181-46-69-226[.]telecentro-reversos[.]com[.]ar hxxps://api[.]valtersit[.]com/api/v1/ip/181[.]46[.]69[.]226 www[.]loginfacebook31[.]blogspot[.]com mesanusa[.]com patria[.]org[.]ve 103[.]211[.]16[.]115 103[.]211[.]54[.]172 103[.]214[.]63[.]117 103[.]214[.]63[.]122 103[.]214[.]63[.]41 103[.]214[.]63[.]7 103[.]92[.]43[.]59 110[.]235[.]219[.]168 139[.]5[.]248[.]218 excitel[.]com hxxps://api[.]valtersit[.]com/api/v1/ip/103[.]214[.]63[.]122 146[.]103[.]99[.]177 146[.]103[.]99[.]177:8443 46[.]151[.]29[.]58 cdn[.]bloom[.]io login[.]microsoftonline[.]com 102[.]220[.]160[.]200 hxxps://cyberveille[.]chille/map/ 38[.]54[.]119[.]239:443 38[.]54[.]40[.]178 38[.]54[.]40[.]178:2433 45[.]77[.]37[.]145:8443 101[.]132[.]39[.]213 101[.]133[.]170[.]17 112[.]124[.]38[.]235 47[.]116[.]100[.]75 47[.]117[.]173[.]4 47[.]94[.]167[.]27 47[.]95[.]208[.]105 8[.]138[.]23[.]167 8[.]156[.]80[.]161 alibaba-inc[.]com hxxps://api[.]valtersit[.]com/api/v1/ip/101[.]133[.]170[.]17 bitsandpieces[.]com gardensalive[.]com weeksroses[.]org 170[.]246[.]77[.]50 170[.]246[.]77[.]74 190[.]153[.]103[.]238 190[.]153[.]21[.]124 190[.]153[.]45[.]61 190[.]153[.]6[.]232 190[.]6[.]15[.]212 190[.]6[.]32[.]107 190[.]6[.]41[.]167 238[.]103[.]153[.]190 238[.]103[.]153[.]190[.]net-uno[.]net hxxps://api[.]valtersit[.]com/api/v1/ip/190[.]153[.]103[.]238 netuno[.]net cloudmagazin[.]com control-plane[.]io exfil[.]pl exfil[.]sh pwn[.]sh 206[.]189[.]236[.]109:9090 46[.]101[.]186[.]27:3333 34[.]87[.]181[.]104:3333 146[.]190[.]30[.]20:3333 147[.]182[.]240[.]74:3333 149[.]202[.]63[.]203:3333 159[.]89[.]95[.]236:3333 186[.]27[.]236[.]219 190[.]1[.]231[.]245 190[.]99[.]129[.]128 190[.]99[.]147[.]107 190[.]99[.]147[.]230 190[.]99[.]152[.]33 200[.]29[.]120[.]130 dsl-emcali-190[.]99[.]129[.]128[.]emcali[.]net[.]co emcali[.]net[.]co hxxps://api[.]valtersit[.]com/api/v1/ip/190[.]99[.]129[.]128 hxxps://laislivon[.]com/upload hxxps://laislivon[.]com/upload` mac-force[.]squarespace[.]com rvdownloads[.]com lurescope[.]com 104[.]23[.]172[.]24 104[.]23[.]172[.]25 104[.]28[.]164[.]49 104[.]28[.]208[.]95 104[.]28[.]225[.]185 104[.]28[.]243[.]82 104[.]28[.]246[.]113 162[.]158[.]193[.]10 162[.]158[.]193[.]204 cloudflare[.]com hxxps://api[.]valtersit[.]com/api/v1/ip/104[.]28[.]225[.]185 cullottalaw[.]com 103[.]217[.]186[.]180:55554 117[.]72[.]242[.]9:9999 137[.]220[.]151[.]95:443 14[.]225[.]212[.]124:30005 14[.]29[.]160[.]181:8888 180[.]76[.]141[.]175:443 192[.]252[.]185[.]78:443 222[.]80[.]159[.]10:8443 27[.]71[.]16[.]98:443 206[.]166[.]251[.]164 337b48c1cd6dd6e7b8073327082a60e149517fa084ba17b180e041fffa3b130d 3b71d721c39fad92a44ddd764bbb34afeae44a5db886d0a4827a399a5fbd367f 51462a23ac25e1bd0e49b7cae7f3a71f8d2201e22d45175b587e4740b49863cc 56eda0ac82e06ee609b034306025e67df161c5877399c305c8eaea136e80c951 5995f42a828606705a7339d58a665c229936e81c4e539cdfa115eb46a2eb53d6 59dc108e22cb856c228bbf8a1ab955fb66f0844a07fe10fa0d9fc3823d2cbbcb 5eb5645511b00e4f4d73125654eeb3a3930fcf09c65685dc7f03f725331492e3 69c1603f3f9015beb0097d0a3bb0f17400c314e2eae65a7eceacd3b93ea570dc 7a52ff23949edee8faa61ce0def6dbca8b7e5943c54d23376cc190762ea3985c b7b0cd6539464ab39c6526e499f86d611faa21c5af945535ebaf187cec543af1 cd0c21f9b32b7feeda1787fccab622dec60ecdf84c0538c08bde3946856b0fa0 d17053557bb90298f7b115432b4820a248fdbe678bca31721529b1f51a82343b d71bedcf-307a-4432-beec-ce943223d0e3[.]cfargotunnel[.]com document[.]gitprogram[.]com e2a59432ce2b0d83ded936374a11fca3d3defaf4aab90eb37fca58683eae32c0 gitprogram[.]com hotmail[.]com hxxp://cloud[.]shinewrist[.]net/ hxxps://cloud[.]shinewrist[.]net/ hxxps://ocr[.]opusaccel[.]top hxxps://photos[.]msbenefit[.]com/fa/t3 hxxps://photos[.]msbenefit[.]com/fb/w3z hxxps://proof[.]gitprogram[.]com/a4/j8 hxxps://xyz0102[.]gitprogram[.]com/a001 msbenefit[.]com volexity[.]com aircanada[.]com 195[.]64[.]250[.]116 195[.]64[.]250[.]154 195[.]64[.]250[.]172 195[.]64[.]250[.]9 91[.]215[.]71[.]134 hxxps://api[.]valtersit[.]com/api/v1/ip/195[.]64[.]250[.]172 vinertelecom[.]ua 109[.]238[.]86[.]76 pharmaessentia[.]com okta[.]com 220[.]167[.]232[.]128 220[.]167[.]232[.]204 220[.]167[.]232[.]220 220[.]167[.]232[.]243 220[.]167[.]233[.]146 220[.]167[.]233[.]215 220[.]167[.]233[.]232 220[.]167[.]233[.]69 220[.]167[.]233[.]89 hxxps://api[.]valtersit[.]com/api/v1/ip/220[.]167[.]233[.]89 ecomagent[.]in poison-claude[.]bitsender[.]top cisa[.]gov domain[.]com helpnetsecurity[.]com nextgov[.]com thenextweb[.]com meterpreter[.]org 1a062f4982564d6d19a76884ce8bcbb6 295fc584f75e94108c9be945977db33ed80421f5d374eab188587c911dffd915 353b5bd2780c1b0c07c1283d83cf16cf1e9ec226c17b2d09d56848893f9d98ee 3594ad58fb6217fafe9839e53999a90608c2e9f335fa20aece3d53f8c0802726 3ec3151d8d1278ed966941ac89ea495ef6a80c70613dd9138cc85fc28c9df432 6e6378d8d404166da89d982e80bc52e19a3f677201258dec1775f100a027a92d 779b3e1a470e589d492b99154ba11622fbaebb19b3de694f660c725411b7096d 79[.]133[.]56[.]90 7d6f6dcb17a423bdd7715f8a4e34f2939501a761bc9bf7aa005f805ef1f82288 8453c42904b7b2fea5671b7bff06b2d937632ae29545fd11bc13095627a2805f 87b6b24c06f99900a8aa579caedee1e402015884c925a98dcfb0fb38dfa2de22 a4a6a04d85eca8d584d939d2437c85a4f291207d8042f2ec002838e336b72ef5 ac6806c89e294f390838cb07c015dabec1c8ada06ce5161a0ad50b8a72828141 ac6bbc4b1f1c62e308781329183a46e18f454c27e66bffa09f343b53ac622b69 airliquide[.]lol asianstudies[.]org asianstudies[.]secboxes[.]com attcdn[.]com aurexdefense[.]online b34802a646fc4a8f07ffa09a5fda8bf7327446b22e3d7bb5163dafa1e2a8bb2b bc7d24f5cf8937b334966201bdcce8ca9bab6ec5889d40a399d4094dcad73360 black-flower-9250[.]v93xdd5g[.]workers[.]dev bosch-sensortec[.]site brianwilli[.]com checrity[.]com cyclokinetics[.]online daoahueb[.]workers[.]dev data[.]attcdn[.]com dns[.]elixnovorem[.]com dns[.]getaiexo[.]com e950d03c58d49e28e31df8afeefca1f3b3d2cd6b697c40adfee1a4f6fe18f004 eduac[.]workers[.]dev elixnovorem[.]com epsilonsystems[.]net extension-management-portal[.]centerfjdr658[.]workers[.]dev extension-management-portal[.]kmjukilo-lkjh[.]workers[.]dev f3c64014221a58f3fde88e562662dbd5a1b3dd2b59c86e9e2bc5cb8f671664e7 ff1b49aaec994f4c11f2c9331e739abb4bc3d6abf66ec50ce99709fba35d782b fracons[.]com getaiexo[.]com haloengines[.]net hxxps://1a062f4982564d6d19a76884ce8bcbb6[.]r2[.]cloudflarestorage[.]com/datago/SysPr[.]prx hxxps://1a062f4982564d6d19a76884ce8bcbb6[.]r2[.]cloudflarestorage[.]com/datago/krita[.]dll hxxps://1a062f4982564d6d19a76884ce8bcbb6[.]r2[.]cloudflarestorage[.]com/datago/krita[.]exe hxxps://api-prod[.]secboxes[.]com:443/download hxxps://api[.]ipify[.]org?format=json hxxps://app[.]eduac[.]workers[.]dev/Service hxxps://app[.]eduac[.]workers[.]dev/Updateac hxxps://download[.]secboxes[.]com:443/dist[.]zip hxxps://evidence[.]msbenefit[.]com/msgbox[.]exe hxxps://homepage[.]brianwilli[.]com/d/85rY[.]dat hxxps://homepage[.]brianwilli[.]com/d/SysPr[.]prx hxxps://homepage[.]brianwilli[.]com/d/calibre-launcher[.]dll hxxps://homepage[.]brianwilli[.]com/d/wint[.]exe hxxps://homepage[.]brianwilli[.]com/d/{wint[.]exe,calibre-launcher[.]dll,85rY[.]dat,SysPr[.]prx} hxxps://ipinfo[.]io/json hxxps://project[.]secboxes[.]com/ChromeUpdate[.]exe hxxps://recommendation-letter[.]secboxes[.]com/ChromeUpdate[.]exe hxxps://small-union-7018[.]daoahueb[.]workers[.]dev/ hxxps://snowy-block-ae0a[.]daoahueb[.]workers[.]dev/ hxxps://zki0y83[.]msbenefit[.]com:443/feed jetoptera[.]co joinmacket[.]com mailtbox[.]workers[.]dev materials-project[.]secboxes[.]com ms[.]checrity[.]com openlumakora[.]com outlook[.]com proofpoint[.]com publish[.]openlumakora[.]com royal-surf-a2e2[.]daoahueb[.]workers[.]dev secboxes[.]com silvustechnologies[.]online smxtech[.]xyz tcomlp[.]online v8-ctf-chrome-stage4-handover[.]md v93xdd5g[.]workers[.]dev velodynaity[.]com vncdc[.]mailtbox[.]workers[.]dev wcce[.]joinmacket[.]com yhv41nji[.]workers[.]dev 45[.]142[.]193[.]132:8000 45[.]142[.]193[.]132:8089 45[.]158[.]196[.]75 528cd4e69ecfa5191adbcf6ef28667bf 974decb9ff4c8f9ccb0937c96d513347 a6437ac3d6798090a218520985d36a3f bloodhound[.]py ce870a91e8d27e8f663f0687abc60b04 fc92dfafa7aa741c5f2b9cbcf75d1d19 greynoise[.]io hxxp://45[.]142[.]193[.]132:8000/lsa_collect[.]exe hxxp://45[.]142[.]193[.]132:8089/agent5[.]exe netlas[.]io nattothoughts[.]com hxxps://mediengruppethiel[.]de/ 168[.]205[.]142[.]170 168[.]205[.]142[.]55 168[.]205[.]143[.]129 177-87-4-166[.]netcell[.]inf[.]br 177[.]87[.]2[.]177 177[.]87[.]4[.]166 177[.]87[.]4[.]168 177[.]87[.]5[.]70 hxxps://api[.]valtersit[.]com/api/v1/ip/177[.]87[.]4[.]166 0[.]0[.]0[.]0 127[.]0[.]0[.]1:3080 3e24087bfaeabe40b58ba2f7b936895b8f93fe27 hxxp://127[.]0[.]0[.]1:3080/api/session/update-config security[.]md 1982[.]today ascom-italy[.]it www[.]emilcom[.]it www[.]westbrooksystems[.]com www[.]therg[.]ca military[.]com 103[.]59[.]153[.]209 103[.]59[.]153[.]221 103[.]77[.]203[.]76 hxxps://api[.]valtersit[.]com/api/v1/ip/103[.]59[.]153[.]221 netrun[.]in 57[.]182[.]211[.]200:80 116[.]202[.]23[.]85 116[.]202[.]5[.]13 13[.]80[.]98[.]121 167[.]235[.]194[.]82 195[.]162[.]25[.]30 195[.]162[.]25[.]50 1f6aba8365b3b03f280d82353fce5d05baa5e34d 20[.]240[.]62[.]249 212[.]114[.]69[.]157 213[.]95[.]220[.]86 217[.]17[.]35[.]25 22be14695e77a52f6051ca9afe998069b3c45606 2540gmail[.]com 2e799f8484dad9bd01d3e2b5c2734833 3a230e5e58fe453ecd05168096529e0e 475c3062dff23b93e1bc3833a4482454 493c83f98d6febb97d608af0ee9aba7d56645f46 51[.]38[.]104[.]145 51[.]83[.]224[.]185 77bdb3174b68caa35edff0d439b3c8ef1477414390e84f62d648b57af8dad4b5 78[.]46[.]3[.]172 80[.]245[.]152[.]76 8205ee74c6f92f2d739d143f7728b163106f33d1 88[.]198[.]176[.]160 92[.]205[.]8[.]66 93[.]158[.]203[.]109 baa8f32669ec0faab4e54b71c859aca8 cecad53ceb50a4e71e94781eec036baf dcf4df66a6065b67f9d1e26bf73039a5 e08df6d2474414bbebd80b5af7ab2b24b18575ec ezamowienia[.]gov[.]pl f6428d18759148077129b6de924a57342c9c0620 knds[.]com panel[.]kylos[.]pl rostock-port[.]de strefaklienta[.]atman[.]pl talismann[.]online wingcopter[.]com www[.]brunsbuettel-ports[.]de www[.]bundeskartellamt[.]de www[.]giz[.]de www[.]hafen-hamburg[.]de www[.]ihk-nuernberg[.]de www[.]ihk[.]de www[.]kylos[.]pl www[.]poland[.]travel www[.]portofkiel[.]com www[.]seaports[.]de www[.]amazon-landing-page-umber[.]vercel[.]app 120[.]84[.]12[.]212 120[.]84[.]212[.]61 120[.]84[.]213[.]21 120[.]84[.]214[.]126 120[.]84[.]214[.]242 163[.]142[.]95[.]105 163[.]142[.]95[.]27 163[.]179[.]50[.]25 27[.]37[.]100[.]78 hxxps://api[.]valtersit[.]com/api/v1/ip/163[.]179[.]50[.]25 2062d0a4929b45348643784b5cb39c36 460ff4620fa44cba8df530afde949785 8eb368c655b84e029ed79ad7a5c1718e blog[.]post ed436f5053144538958ad06a5005e99a oswaldosrm[.]com sentry[.]wixpress[.]com site-pages[.]wix[.]com specs[.]media specs[.]pro static[.]parastorage[.]com static[.]wixstatic[.]com vod-server[.]wix[.]com wix[.]to 13bd1c78402fdc794c9cb73929b7fbfadf83ee7605b90c8a4f6ea0fc54471467 1e1ca215b695a9098697e1ec0e03c2e129a682aa32d1ad31fb94e8347441a558 116[.]147[.]110[.]94 118[.]212[.]121[.]35 118[.]212[.]123[.]120 175[.]173[.]86[.]157 182[.]54[.]23[.]142 211[.]90[.]189[.]23 219[.]155[.]75[.]78 220[.]202[.]112[.]242 221[.]206[.]229[.]183 35[.]121[.]212[.]118 35[.]121[.]212[.]118[.]adsl-pool[.]jx[.]chinaunicom[.]com hxxps://api[.]valtersit[.]com/api/v1/ip/118[.]212[.]121[.]35 167[.]57[.]15[.]137 167[.]61[.]183[.]193 167[.]62[.]66[.]202 179[.]26[.]162[.]208 186[.]50[.]19[.]191 186[.]50[.]234[.]139 186[.]52[.]59[.]117 186[.]54[.]223[.]215 186[.]55[.]209[.]226 hxxps://api[.]valtersit[.]com/api/v1/ip/186[.]52[.]59[.]117 r186-52-59-117[.]dialup[.]adsl[.]anteldata[.]net[.]uy cyberfear[.]com security[.]com maglev-graph-builder[.]cc hxxps://cdn[.]discordapp[.]com/attachments/1499192125093449759/1511147377979818074/F10097782_Request-9200090_0990[.]PDF[.]JS 47[.]94[.]56[.]71 4cab935d0ec400059a3fcdc95b6623efdd51a61dff401fba8d5da244cc2de649 7f0d49b11d0a3697685622ce510c570199bf2dc76515b3f9a6b6735de8c9134b 84b9a9a1668145df04faa3d0e118e2f0acbebd3d9d260baf3a355b44c815c22d 862a3ca7e944ccf0ff3a6d556b34faade4b68343015c35a014a43725ac14a2a1 asp[.]net b5d598b00cc3a28cabc5812d9f762819334614bae452db4e7f23eefe7b081556 185[.]15[.]169[.]178 185[.]15[.]170[.]1 185[.]15[.]170[.]244 185[.]15[.]171[.]175 185[.]15[.]171[.]30 185[.]15[.]171[.]92 185[.]197[.]8[.]143 185[.]197[.]9[.]111 185[.]197[.]9[.]248 host178-169-015-185[.]retemetis[.]net hxxps://api[.]valtersit[.]com/api/v1/ip/185[.]15[.]169[.]178 metissrl[.]it copeplastics[.]com sekoia[.]com 45[.]63[.]24[.]218:4447 bb0fbcb1e47ec04aa55555f3769fbc6f09694de1e9baae59260356b26b5af6a7 checkip[.]amazonaws[.]com ip-api[.]com quima[.]org threat[.]wiki 12[.]10[.]0[.]0 12[.]8[.]0[.]3 12[.]8[.]0[.]4 12[.]9[.]0[.]1 12[.]9[.]0[.]2 cloud[.]google[.]com accounts[.]google[.]com careers[.]com exct[.]net fifa-careerhub[.]com fifa-careerportal[.]com fifa-talenthub[.]com fifahr-careers[.]com fifaworldcup-jobs[.]com ipwho[.]is jobs[.]com name[.]com onrender[.]com trustname[.]com wiseagent[.]com securityaffairs[.]com 055ae67f5504eccc30b7f5934c3a4759bc8f7786261e40f169a13605a3fd3687 8885ef84d222da912ca25b38fb6d0358b192b4018a3fc62a6b0038ff66191bae www[.]alaskaelectricalapprenticeship[.]org 071d7eae79bbc29cd62cee2e17b5581a7e1c0e1a988a02c16038225cf0e28164 1dbad195e39db48dbd982f4dc91d7c2c55924f34efdd32ba1b9d001df9c94fe2 5427157ffecc90935f5b6e44d21405489c3fa2772290b9710d5f5da2256dd173 66ae3f089c78492f2add4582dd74ea18e29a5b50651f7a24f831d0f957370e8d 7fa2d31cda13160597bf5528c198c6b6cfdb14344cb153e4a86d13905429809f ac3b814aa005e654450f2c5bc43272fb52c91e9f261b43b40c180ae19f7bdd19 cb93422fa646098e67c0d8c6a58fc813e202926f68229f83ff831fc7cd1d3c32 chip7[.]pt dfcad820a66039029a9464c5ec99ea0b181a33d8b5c27f333a54f827572b7d04 drogueria-saporiti[.]com[.]ar hollard[.]co[.]za nileprojects[.]com usfca[.]edu www[.]meiarchitects[.]com 004d1e93bf4d1d8dd9eddca63ca2c78367e5caef5f3848c956ef10845e791863 031faabc9586eba288990e32cb37286a73678322466b61ce864d2e05b90789a4 0e141331fd313e0fce0b353bdc72a23fe0ffe66f34170649aee4c4732894d927 10be010e79ab275d7342eaa4f9167989f14df131c7337b1eb5e54697c87fded6 1e15b1b87a8749578c7fab51d553bc87b992d60a4137894fa367c7ca533a3a8e 1f49d69d4ae526172e7822c4a17d0bcac66d0f5b133ecc198e1dd4fe174838e7 22b02da12cad447bfc3ad31d94546128e0aa7e140853fb14e65efe37fe1fe87e 2a2d8986035e73ec97c67c11e8547c55cea26f9fafd1be00269a6246f3e6f124 3df6bd3a2d789c646306e7dae28d35f1e06819607c0a932b0299425acfa5bf2d 546064b4fdf7d23472ea87d2ab519a79e89656dc2799ffb1430c3563db83059c 74721377a5a001722a27375c1cfc29c6d8704da25be798ce9351d03410401547 858e166a69dfdb613a5102d130a30c8a1900c687beb727265376421dafd0b7b6 8bb4f6dd26609d0ddeec8456a9eff6adf6a46bc0ed6f0a988fbb2a2b633a6d06 98745151e9b8f79845aece3118cd0b23ead7127fbe37bcec34400f33e3ec56d7 b11dfd7b970ed328bfaff531892b64b00143a59c72ba1738c4050b43d0c5eed4 biotipo[.]com[.]br ced2a443c209297ead699b8141bd3319db8f1ddd1e2ecff38e4422c30c61e4cb comin[.]pe dd7e15eedd082cab62fa2dce86d8f2f00e70384518420fb1169986e37a2398b3 domis[.]dk dwarkadasjewellers[.]com e1e2877259b0ba4b0b740c87781da0d1a9ad76804996cff4962fa7e7e668c75b e8c6872be53fa10d3a88028f42e4c845699a41e1f8839448872e29548d07d800 ec5e71fe6654619dfc3013ef172ee78e9599b47d57180f7f85ea59b413248001 elcarriel[.]com[.]co f8ac9684674557e1fe48a4ce3df6f605b40e2d67e448bca0aa0e549e38b90726 metro[.]net precisionvehiclelogistics[.]com ritzsafety[.]com sharpoffice[.]com[.]au superstore[.]ge syachile[.]cl trainme[.]co united-group[.]in vsbattorneys[.]co[.]za www[.]mastermfg[.]com www[.]northshorehealth[.]org ym[.]com[.]tr zanini[.]com agents[.]md knowledge[.]md 26c487948557c1c05dd64d38f2fb6686a10b7b13a07ff8470358593c91e9d706 103[.]212[.]186[.]85 69a594f11fb980d999e9cc0576dcaacb5a9b5c5a2d6e8592d7328547fb34c4ee b895c7bdc35067202518f45301166798e749f4b4a61a7d1dba914134d0d84a6e 58d244f0fcd7bd783b0104bac25b79cfe950cc535121ca8bb20f74504f38ba8c 70f8bd537e85e84285613f76e485917ec88b61b0727e136d2d6879bbbfe9aaba 124[.]223[.]188[.]23 162bdf44183944670607467f01e3ff937229de86c0f2615c1911276ea536d9a6 90092a774db7e6cc4548278af2380b0993f6b8dae249570c6fde67de2b7268b3 106[.]54[.]207[.]172 119[.]91[.]60[.]202 1[.]12[.]55[.]42 42[.]193[.]137[.]243 42[.]193[.]97[.]151 42[.]194[.]242[.]234 81[.]71[.]7[.]250 hxxps://api[.]valtersit[.]com/api/v1/ip/42[.]194[.]242[.]234 niestools[.]com securityexpress[.]info 145[.]249[.]109[.]147:443 279d04c0cfd700c8bcb9acbed528131d3ffef8e25d12713e8649772739aecb92 45[.]150[.]34[.]2:443 bsc-testnet-rpc[.]publicnode[.]com fd[.]gstats-api-contact[.]cc lb[.]propertyfind[.]cc leaguejazire[.]com pf[.]ch riyazinikokar[.]xyz static[.]quorashift[.]cc telegra[.]ph 43[.]108[.]34[.]246 43[.]98[.]165[.]42 47[.]237[.]110[.]128 47[.]237[.]118[.]22 47[.]237[.]178[.]216 47[.]250[.]151[.]133 47[.]250[.]209[.]82 8[.]211[.]42[.]208 8[.]211[.]47[.]83 hxxps://api[.]valtersit[.]com/api/v1/ip/47[.]237[.]118[.]22 pintudy[.]com www[.]pintudy[.]com 5e3a1955e5f8db7eaf32b1dde33432264d3c969241bb6da00068e489b05ad2a3 66b29024a0d93a3db361a41ff89d9f3b14b56916784e2b5c2c41fdae7fbe6b99 6eea0644f7723b3eb15ac1b6f0e187c413e638ca2b158fe0986a6cb5e6fab9ba 87b37289eb6f410be6111769997f7d72c7712f6852fd304e8246ef92d4a56534 f20b767185357166780cf098b50b8359dfab8a1194ef06c310f2142a6b753946 lightcast[.]io semperlaser[.]com 086f90125063ac88e6c607ba2dac926a5861d541bf6a4077f042ef170553354f 33edb92a411dd10e4814e037554f59811492c7449e4529ae962bcc0b30b8642c 3761da38375dfdd78798ce546f4e035d253bcf21efc68e202d125721bf39e612 3f33792bc005e4b6256046da1aef4c042487c044e71648abbc3bc9dbbfd5e708 5a5ba5b9d1c6145ba6ac0bfc1b9107fdb951a10769c1654f0e940acca4721d54 73f1476f5535adfe118beca7da1c49b161cb7d1b86dc1cb9338397a7ae6fc7dc 79d6304316bc0d46d4f5bcdf221e7be54b88cf8949f714e9ebd8d6dbde6868fa 85d635a989fed9260f5929bcbd057dc54f802dc96f02a528e18dade2b8c889ea 88757c8c6b1662b4e18e8ed4ec1b232eac050d5a03f2dd137ac0bc2f37185390 8aa377874d6a2122143a8a01189c10bdc7d92d50d551be147fa93d9dc0d6b5ca abacoviaggi[.]it b38fc1c461d7624c2984d7e44a7dc6e848109dcd4e272953a623c91ec66de21f b9d57ce8238d759b124deafa2acd0e6bb4dd99ee823ea6a1b82e45621884d028 benleedsproperties[.]appfolio[.]com dentalbilling[.]com evergenbio[.]com f3e5f588e0e4bb8b43f78df341e7a9c0caa11a13a07a81dca9816a2d56a48f14 lsf[.]com[.]ar rtad[.]gov[.]mm sifco[.]com stenng[.]com www[.]ellisdon[.]com www[.]hologic[.]com www[.]jbctools[.]com www[.]msmunify[.]com 4138a96d6bc61733ddc2fa7678a341633a1ef3301209cec286f73a05d397506d 591b2f079b57f0c0affbcc8cd5b7944596bef58302de38925ba72eb9d697f331 a5a58091e684d3d03aff4c8c5b5080679e709b5070c65a516bf4710409db5d15 afadd793a474cba7e292a8d0f2f6989e39ef7c1ea2e7793a1e73ada964e42942 c39a621a12f83164d28400ed48f1845c9a1cbee2dfdf9575bfb50dec1e9a0f51 d08213f200dd74e56558526b6c801a29c1b7d0fe3c910e13d1b5d12eaab8ab63 mcdonalds[.]com[.]ec missionpethealth[.]com mylaurelhealth[.]com www[.]spiritexchange[.]com 203741f59e491db9e8f7ca1742ec975a514163b630679348494a8c8bcf4ee710 3c9b0beab96598731226b67f63b4593e55648a2d2075e9781692237ae7924a36 43a0ea55679e075e0bf8da0ecb9baaa3267f9118b339cba793d0f07706f9538e b47cbb714a69de0691885b1865538e62f8f2eff8c05b2c7f301e5138b5124b2e bde7303ac99c19446055ad704c815ec8c25b9912a0e3e54db9869968af75f54d c08e9aa56cdeb3df0adceddd671bdb1e3877938208ebb5ed0fca6a5a26339f1f c413ea4d708c5a63f928141ae57f765ff497622294b45adaebc8fc2b3ecdadfc karierazdrowit[.]pl leoschachter[.]com megavelocity[.]net veradigm[.]com www[.]baumanlawgroup[.]com www[.]ppa[.]com[.]ph 3781cdf1f226200aec77a36ff4e480d871d475b840d602edf568324c975afdaf 5d4223e9850ce6c0ce99fc9ab6a1c3185613972ab383d9908e40bedb4580e5e5 77afc28127205614835011515320c3b068b37be985c58e564bc29c4c1e20c8f0 7b82cf186b458a8511593f887d9aba1251c5c2857d09779fc6ba0ba1ae735265 9a9148051bc74ec13e49befb2a745154ac8ddce17d0944f9437bbfc1896ea42a b911359bb3d56390a1370f4a3f99824e62b86e0cf6eea05a1a519ddf3e9eff90 da08d75d2d09b595533ff7dbf563f72da1a15c9e9351d222b2d3d58f411a551f kovoplus[.]com www[.]dmaxinc[.]com github[.]io pages[.]dev pltechoo[.]pro readthedocs[.]io reficon[.]pro sites[.]google[.]com stats[.]us3[.]org u320[.]my ustechnio[.]com viziocomsetupentercode[.]github[.]io wapp[.]live wc[.]ci 112[.]0[.]0[.]0 135[.]0[.]0[.]0 151[.]0[.]0[.]0 157[.]97[.]32[.]104 193[.]104[.]163[.]1 193[.]104[.]163[.]2 193[.]109[.]245[.]183 193[.]109[.]245[.]227 20ea1b563e80d8c1dd4a38d56b814f1c 212[.]85[.]105[.]223 212[.]85[.]123[.]109 217[.]160[.]0[.]237 217[.]160[.]0[.]239 2fmoje[.]pzu[.]pl 2fwww[.]gruene-hessen[.]de 2fwww[.]parker[.]com[.]pl 329c455afb88279ebffbbe293ee62ee8 40gruene-hessen[.]de 40ltg[.]hessen[.]de 43630fd8afda3fe140d347220bd4c956 46[.]242[.]239[.]175 5357f278e969c1e33b57aee82a4e0e4e 5bf44c997f2d25e091cb155a32335a15 722f063619a1d8fac7949df4c660d91b 77f1a33ced9c77af939fc5cc1cb9adfb 785227d15c66882f220743237e9ee3e4 79[.]96[.]164[.]21 79[.]96[.]59[.]65 89[.]151[.]6[.]25 89[.]151[.]6[.]26 89[.]171[.]92[.]92 91[.]194[.]122[.]45 a74af0e0b8d8db2e67748b54deff9a0a1d426316 bc837f4288125dc4e63fa1d1014e55ccd9b2e55b cf4e86c69a36564f0e26504e513c1424 cluster[.]de component[.]id dea843001b4e04fcee9b047b495f1fe6 ebok[.]multimedia[.]pl elta[.]com[.]pl fccc46b710222444983c1bd87675551d hxxps://auth[.]pzu[.]pl/api/authenticate?response_type=code&scope=openid%20profile%20pesel%20idrepo%20email%20history&client_id=client_1002&redirect_uri=https%3A%2F%2Fmoje[.]pzu[.]pl%2Fpak-klient-backend%2Fapi%2Fuser%2Fauth%2F&p=s hxxps://auth[.]pzu[.]pl/api/authenticate?response_type=code&scope=openid%20profile%20pesel%20idrepo%20email%20history&client_id=client_1002&redirect_uri=https%3A%2F%2Fmoje[.]pzu[.]pl%2Fpak-klient-backend%2Fapi%2Fuser%2Fauth%2F&p=s\\\ hxxps://auth[.]pzu[.]pl/api/authenticate?response_type=code&scope=openid%20profile%20pesel%20idrepo%20email%20history&client_id=client_1002&redirect_uri=https://moje[.]pzu[.]pl/pak-klient-backend/api/user/auth/&p=s\\\ hxxps://auth[.]pzu[.]pl/api/authenticate\\\ hxxps://partnerstocznia[.]pl/\n------WebKitFormBoundaryxwAEi4Dyl8IlzFHA\nContent-Disposition izam[.]parker[.]com[.]pl jmail[.]com media[.]pzu[.]pl moje[.]pzu[.]pl parker[.]com[.]pl partnerstocznia[.]pl secure[.]velobank[.]pl www[.]bumar[.]gliwice[.]pl www[.]gruene-hessen[.]de www[.]multimedia[.]pl www[.]nitrochem[.]com[.]pl www[.]portpolice[.]pl www[.]pzu[.]pl www[.]savethechildren[.]de www[.]tma-bulk[.]eu www[.]velobank[.]pl 201-71-9-189[.]mixnet[.]net[.]br 201[.]71[.]11[.]136 201[.]71[.]11[.]143 201[.]71[.]11[.]152 201[.]71[.]11[.]157 201[.]71[.]11[.]171 201[.]71[.]9[.]189 201[.]71[.]9[.]81 hxxps://api[.]valtersit[.]com/api/v1/ip/201[.]71[.]9[.]189 www[.]mefaendustri[.]com www[.]mefagroup[.]com[.]tr www[.]netflix-clone-mauve-kappa[.]vercel[.]app 177[.]10[.]194[.]143 177[.]10[.]194[.]143[.]afinet[.]com[.]br 177[.]11[.]222[.]208 179[.]127[.]198[.]128 hxxps://api[.]valtersit[.]com/api/v1/ip/177[.]10[.]194[.]143 izam[.]parker[.]com 169[.]58[.]222[.]110 172[.]172[.]30[.]22 20[.]205[.]45[.]36 20[.]235[.]109[.]206 20[.]46[.]235[.]72 52[.]242[.]242[.]146 52[.]250[.]243[.]32 70[.]153[.]146[.]237 74[.]249[.]206[.]143 9[.]234[.]42[.]1 hxxps://api[.]valtersit[.]com/api/v1/ip/70[.]153[.]146[.]237 hxxps://isc[.]sans[.]edu/podcastdetail/10084 209[.]112[.]84[.]158 216[.]10[.]217[.]97 216[.]10[.]219[.]27 67[.]230[.]43[.]155 67[.]230[.]61[.]181 72[.]27[.]104[.]245 72[.]27[.]117[.]245 72[.]27[.]205[.]72 72[.]27[.]97[.]229 hxxps://api[.]valtersit[.]com/api/v1/ip/216[.]10[.]217[.]97 168[.]227[.]152[.]174 168[.]227[.]152[.]221 168[.]227[.]154[.]201 168[.]227[.]154[.]66 168[.]227[.]155[.]176 168[.]227[.]155[.]243 168[.]227[.]155[.]66 168[.]227[.]155[.]76 hxxps://api[.]valtersit[.]com/api/v1/ip/168[.]227[.]155[.]243 databreaches[.]net infostealers[.]com wired[.]com 62[.]197[.]209[.]247 62[.]197[.]239[.]148 81[.]88[.]141[.]243 85[.]248[.]223[.]2 85[.]248[.]234[.]182 85[.]248[.]44[.]211 hxxps://api[.]valtersit[.]com/api/v1/ip/62[.]197[.]239[.]148 swan[.]sk 206[.]237[.]30[.]232 new[.]xfjcc[.]fun xfjcc[.]fun 1[.]3[.]6[.]1 4[.]1[.]9[.]9 events[.]data[.]microsoft[.]com ipapi[.]is mutant[.]com[.]br 104[.]252[.]175[.]109 45[.]38[.]249[.]148 45[.]38[.]249[.]63 45[.]38[.]60[.]242 45[.]39[.]255[.]77 46[.]8[.]101[.]202 95[.]182[.]82[.]132 95[.]182[.]93[.]67 95[.]182[.]94[.]63 egihosting[.]com hxxps://api[.]valtersit[.]com/api/v1/ip/45[.]38[.]60[.]242 113[.]253[.]168[.]131 113[.]253[.]65[.]76 113[.]255[.]196[.]148 118[.]141[.]71[.]102 118[.]141[.]97[.]226 118[.]142[.]17[.]186 118[.]142[.]17[.]190 210[.]3[.]142[.]182 221[.]127[.]126[.]126 hgcbroadband[.]com hxxps://api[.]valtersit[.]com/api/v1/ip/210[.]3[.]142[.]182 static-bbs-182-142-3-210-on-nets[.]com infosecurity-magazine[.]com kudelskisecurity[.]com 105[.]88[.]10[.]177 105[.]88[.]10[.]177[.]static[.]atplus[.]com[.]br 177[.]10[.]88[.]105 hxxps://api[.]valtersit[.]com/api/v1/ip/177[.]10[.]88[.]105 199[.]91[.]220[.]205 coder-infra[.]com dlp-docker[.]sh dlp[.]sh hxxp://www[.]coder-infra[.]com/cli/check leah[.]ns[.]cloudflare[.]com matias[.]ns[.]cloudflare[.]com registry[.]coder[.]com adservice[.]google[.]com[.]ph analytics[.]google[.]com cse[.]google[.]com googletagmanager[.]com images[.]google[.]com[.]bd images[.]google[.]com[.]dj meet[.]google[.]com www[.]google[.]com cdn[.]jsdelivr[.]net battle[.]net polygon-bor-rpc[.]publicnode[.]com 172[.]94[.]9[.]107 172[.]94[.]9[.]34 185[.]93[.]89[.]61 185[.]93[.]89[.]72 192[.]253[.]248[.]52 192[.]253[.]248[.]56 192[.]253[.]248[.]92 192[.]253[.]248[.]94 77[.]90[.]185[.]66 btcloud[.]ro hxxps://api[.]valtersit[.]com/api/v1/ip/172[.]94[.]9[.]107 tantosec[.]com 33d696728101c9caf6ebb215ba176bbb94e5cc16218b574029b622fd6e3bee8c a124caa58d956c7430ecb8772a3794266235917670c5b56564342bd1456897e7 archive[.]org hxxps://oauth2[.]googleapis[.]com/token hxxps://sheets-config-gate[.]hewlett-pack{1[.][.]9}[.]workers[.]dev/config0 hxxps://www[.]googleapis[.]com/auth/spreadsheets sheets-config-gate[.]hewlett-pack1[.]workers[.]dev workers[.]dev 82[.]65[.]142[.]32 82[.]66[.]195[.]138 88-180-254-207[.]subs[.]proxad[.]net 88[.]165[.]222[.]141 88[.]173[.]183[.]109 88[.]174[.]187[.]15 88[.]180[.]254[.]207 88[.]184[.]73[.]62 88[.]187[.]128[.]201 88[.]190[.]22[.]27 emh37r6l[.]fbxos[.]fr hxxps://api[.]valtersit[.]com/api/v1/ip/88[.]180[.]254[.]207 mafreebox6[.]freebox[.]fr mafreebox[.]freebox[.]fr proxad[.]net 01219285b16ce85c70cdf47a71a551ff5e41f1ed 15[.]235[.]87[.]88 5486f13e799d9c90095c5f581a04ad867d768f66 7c4b1a092d8cbbcda469bda5a88db2a742d15b4a c82639921b186d09238817764faf86bc838355d4 fd105db9073a21a3b58d5bd32622204ec8b57993 testnet[.]archival[.]chain[.]grpc-web[.]injective[.]network hackread[.]com www[.]amazon-clone-html-css-hazel[.]vercel[.]app www[.]gauteng[.]gov[.]za newman-foods[.]com 27[.]5[.]57[.]101 com[.]cn hl[.]cn analytics[.]tkmsgroup[.]com anhoerung[.]kiel[.]de epaper[.]taz[.]de frontend-api[.]sbahn-hannover[.]de mailing[.]cicero[.]de mailing[.]gruene-hessen[.]de minio[.]pamyra[.]de portal[.]taz[.]de shop[.]taz[.]de testfreight[.]ttline[.]com www[.]funkemedien[.]de www[.]sbahn-hannover[.]de www[.]taz[.]de www[.]ttline[.]com www[.]vergabe24[.]de www[.]vms[.]de 47[.]95[.]201[.]24 bdd25054be71e619edecff1567021123b2cf45c85db60ce5474b9ef306247849 f192f3aec047d613ffb85542da5646531532bd5c7549b8b4304ea8ee9ba46876 103[.]217[.]186[.]180 45df3b1ec585ddeb78f735da8b8474e2cf979145d92f2ea3045822090ee2a90e a2587e8a59d73d1820de422e14997053eef3d821cae803f0af464cf1d2e206c8 93[.]123[.]109[.]105 benleedsproperties[.]com medela[.]com 153[.]122[.]86[.]49:3333 18[.]140[.]119[.]241:3333 35[.]208[.]13[.]33:3333 57[.]129[.]121[.]177:3333 80[.]249[.]164[.]233:3333 135[.]125[.]1[.]27:3333 140[.]82[.]6[.]30:3333 173[.]212[.]246[.]92:3333 185[.]177[.]59[.]48:3333 37[.]60[.]242[.]138:3333 kmin[.]co[.]kr 209[.]74[.]72[.]248:31337 43[.]157[.]204[.]73:31337 51[.]195[.]41[.]45:31337 124[.]243[.]150[.]112:31337 161[.]153[.]76[.]241:31337 31[.]76[.]111[.]243:31337 4[.]154[.]203[.]165:31337 5[.]175[.]189[.]139:31337 join-lemmy[.]org netaskari[.]substack[.]com 127[.]0[.]0[.]1:10966 hxxp://127[.]0[.]0[.]1:10966/ hxxps://github[.]com/The-DFIR-Report/Sigma-Rules/blob/main/rules/network/zeek/zeek_smb_mapping_invoke-sharefinder_discovery[.]yml hxxps://github[.]com/The-DFIR-Report/Sigma-Rules/blob/main/rules/windows/builtin/win_security_invoke_sharefinder_discovery[.]yml hxxps://github[.]com/The-DFIR-Report/Sigma-Rules/blob/main/rules/windows/powershell/powershell_module/posh_pm_invoke-sharefinder_discovery[.]yml hxxps://github[.]com/The-DFIR-Report/Sigma-Rules/blob/main/rules/windows/powershell/powershell_script/posh_ps_invoke_sharefinder_discovery[.]yml hxxps://github[.]com/p0dalirius/FindUncommonShares hxxps://github[.]com/tevora-threat/SharpView/ hxxps://thedfirreport[.]com/2022/04/04/stolen-images-campaign-ends-in-conti-ransomware/ hxxps://thedfirreport[.]com/2022/08/08/bumblebee-roasts-its-way-to-domain-admin/ hxxps://thedfirreport[.]com/2022/09/26/bumblebee-round-two/ hxxps://thedfirreport[.]com/2022/11/14/bumblebee-zeros-in-on-meterpreter/ hxxps://thedfirreport[.]com/2022/11/28/emotet-strikes-again-lnk-file-leads-to-domain-wide-ransomware/ hxxps://rtad[.]gov[.]mm 101[.]33[.]225[.]32:8011 111[.]229[.]248[.]198:80 117[.]72[.]181[.]104:443 120[.]76[.]143[.]184:8899 137[.]220[.]151[.]95:9999 154[.]94[.]224[.]35:443 192[.]252[.]179[.]24:443 20[.]187[.]120[.]42:8080 23[.]95[.]170[.]223:18443 34[.]92[.]128[.]98:80 42[.]194[.]241[.]92:8181 ransomware[.]live hxxps://247[.]cdnflare[.]xyz/files/kworker-linux- enaveyron[.]fr 103[.]102[.]31[.]18 82[.]192[.]72[.]4 cert[.]pl incydent[.]cert[.]pl 3[.]1[.]0[.]9 4[.]0[.]0[.]2 securityvulnerability[.]io strix[.]ai elitecheatsx[.]live resight-cheats[.]net softtouch4u[.]com 47[.]105[.]36[.]109 d547875b3c5586ed424cf5eab5b4469426a8dafc44642611c7fecdb05bc6f2d5 f59bcb4cc2c65f2eee119993c1ad112c82f937b3d4193ab0fd39684b04d34492 47[.]113[.]206[.]140 8fdd6f27d48459d26b396e042860624ff4c3834c3f2080123ff7c1965da73abe 15dbaf8f55c6bb9cc57f50017d6c3e00192f06cbf4d195d77dd3188e95ea99fd eeongous[.]com leappoach[.]info mythtime[.]xyz ctoatncsc[.]substack[.]com appleoficial[.]com 103[.]168[.]147[.]235 hxxps://cyberscoop[.]com/sonicwall-sma1000-zero-days-actively-exploited/ hxxps://thehackernews[.]com/2026/09/gpt-6-astra-scores-100-on-exploitbench[.]html hxxps://thehackernews[.]com/2026/09/thousands-of-openai-agents-quietly[.]html hxxps://thehackernews[.]com/2026/09/unpatched-magento-and-adobe-commerce[.]html hxxps://www[.]bleepingcomputer[.]com/news/security/coders-registry-infrastructure-compromised-to-push-malicious-modules/ hxxps://www[.]bleepingcomputer[.]com/news/security/google-warns-of-new-chrome-zero-day-flaw-exploited-in-attacks/ hxxps://www[.]cisa[.]gov/resources-tools/resources/preparing-post-quantum-era-call-action hxxps://www[.]securityweek[.]com/manchester-airports-group-data-on-8-8-million-people-leaked-after-ransom-refusal/ img[.]monderhouse[.]space infect[.]online nodejs[.]org 38[.]242[.]246[.]176 caixaentradas1inboxshop[.]site 205[.]210[.]31[.]103 34[.]158[.]60[.]179 34[.]38[.]237[.]247 34[.]57[.]100[.]132 34[.]76[.]226[.]40 35[.]185[.]36[.]65 35[.]189[.]96[.]47 35[.]237[.]16[.]71 35[.]237[.]254[.]224 65[.]36[.]185[.]35 65[.]36[.]185[.]35[.]bc[.]googleusercontent[.]com hxxps://api[.]valtersit[.]com/api/v1/ip/35[.]185[.]36[.]65 nexus-us1[.]dropcam[.]com nexus[.]dropcam[.]com oculus9971-us1[.]dropcam[.]com sawssoulkitchen[.]com hxxps://ctzpay[.]com lideraviacao[.]com[.]br raw[.]githubusercontent[.]com 193[.]42[.]25[.]65 41[.]216[.]188[.]140 89[.]31[.]121[.]220 cms[.]balochistanpolice[.]gov[.]pk 34[.]140[.]25[.]243 nheinz[.]eu admin-instagram[.]orderyuk[.]info 3xktech[.]cloud cherryservers[.]com devops[.]com 151[.]101[.]2[.]137 185[.]158[.]177[.]13 185[.]174[.]161[.]228 185[.]31[.]242[.]36 195[.]250[.]163[.]9 195[.]80[.]106[.]67 195[.]80[.]116[.]100 213[.]100[.]245[.]220 213[.]184[.]44[.]235 213[.]184[.]44[.]240 213[.]184[.]58[.]68 213[.]184[.]60[.]32 217[.]159[.]171[.]222 27fbc9325547bf5347200922122e440c1bf1d3b4b49fc6485c5f352471d1ffb5 5[.]187[.]2[.]171 90[.]190[.]99[.]82 91[.]224[.]189[.]37 auth[.]fin[.]ee eva[.]riigikogu[.]ee id[.]lhv[.]ee mail[.]narvasadam[.]ee minuomavalitsus[.]fin[.]ee myyk[.]inges[.]ee rhrkoolitus[.]fin[.]ee rito[.]riigikogu[.]ee tenders[.]blrt[.]ee web[.]peatus[.]ee www[.]e-resident[.]gov[.]ee www[.]tartuhly[.]ee 138[.]2[.]108[.]89 173[.]236[.]20[.]0 acemlnd[.]com activehosted[.]com 131[.]255[.]45[.]249 trigger[.]dev huisartsencentrumkleiniterson[.]nl kalahealth[.]eu pscindustries[.]com 47[.]113[.]190[.]244 e954918ab3e0b65f9644ab6869db888a24d6654559ef286052840cf6e2612a14 9adde9d2a423de2ae1c9a94be76c3cb9701e2c3084099447e4f4969ba154020a 111[.]231[.]116[.]164 cb1cb0747f84d738e57d905f27af6998709d532c57920045662db50f5f494595 8fd8b40a116188f5b5bfc54c563ad1b041a952d7253b80404d81447d7a010004 2314640b6f74f29936aa6d68d4aabf0fea0d17c491801571a81cde24820faf95 31969a06d06afc5607df6fda7c88ada23dc4da7688334204f00f4746114e1955 40d86cd94323d92b3cf7da5b4ed4cad1cff41e31ca00e8385972d8f0ef707a96 7bed753f46a90a9916f2a8fabcde129705427ef0c1f2316f9df48abc2ffe76be annapurnafashion[.]com b1d19e61a7944dd84c3bfccb70f7b1c94f132a53b53ae6e7968624c130e9f333 c1f03d644eed9d246dd86c08e6e0c5d7ff10ac895b4f12938aae5b5df7040f83 e6d116e0d7fc160973d7677493129aeefbb750d42c46ee2a259bbd7d36068d14 e749398108ad232a769bd2358599603723e599621f59da2a11cf3de6c9958af2 palsanaenviro[.]com www[.]sportsendeavors[.]com 217e1b03881563b784cf98ed6f9e848b672e1da15cfb81952fafca3d8c93bc87 88f236679275dff0ff80ddf59f1f4f1a31f24a3d68302a5047abe85ef321ffc1 0f383158cb016af8554aefa4dc4e8e7689fed0c9636b1a607dec06c38eec8567 2d5e7b5e507be0c6866dc7daa36018cd0e4b74bfa0cd5631167d8ea2f8c57463 703106badaf01d836d3a02b76290a93f885cff25174f3a21d1ace6245a067952 7b4098ed9e67ebbee412a70df6133c3b3ff176f591b58afe48173e4301b0a9c6 bd20e12d3a868425cbb6480e410f44d4f2a61753edd5891cbe290f78ecb4e761 blancoetcheverry[.]com dcc348866af00b73e544a767af98532233d8f5d27f1a08156903ccb68f8f4bde laoccidental[.]com 4961cf9478846dbdbc0836c7d2f22f1c9629645b9bce1b385cca3dc8d59234be 26a54c73450adf1a8920b7af42b2e26345b86adbac7c5338d8c6e24c7b9e13e7 3596c8a48a954b032e041bf4ea1d0002ddce06b88d9c37d25c9d50ef99a7a5ce 3f7dc8450b7820e0eef5e89bf67553a154886b9bfdedadf1fdf70faadc1ded9b 4d0309418623e335e2e19f155c9a397f9b224cd94c65a5da654f5f010e8e9213 93a4f903320d7bc91ad1f95f536cdd10eba2092a65845c9467ed4022daacd032 9bb60d9264d4b27635174e42cf959e5d66bce93850207bb72694aca80d3c7d88 e506e8933b482f5c3d18099a20550d3a7a3276b2c409408073e228bb4db7fa8e fa87ddd6dd0de6ab9c09833c6cce03dbd61bf51ebdd2f98b2bd7089c862efcf6 ialegre[.]com myglobal[.]com www[.]sglacpas[.]com 35[.]229[.]35[.]43 hxxps://www[.]sportsendeavors[.]com/ soccer[.]com onionmail[.]com 4bb923eb040aa13ca8fd409c31ee4729c60ddff32e350efe1c5a4a9168a065f5 72e70936f0dbe459142a1d867617c35f8d0cce5d18c6a49e1090a2a5adc8e558 c8c68e629bba773a10ac80012d10bf19 img[.]darklights[.]store img[.]responsive[.]pstatic[.]autos img[.]smartnords[.]site img[.]socialteams[.]store img[.]worksongo[.]store advancefundingboost[.]com catalystcapitalharbor[.]com digitalcapitalboost[.]com directcapitalboost[.]com guardiancapitalway[.]com guardiangrowthfunding[.]com harboradvancefunding[.]com rocketboostfunding[.]com thebusinessloanexpress[.]com unitedfundingwave[.]com yourlocfunding[.]com pstatic[.]net 103[.]154[.]152[.]178 103[.]164[.]182[.]122 103[.]168[.]146[.]131 103[.]170[.]97[.]7 103[.]84[.]230[.]85 103[.]90[.]148[.]202 114[.]10[.]17[.]253 114[.]10[.]45[.]151 129[.]227[.]46[.]143 167[.]254[.]240[.]75 167[.]254[.]241[.]119 182[.]10[.]130[.]51 185[.]196[.]220[.]85 189[.]4[.]122[.]140 216[.]126[.]225[.]208 37[.]9[.]33[.]62 64[.]176[.]209[.]104 190[.]83[.]41[.]146 ipdex[.]crowdsec[.]net 158[.]247[.]234[.]124:18000 chatgpt[.]niestools[.]com claude[.]niestools[.]com deepseek[.]niestools[.]com glutton-mcp[.]md skill[.]md 103[.]86[.]86[.]244:800 139[.]180[.]210[.]71 45[.]76[.]144[.]150 64[.]176[.]46[.]157 64[.]176[.]55[.]16 agent[.]py asec[.]ahnlab[.]com hacktool[.]win32[.]radmin[.]gh hxxp://103[.]86[.]86[.]244:800/Gateway/deploy_silent1[.]Ps1 hxxp://103[.]86[.]86[.]244:800/Gateway/r[.]Zip hxxp://103[.]86[.]86[.]244:800/V/deploy[.]Ps1 hxxp://tt[.]Yeyoujs[.]Com:8443 broker[.]hivemq[.]com meet[.]element[.]tw 0cb83092ee76c48941c9d1e76df8c45b 104[.]26[.]12[.]222 104[.]26[.]13[.]222 108[.]177[.]15[.]121 141[.]101[.]90[.]16 141[.]101[.]90[.]17 142[.]250[.]154[.]121 172[.]67[.]71[.]247 185[.]145[.]4[.]163 185[.]145[.]4[.]165 185[.]158[.]177[.]178 185[.]158[.]177[.]182 185[.]20[.]101[.]19 188[.]114[.]98[.]224 188[.]114[.]98[.]234 195[.]50[.]195[.]10 209[.]85[.]233[.]121 217[.]146[.]69[.]1 217[.]146[.]69[.]2 217[.]146[.]69[.]24 217[.]146[.]69[.]28 217[.]146[.]69[.]47 217[.]146[.]70[.]22 217[.]159[.]154[.]83 217[.]159[.]201[.]234 34[.]88[.]207[.]38 66[.]102[.]1[.]121 74[.]125[.]133[.]121 77[.]233[.]95[.]42 80[.]79[.]118[.]8 85[.]222[.]233[.]145 85[.]222[.]233[.]164 923b9e5820e267a41b288083a410e1b41f719113fbb752c7e4fc1611b4418a88 astri[.]ee auth[.]praamid[.]ee cb8415c0d3cde0aaa981a6b305b8467b31169971 composer[.]olerex[.]ee digiprojekt[.]gren[.]ee docker[.]olerex[.]ee ec549e9ed40a0a15b0284504ac906dd9b0cd080a elron[.]ee eteenusparnu[.]gren[.]ee eteenustartu[.]gren[.]ee eteenusviru[.]gren[.]ee etend[.]tallinnlt[.]ee fi[.]astri[.]ee frankenburg[.]tech gobus[.]ee kanejaku[.]gren[.]ee liivakast[.]viiger[.]gobus[.]ee login[.]olerex[.]ee luxexpress[.]eu m[.]energia[.]ee mail[.]astri[.]ee mail[.]gren[.]ee pilet[.]ee seib[.]gren[.]ee talv[.]olerex[.]ee tartu[.]astri[.]ee test[.]viiger[.]gobus[.]ee veeteed[.]com viiger[.]gobus[.]ee www[.]omniva[.]ee www[.]praamid[.]ee www[.]pytk[.]ee www[.]tallinn[.]ee www[.]tartu[.]ee www[.]tpilet[.]ee swedberg-hodgkinson[.]s3[.]eu-north-1[.]amazonaws[.]com f982a99d9677124325096201469904fe7240e6cb53c24dec886401162f576835 80[.]89[.]199[.]242 45[.]32[.]165[.]7:31337 91[.]242[.]163[.]201:31337 103[.]67[.]184[.]198:31337 118[.]107[.]9[.]178:31337 92[.]5[.]166[.]15:31337 103[.]253[.]42[.]61:31337 38[.]60[.]241[.]251:31337 151[.]243[.]126[.]22:31337 15[.]204[.]66[.]40:31337 213[.]218[.]160[.]174:31337 223[.]109[.]142[.]7 deb1defdb7cd775fb1c4e40e310ed8d6dfde674e3b5ee164571c80d9e6adf9af 4876641653a974a1c156c2e8a60443bb8388f80d4ff79ff603c6f622f5da49e0 31[.]172[.]71[.]5 31[.]172[.]71[.]5:8008 progamevl[.]ru 47[.]82[.]234[.]12:8443 222[.]255[.]215[.]42:30005 43[.]108[.]51[.]124:443 47[.]82[.]234[.]12:8444 47[.]82[.]234[.]12:8848 teamvem[.]com cve[.]threatint[.]com clients-wise[.]com sports-365[.]club 193[.]32[.]2[.]245 45[.]147[.]28[.]59 08ea6bcce44b13813b321599b1ec88bb2c61314106286eca60402f7e738f3c4d 142[.]93[.]242[.]144 144[.]31[.]53[.]78 164cad33a0b076a6d01263e159ad06d2e7b1e9e1ace43294c252b11699022485 178[.]16[.]54[.]253 178[.]16[.]55[.]232 185[.]205[.]211[.]217 193[.]58[.]122[.]42 198[.]13[.]159[.]44 199[.]231[.]70[.]175:443 199[.]91[.]221[.]42 1a8739e2dedebc971743dd0c985526f2373f871f9c31c5b2258a5e8b373e4df2 1d09357b6a096fdc35cd5c873eed15665d6b3c879d20c8cf01e6bca0005512cf 1e41c7bfaa6aa3b93b6cc024274a10e33f3e12fe7c98c1db387ef8927f9d1984 1fc515870c681bf3e1b7947e2248bbcfe9918db2978117e91134de20bd42fd6a 210615866cd2923cc0840f196eb12c00feee113e43850376803c8e024f7e63ce 232b5115f4b78fe01c6497b1039b85ee57f6a58abd095dc80ea4d3c5e6cef6d6 24d71cb6cf6d34871031564c3f104195b812f8e72ceffb1f0ce1936998531e6f 2cd88d5280a61714836f5f07a16df190911c5b952af2998dbbcda910b3b1c494 34d798a6c55e57ed0932b6499f4fbcb5454bdfca903307be101a0594b0ac07bc 374d7008d9ba33b440d1838561f59d936a25092e4dc60def6346a9486a799906 3f797a639bc855bc6d5471f327924b62d10900ddec49b970eca6604142bbb4be 45[.]158[.]196[.]23:8888 466762502123d91be56d9c5a3b92a55c7e3a8c8939a3006cfaee565440ffe5e4 59358233a269ce587a1b24ca35e79ab294ce560b43555b500d02cf03687c4fcf 59e3c4cb06331b4f2d78a9a0592f3747e573bd01c5a7650c26361d1e25520712 5a27de542f8e4f5f9020baea00ff9e92a5d9a76e3c5143bcfccb55a4ab0be351 72db2ea09c8d4e09ef99e1342b42491a6aebf6008a1e5337131c8bde06b2ea22 7d4fb94f6b4623690daea67ed52e97705cb102f443988ff605f2a9c4898244dc 7f0754c3c3146efb451ac8e80ef6c3d61395e7974485b94e20ce436341a41240 8238fa99927aea6a6837792e5c8122ecd9458dd1164a8fd6c86da6794278bcef 83e970feb3f10692c164f6889f7a026f135c2433e5bf8e662a6e63a3b81267b7 8c935feec4bd05d5d918df308be417532fb42608fb989a08eab183e0ae699235 94[.]156[.]114[.]250 9e52cc90cff150abe21f0a6440e86e0a99ff383b81061b96def8948e21d0ac66 a98dde0e43267e973bd88cb630791cb0b667b8a2e788dc47adf2e85e813eea86 afd5f1ed45a9867daf3bc64152cef460a06b164c8183e490db39146d4749a82c api[.]datalayerservice[.]com api[.]technodatabase[.]net authorized-logins[.]net b0f918666bb11e8f25956cdfe240bc26b4bd3192f93c123a056fe3df6801a5f5 b2fe498de7a56646df1a00db3513a6c31eb660fa0405c00cdd2219f26c29ca23 b6w9m2z5x8q1v3k[.]top bdd376d48d5ed482ed48e93ae80579b7c089a3c854225b97cf5f2291ebdb476b bestopebel[.]pl bookphotohot[.]pro bookphotoreserv[.]pro c854382d457eddbae9887350f9f19a2bc35c02968900b8f534503d0dcbd824a5 carrolc[.]com cd211247d1c1c1ca4d77418fea60efafd0736017ef35c9191aed85c684adc153 ced6b0f44410f6133ad63b61e04613a8b56cc3338d7b34497540e9541163e7ec challenge-refernow[.]com chat[.]devminelimited[.]com chat[.]doctecsolutions[.]com cj06y9v4xab[.]com csa-humanchecknow[.]com cwrtwright[.]com d2705499d24772fa25049f6a58d873a2ff6607d01c64622e85977e7d17d5df41 d2c60d76e65f547baa13f156470b10f8059082be5603a6e04dd75315043c0a50 d2c637235d62ad766f961f9b8563f6a0e6db2ec0a343470385991b4df826afbc d3e64a86909201f930c35b0f1e93e7a2c40a680e951d1fbb78b3047b8cb5c780 d965de63dbd27abb00efeb9bea029cd38952dc5c268b61a522b2358d8452e43a datalayerservice[.]com db972979d508e75fe730d3b72c2701470fbdaeaf8ebdd674744754fa44438ca5 defs[.]updater-worelos[.]com design[.]devminelimited[.]com docs[.]datalayerservice[.]com drivefeedback[.]com e237801a9ef693d0d4c7d148965bb50c90946b43b8b9e00aa5e39fe5393a26e9 e901df53873d5379ad9399c63d3e014c7be188a7599b32e5b36b1de1cf7d5fba ebadfe4f370b6129402df7107581c7142c916aa7b0fae588540ab16beb5c4cae eth[.]llamarpc[.]com f591275a8f014b29e567529d67c54eb7bb4473db1c38737d6bfd5b3d52c9344e fb3630822b70bacb56aa4cec29b5a0e3e9acb3920809e70310a4003385a6d34a formulario[.]puentelargo[.]org ftps[.]upd-domain-goloro[.]com grande-luna[.]top helthfulcore[.]info human-check[.]top hxxp://178[.]16[.]54[.]253/~extranet/Tmsyz[.]exe hxxp://178[.]16[.]54[.]253/~extranet/phot7482[.]exe hxxp://193[.]58[.]122[.]42/files/hvnc2[.]exe hxxp://193[.]58[.]122[.]42/files/rat1[.]exe hxxp://193[.]58[.]122[.]42/files/rat[.]exe hxxp://193[.]58[.]122[.]42/files/stil1[.]exe hxxp://193[.]58[.]122[.]42/files/stil[.]exe hxxp://199[.]231[.]70[.]175:443/update[.]aspx hxxp://94[.]156[.]114[.]250/files/lasttry[.]exe hxxp://thomphon[.]com/update[.]msi hxxps://rebronzeal[.]com hxxps://summonhood[.]com hxxps://toogwido[.]sa[.]com/Ca[.]ps1 hxxps://www[.]xt24[.]com/install/update[.]ps1 ip[.]me joincroud[.]info jokesprite[.]info justhandsoff[.]info kedvs4wiykc[.]com kiptownim[.]info klassniylink124[.]com legaar[.]com mail[.]authorized-logins[.]net mailes[.]upd-domain-goloro[.]com mails[.]updater-worelos[.]com mainnet[.]gateway[.]tenderly[.]co microsoft[.]desereyunton[.]workers[.]dev ministrew[.]info mueleer[.]com nano[.]upscale-kolo[.]com ninetyorigins[.]com notstorageapis[.]com oeannon[.]com partner-conflrmpanel[.]com period-checkavaldx[.]com photbookguest[.]pro php[.]authorized-logins[.]net planner[.]devminelimited[.]com recepyman[.]info resources[.]datalayerservice[.]com rotoa-upda-lo[.]com rs2y15sungu[.]com safedocphoto[.]info simsracing[.]net sql-updater-service[.]com srv[.]doctecsolutions[.]com sss[.]authorized-logins[.]net strapness[.]com upd-domain-goloro[.]com update[.]update-fall[.]com updater-worelos[.]com upscale-kolo[.]com video[.]technodatabase[.]net visa-safedocs[.]info w3xasv14culvnqj[.]top catalystboostfunding[.]com digitalrushcapital[.]com directcapitalpulse[.]com elevatecapitalrush[.]com emsd4[.]com fundingexpresscapital[.]com guardianloccapital[.]com guardianlocchoice[.]com onlinedirectfinance[.]com ourbusinessloans[.]com s9[.]acems10[.]com ligacancerguate[.]org 103[.]141[.]13[.]26:3479 202[.]181[.]177[.]177 cdn[.]api-middle-connect[.]com cdn[.]claritydelivr[.]com gw[.]proxyvector[.]cc hxxp://timelevel12[.]com/big ibb[.]co konverto[.]in rcrsinnovations[.]com ultraspeed[.]pro 108[.]165[.]230[.]223 incan[.]org[.]gt alaqsaflood[.]org alqassam[.]net alqassam[.]ps fund[.]alqassam[.]net host[.]alaqsaflood[.]org 12f1003ae3900461fbfa1b5168d0b153ce0e0432a75bf3a1225676cd99c09809 54529576879eb1ff0c189e1d31a1add7848f143e7ed0127d5d617f8b5b16ab84 5b2dc399c9cdf61903dd83b451a914df79138fedcf6b6c46d8daa3f09e8c110b 68771502b2352594b87aa2a756ce0d87b4fa39250fb2b1850537220e117e2aae 6c83c0f0abf66fc0bbd902e1471b9db2c31109c45d8fc630cb72e7f098073c3b 848f59d4f7aecfe792b8f776cda1f18298c64900c249411d0e4d8255e70d35e5 c856d10cf7b044467bf31d906ab20bef02fc06e4eefe0c5a0352c2fe42f6ac74 cf3847bf11d409684fc34aebdfd7a679e106cfe866b1e6f2bc6cea31f9b8240d d02ce04c48fce1e9fa4947cfff42809fe6bcf076d61cde3fee916517b3be7501 ddf6deb87901c1c3dcb37fb9117621eb3eb383d5e2ada09f520d39087f51d4a3 de9f3946886673ccc52bee5f97ca96ae8d3cf1d03a759b5a2c257d5311d72744 ded3003e0bd2a44e8ce734d3e643a6d3ae629684c873bcc0d6b0dee502741be5 23[.]148[.]212[.]176 f6ee6ed2e5628acb69c02da92dc36096507616e9ede0dce9ac93ba387229062f 8606cfa913d821d891d84c4afa358af9ae2dd03a15b45ce14f350a42cb5e8d53 2226ae97da12a4d663dcbddc9df95c31a53d4a63c3276f5053d1a90cddff3c9f 3062caad09160e29422a53a70c012271a0f58e730036c3d760fc337ab16b095b 52c510aafcdc90f82f6d5b21bc4590e9b4171c6606488805b6761ec6fb98da94 59df3dcd9d8021debe1838ae226e19f4ffa29ec01c318e58d189c4801208b55d 6f7d0ffe1ca66e5aed7f88b2cc48e96724e58c54118c6ef7989227f0f057f418 d11761bccb624ac01c667a10ec5f924ea2145d37c31d76a97855b204d88485ce e34b33302dbfba308829ca9363e84c59ade4d45b846eae2f006f5263758c7354 hansler[.]com hvlawfirm[.]com int[.]diasorin[.]com teletekstructures[.]com verveportraits[.]com[.]au 13b926971f34cb49ee21cf06fa60ce6c9fcfd5652d9da84f244dc78915055ca3 20a8d39f68c5e37a09b593649ec0826ca01a8f656bf18b4016c1291bb0646e1a 2e8711177caf87c2df3c7ba77efc36b3db05ff8892dbb24dad934e1bbf4e17af 391e6aa34d5e51483d9eb610b23c746f2afab4538ad3fefc4a51bcf6f583069a 49b9a34fdf187fc93926a6eb72f6afb89b9882fb1c11b33711f1f9467f1d2720 58136b0db21aa9b6c4d2e843f908154ad8b5814261c58247ccc5b5e7e229cd48 6991dff31073772e55aed2836543908e6ca16f417a1074eef338e5e0be145ad2 6a6572918fc4d0e2dc6cccc0f57986e57e4110f4db01f1ef6402fc0dad253ee3 buroboot[.]nl dd2091c572889df9fa0779d3c5b7bfd8158a98fec0d97c617cb99c2ba2ec58cb medevolve[.]com neolife[.]com 1115cd16f71d556819df7688d7d633ff1c1887742e9f11cfd9af8f11859c6bd3 2023f85d41505b46c9c34c648609c986a40cf5f45ffa2a11b1dc2e3af290ca23 44743dca6e00b82f2540d3b394d4e42f2c11edca2b8241c8591e4296c0cfc441 4a2d872c283802288d7a4aa1d572a4fe9e31d173b149a562a55b538a2b90800c 61727f53a260bd6d6eaef1dee8b04ca7577079268c8d44d3b416107816ef8f2e 88f5bbd5be7c84276f442661b8292637936b4e1cef6f5be25d9f2d87c6ec71eb 9199fbc6f0bbc1da98972cf76e2daae339630f6a6b2ea631ec84b6de331b1b4f 9d6be598f03440dfac0cba4d77a50ab239f9d5485a21e23f6e118e9b4cb98d45 cartrack[.]co[.]za pttor[.]com 028a3ccbec62dafb0793a81e03b245d39615135531947f06bd213299efc035c6 32fe7c06cf897f9ce00bb3a8ebc9c680506ee8a923c7b086aed5609e4a979482 5e53f8250ab635e106c17019506c3c6c613b689fd50c71ff33a652de43bc011e 6a0be8264a43d8397ab311c98309b274ce3dc8856d96e5ad840d070b106bb611 8cadf718fcc9ed2d189a6956349af730b60bf68f7a888ccfb5d187930e3eadad cfee6bff3d88e0ac990edd0f20fd76639222e3ce6537d4fcb0f55298c859a9e0 ea94ddd2514d1caf505019717111c192e85e0ccd782851a9a7bfe8b5b096deb6 part1[.]simplexengg[.]in 46[.]62[.]197[.]232 ddnsking[.]com gofile[.]io gotoresolve[.]com letsgo2[.]me net2me[.]me netlify[.]app swoop2[.]me vercel[.]app a363ed3079a4ba94dc4152f219084951b5628724473d070d7bb2f81ebeb2a68b 165[.]22[.]184[.]26 167[.]148[.]195[.]53 167[.]148[.]195[.]53:8888 178[.]128[.]87[.]160 46ac289ce0c13666de616446f5d5a68da8bd150f4f065c3bec02f63776d3899c 4e218e70afdbb116209ec0ebe8fc556e296e69648aa4e0425b83c0e863a8fee5 62[.]171[.]185[.]97 7d766942ef34542cee39c852286599958c4c2e23187010c4d38dbf88fcb40bf8 87bf8bc8b4a2cf34f0af1afe161f123a3d200e77f6c6f41b81bf6ae66ee172ec a38b2cf8beff32a276eed8783723ecf8cc53d7dc88669e1b998dddc4db6fe996 hxxp://167[.]148[.]195[.]53:8888/socktz_v9[.]exe m-doxa-apodo[.]duckdns[.]org m-doxa-geo[.]duckdns[.]org m-doxa-intel[.]duckdns[.]org m-doxa-repuve[.]duckdns[.]org m-doxa-sre[.]duckdns[.]org m-doxa-vacunas[.]duckdns[.]org darkreading[.]com bigsundoc[.]online nvd[.]nist[.]gov frontstory[.]pl e[.]seb[.]ee eteenused[.]viruev[.]ee evea[.]ee mail[.]vnk[.]ee ollemaailm[.]alecoq[.]ee pizzakoju[.]ee secure[.]seb[.]ee siil[.]cooppank[.]ee staging[.]viruev[.]ee veenait[.]parnuvesi[.]ee www[.]alecoq[.]ee www[.]citadele[.]ee www[.]koda[.]ee www[.]parnuvesi[.]ee www[.]seb[.]ee www[.]swedbank[.]ee www[.]tuuleliinid[.]ee www[.]vkg[.]ee www[.]vnk[.]ee cm[.]instagram-f[.]com[.]cn client[.]py info[.]data[.]gov[.]il 185[.]154[.]221[.]185 185[.]154[.]221[.]53 185[.]7[.]252[.]110 193[.]178[.]178[.]126 193[.]203[.]196[.]77 212[.]7[.]7[.]35 212[.]7[.]7[.]43 217[.]146[.]69[.]31 217[.]146[.]69[.]59 217[.]146[.]71[.]198 2fpizzakoju[.]ee 78[.]24[.]199[.]2 78[.]24[.]199[.]20 78[.]24[.]199[.]68 83a16b2b30212fca4268b94f0207f5c868078177f950e4d8e02c3c6fb982588e 95[.]175[.]118[.]44 df36b499a1d5430147e92b8eeebc644a69f185387dd3ef14f8ab16766620ba50 hxxps://static[.]soov[.]ee/listing/1_10_6lfcnQwoLNOP1787916272[.]jpg?v=$_5 pop[.]vnk[.]ee sakala[.]postimees[.]ee services[.]postimees[.]ee smtp[.]vnk[.]ee umaleht[.]ee viruev[.]ee www[.]umaleht[.]ee www[.]viruev[.]ee 101[.]42[.]136[.]73 5933532d75a84f09bd6dc23a333a92144ec93019ac4904f263ee41d9e56d7201 b9effabbf78291d1848861b97884deacf70231119d2dd2f9d56909d7184eff23 1d9c8ee129698e99578246b982feba472f0cc96a8ffb80ef208ae8e19c2f23ab 35debd59b557389b8566aac5d2c60a8bd04513a48a7d0da3d3465f0be78b3a56 044864ab32351b5b26316af81ec8320e 109[.]228[.]28[.]175 162[.]159[.]135[.]61 171[.]22[.]246[.]230 171[.]22[.]247[.]100 171[.]22[.]247[.]66 185[.]7[.]252[.]153 185[.]7[.]252[.]207 188[.]114[.]97[.]2 193[.]28[.]254[.]141 194[.]204[.]33[.]69 195[.]80[.]111[.]28 195[.]80[.]116[.]105 195[.]80[.]123[.]124 212[.]47[.]199[.]179 212[.]47[.]217[.]106 213[.]133[.]104[.]92 217[.]146[.]68[.]131 217[.]146[.]68[.]32 217[.]146[.]69[.]7 217[.]146[.]70[.]232 217[.]146[.]70[.]60 2fanalytics[.]kredex[.]ee 2fdrupal[.]facets[.]link 2feesti200[.]ee 45[.]158[.]54[.]74 5a37673ab496f894128091710b3af32b 67[.]227[.]234[.]113 9fb13b21540af88a92ef6dd7c94248c4 analytics[.]kredex[.]ee avaandmed[.]eesti[.]ee eelnoud[.]valitsus[.]ee eesti200[.]ee eften[.]ee ekre[.]ee kra[.]ee m[.]f0[.]menu[.]f1[.]form[.]email mil[.]ee mtr[.]ttja[.]ee parempoolsed[.]ee reform[.]ee riiul[.]fi[.]ee valitsus[.]ee vasakliit[.]ee w[.]president[.]ee www[.]baltictimes[.]com www[.]fin[.]ee www[.]isamaa[.]ee www[.]just[.]ee www[.]keskerakond[.]ee www[.]mkm[.]ee www[.]oiguskantsler[.]ee www[.]riigikantselei[.]ee www[.]riigikogu[.]ee www[.]riigikontroll[.]ee www[.]siseministeerium[.]ee www[.]sm[.]ee www[.]sotsdem[.]ee www[.]valimised[.]ee www[.]vm[.]ee 91[.]108[.]249[.]63 batch[.]py sans[.]edu forex2030[.]com kharkovforum[.]com 9[.]blob[.]core[.]windows[.]net dssdfvsdfvsdfvsdgbfbdvdzv[.]org powexec[.]mx synctimes[.]australiaeast[.]cloudapp[.]azure[.]com synkloader[.]sa updatetmp[.]blob[.]core[.]windows[.]net webwether[.]eastus[.]cloudapp[.]azure[.]com 176[.]65[.]148[.]184 8[.]4[.]0[.]2 phoneappshandler[.]pm dongvanfb[.]net hotmailbox[.]me project[.]py vuagame[.]store 6d5b44d0678e6bd6703f2cabd2531ccf5a0b11cc081f8f7175bd679db4c12d41 amanohuguta[.]cfd booking[.]com c66119f0e5635c4380441d7a79baf0c02a0ab7ea6cd78de06507fc5dc2c1a5d9 hsaertyuoang34[.]sbs tonajukbhuakpo2[.]shop tonapi[.]io zloapobikahy23[.]bond 23[.]254[.]203[.]244 cristin[.]no fellesstudentsystem[.]no fsweb[.]no idp[.]feide[.]no learning[.]noroff[.]no ntnu[.]no uio[.]no uit[.]no vitnemalsportalen[.]no unit42[.]paloaltonetworks[.]com cvedetails[.]com prnewswire[.]com hxxps://www[.]century[.]ae 199[.]209[.]141[.]166 couldinstallup[.]com 101[.]43[.]53[.]103 31c0de8fccfc899a5b61c3af24e39b94ebb07270d8e02391ba45479800ea8b1a 3c6a3c30890cb679be7e790649ffa41a0ed7d5eca10c4cfe024008924bb5261c myturnpiketollservices[.]com 129731a87de0f372ec0c57995249e33614106d3da9736370953fc3f3c435c696 198a6f92eb5c10e48698921715e2df082d968a1d0a0c9e23dbc850068b6895cc 23332bd2212b2fb022942c5073346d5ef5e5389a86e35715d5971ebb2caeb8b3 31c0fd660bc802b9120b6f82fa8807ccb157086ef94d99d10c30eda6e37d4065 3d02703a8f235f837c62b847d5d19ad175476acd9462f8b3641d18eb22ee8568 7659124862d4805728f6b4f36b6adfacc24ce7d4acebca0e18643ea9f46235ad 9934c38bdfecaa1e40836e11e069e7b251ddef442747e1edacf9d70bd60a67a0 aa4ddf18841ac02e8d26fc7e2143621dacf26040b3ef98c4ea542f974cbd4bc2 f899de813c135f9989f441735638c1a41cd26e357fe2b2959c1f7a13f684403f ff9c1a5a2f75e1c93aba4aee716a7ec9e6a1fc861c0bb802669662299f58ebbb licindia[.]com proliancesurgeons[.]com qualityresourcepvt[.]com royalplaza[.]com[.]sg seasiainfotech[.]com specialtytextile[.]com 201342bae107c240c65ac029955bbed9a16f64bbaa716edfc77a9a1f246791c2 2a7686b32ffb95aec7d14d9a339206726fcf30e7200a1fcbee5fabe4c97de5ee 485d2f13721d870bcd4acfe8ec504708c4168c6183d5e1dfe03bb451f9382cb9 54e22c2157a2cb1128866032765536ce22e477b9ebb0deefa48c6f1caedc00e4 5a7889e70bf4a61f2f2e770110898450604a2521867f46a6644d467d39115dd0 688b5435f5135c500a016ab963c2510f33c93ab4b7e7c4519015b5de679fba99 944caef8232277289557f59aee75e12b6b05b5590ac8eb552fd2e59478d1d7ea d4ef14d51e802e20a19c8c49329a6b037fa0133b4a178d95470bb9e526758c1f d5f3d378bdd636cf6fa90c9d2e5d07cb96037fd88433b44737f1089706986d42 e13ad4c1cfe95ae069e39ee6a78524179de1ff72cdbb9e05262e6f7e522423f6 honeycombinsurance[.]com nutexhealth[.]com oportunidados[.]com[.]br rubbermill[.]com thesole[.]com www[.]careersourcepbc[.]com www[.]iwin[.]kr www[.]transportesmontejo[.]com 14eec56aefd309e62d0efb23aad503c83d38db51f331632aad3a83d52a3209d6 636cec1ed7dce8f5b4f7b6d197fb67eec5634642e218aaa79fcf0cea23d1c6ef acbb6e9d0f8f0b2bd998f37959b0525d9b13249e140b34dce7291720c52b91ff www[.]rext[.]jp 091886c95ca946aedee24b7c751b5067c5ac875923caba4d3cc9d961efadb65d 0f5457b123e60636623f585cc2bf2729f13a95d6 137[.]74[.]104[.]108 137[.]74[.]104[.]108:8080 159[.]65[.]169[.]200 1768[.]py 198[.]244[.]180[.]66 198[.]244[.]180[.]66:443 23[.]29[.]115[.]152 23[.]29[.]115[.]152:757 23[.]29[.]115[.]152:8080 30a334da51d22b2fe6e33970df8d0f81396394de9d3a3c224751aacb2202b0db 385d21c0438f5b21920aa9eb894740d2 3c19fee379b4882971834a3d38f3f8b86de560114274375560433778cd505748 40c9dc2897b6b348da88b23deb0d3952 45[.]61[.]139[.]126 45[.]66[.]248[.]119 45[.]66[.]248[.]119:443 50[.]3[.]132[.]232 50[.]3[.]132[.]232:8081 5[.]8[.]18[.]242 5[.]8[.]18[.]242:443 5d2c17799dfc6717f89cd5f63951829aed038041 7095beafff5837070a89407c1bf3c6acf8221ed786e0697f6c578d4c3de0efd6 72a589da586844d7f0818ce684948eea 7dae150c1df0e01467be3a743775b646 9230520c6dd215e2152bb2e56b2a5d6b45ae8e13 964c94b217d102e53a227bcbc94ae52e 9740f2b8aeacc180d32fc79c46333178 a0e9f5d64349fb13191bc781f81f42e1 b36748a27b8e68710701286106ad434c9afea6fa b5db398832461be8d93fdbda120088aa b846e89d0f56851696d50b5e64c6e758ddae3e6a belliecow[.]wiki c599c32d6674c01d65bff6c7710e94b6d1f36869 curabiebarristie[.]com d3032968085db665381d9cbd3569f330 d3db55cd5677b176eb837a536b53ed8c5eabbfd68f64b88dd083dc9ce9ffb64e dropmefiles[.]com e351ba5e50743215e8e99b5f260671ca8766886f69d84eabb83e99d55884bc2f eb84a283ff58906786d63ffe43a8ff2728584428f5f7d9972c664f63f8790113 ec74a5c51106f0419184d0dd08fb05bc f176ba63b4d68e576b5ba345bec2c7b7 f309b61a8b005b5ce0a3fb58caaa798cfc95f5db hxxps://aicsoftware[.]com:757/coin hxxps://github[.]com/The-DFIR-Report/Yara-Rules/blob/main/18190/18190[.]yar hxxps://simipimi[.]com hxxps://twitter[.]com/reecdeep/status/1577979717717721088?s=20&t=QWDIpjACeLzPOEy4DDGnUQ iconnectgs[.]com kicknocisd[.]com stayersa[.]art instagramloginpage2021[.]blogspot[.]com suriq[.]io 384a271dd0c025d94b2442eaf28b8c4a1848450dd69f3df4406e090a0e07596e a9f90892c47133b7ae5532dbcbcd360233e9269cc0fadfbf0103aab5d2ab602e seashellhospital[.]com uicc[.]org 27c21f8ede3c87aae78085ca0e87ee0df5a8ee6da98efc603d8d0f59cad579e9 2fc4e1c6cd96714714e0423abcba21ed99fd94b402b759de6eec3df61aa8d2bf 5b9e0a0198510b80d9de208a68ef6978f8d6e6d8c5cf41272f4f9097cc05b860 679132e2dde0146ef6c0588e52cf167edf2e07ee50ed1562a1ca3ede7b395d34 amptc[.]net cf0c3f919f4b6413cbe156443b5e025d426c3c6ac7adbf77c25c7ea6e3e24075 d4221d69d077b689071d201b7fa9ee7c8d4dd94966ac2e3fa9d325fc8be9e562 dmt-group[.]com e21b45cf8542e9c279e8778579d25d145fcd33579777d18580959028eef89c88 e9905a981100a8ff6eafb93928eb253c5f32e90ebdda445abc9ac2d3f2d56d47 ffa065231ce926eaa025ddcd7476f30d27b9fd04d9a077f2da50be098bd92931 jswlaw[.]bt meccahighfeed[.]blogspot[.]com orex[.]co[.]th reignwoodpark[.]com transportesmontejo[.]com vedantaainstitute[.]in www[.]alphaplantes[.]com aca5a05536a0e14fa292fb710b62f895c3f1961320b2ddfa209dd0fd59e988a8 c8113e4d3fa0e8d2901106cfc68ead7f38c527fa8f97d3338534d4b215accdd2 dc4dc2669735cb7b49238ba6e2f0f2922bac75526335ebe154920448f32f92ac hccd-construction[.]com southsign[.]in 6c3ec7db0059d7af0132a20ef2831c85897b1326528cb81b8997b64696c1b998 cb91e6351205ab32ad2467216c95c222f2cdc8b4cbf31dabd0b896907445e0f0 f0cc05ccc2968835cfce07260ebbdf39002bc4f4cece1feba50fe6eb19f23b65 lawter[.]com www[.]ccq[.]org 09e53ccbc20668676fe6f868f552a7bf9e573e3122f9a58d6d7fa7ad46cb48b2 29a209c959c29675b729e37fb90460efc63c9bbc5199404bab75793ddd4b59d3 380049a83dc32b706bc4eba0b94a589b70d1d8e4e8366b93ee37065c1fcd07f2 74c2e4fb53b40ec6942bd0dd1266477bd660bf62ee6fb8260d9e9f25e0237554 7680446ea613862484254469e5b467f97734681ea21fb8fb5590662a8f8e9a14 97ca664aab5d803e9b7a1a317ca3711c697ed3deacdf747a3f60924d9ef2982f ad8256ae4ea1033cb99d26019d90ca2dd70bf0aef1eb1a2caf1c6a980837ab06 aeiconsultants[.]com ahadandco[.]com b2f9d2133ed06bc2d46fbb2adbafb99bfd1d8446ef157f5c31fdfa0cba71647b crmeyer[.]com fa176dfe3c627eca6cb3d4d5aa1da5f83f3463dc22219b6ede72ce7d23d3cfab icot[.]es sago[.]com syc[.]es 3af959c59b86d6d95fd46e83ef0c195d4f89394545e6593ba886fc9e9f787bc8 68496fc5dbdf43a709e50c039bbec1e96886c29b5218c9ab938b026c60bac74a 7fbcac4f542c4e3e16b11bd651c49cfed5bf2998338eb8f8b5f68aa033dffcb1 87510bf2249d63a8beb2acc2750f97eb2b7b3e511c85b78d96a48a1cd4f7dbf6 rlfinechem[.]com shop[.]easyoga[.]com truckworx[.]com 10426af2ab256b5fcdf444722a646a3bd92988cfbc50e2313d12b29e8fcbbb74 2a27de68787176a4dfb2d2c248f3eee309a78afd824eb184dbb3976a399ec88f 3f78d334bf89bac75b5021270e068a28fe5d38aaa04a27bee214bacdf7d4baa0 687ac5f064ac1404f431bdccb76c7e68e5ace6c373f29755ccdf68c3d19b590c 768c9d2bb00bbed789f4d55c48de50b194136b32f7a8a7e2326e25b1fd115af9 7c57668687424c838f012cbc96f9d7e5fb3708a50f184a7732820af5e55cb171 9c3c6ed5489c454a5627bcc65ec6c229fa1c345a298e3b7b42627f4b5878577b 9fd51822e0df5be6d4a1c7e54b29775beb69f9bec4109ced66be233ac6e1c0f5 b03fb9e05e85ad34bad6e29d59e603f61f9a2caecec0e393a199d1135453f954 b2e5f96c7acc62034b4657ef3d38407a21908f3a04967620ff322424a86f3b95 b333887a91e38968f64443e013d46b919675afcee7f6cac4598c8bc98fc7c0d7 e08208b89e4f7988f1fb9ee82aba10051197b324706238be40a06cbbddb6e675 e137e829d216fc216a81c10dbbb459d1deee601e24d54fa1c6d472bdf73592c3 hoaattorneys[.]com manhattanloft[.]co[.]uk supersystems[.]com svfcu[.]org www[.]asys-corp[.]com www[.]figginsfamily[.]com www[.]krcmachinetoolsolutions[.]com www[.]meteor[.]de www[.]mobiliermeq[.]com zonarsystems[.]com 058c75e5c30e29b33b9d1965207f9792e43fe3b9094c1a641f567c5bd5f3a990 10285afb26e5164627ad5df5d4d759fad62fede03258c79630f1e9fa6bf7b423 622960e745aa689f6c957b2668ee5a044e8052886c42e4c0eccb57be973c5f72 cfsnow[.]com ebcc5df03321c7bd8a41a3ddb23a5fd0db22fe66a070031e7f8083e3dfdac762 f1f013f0a106a15f3849a7996a435fd607fb9173eaf915ec79a69e808600e619 howardlumber[.]com transcar[.]com www[.]tulsafoot[.]com zayo[.]com intel[.]threadlinqs[.]co api[.]github[.]com awqhnjewqjkl[.]icu eth-mainnet[.]nodereal[.]io go[.]getblock[.]io js-mirror[.]com npm-cache[.]com pypi-get[.]com registry[.]npmjs[.]org draw[.]io newopt001[.]oss-cn-hongkong[.]aliyuncs[.]com teamscn[.]com upitem[.]oss-cn-hangzhou[.]aliyuncs[.]com uswebzoomus[.]com dl[.]google[.]com exposedrecords[.]io hxxps://github[.]com/xtls/xray-core 10[.]0[.]9[.]9 2214907e696bad85bde1d90c943ef66e413d7a5c6d7596ced25b74441200439a 3b22605244dbace8f0c07c2c599f88c4b831bb07e9998b869a5da2759d27ceec 447e3a131e62bd33b1297739a7b959a92358a97f58554469044636a3c4f244e8 51fdd83b3737add7f3832bd0ad0b56863c0a8f7cf9bcc16fd787d1ae4b403ce6 6d4012e0dd3b56a3e52857734fa0d582cdf3c56f0e5decc8005c882d1d1c6ceb attvpn[.]vip c0db6ddd6222d02ad7490399d33c61ded0076f0037409dc8498924458646d78a d2aa40cc53b40c6e76ac0677c4a54387b3f27ee94c85d9b2c3a3d66aeef92a66 dontpad[.]com f139b4ca15feffb7a6633ec1a431c5c604b397576b56b5c863ae8fe4fa14db4f hxxp://credeb[.]gov[.]gn/r[.]zip hxxp://gcm[.]setelagoas[.]mg[.]gov[.]br/files/notepadd[.]exe hxxp://gcm[.]setelagoas[.]mg[.]gov[.]br/files/tes[.]exe hxxp://gcm[.]setelagoas[.]mg[.]gov[.]br/files/ti[.]zip hxxp://suporte[.]ourinhos[.]sp[.]gov[.]br/files/a[.]exe hxxp://suporte[.]ourinhos[.]sp[.]gov[.]br/files/s[.]zip hxxp://suporte[.]ourinhos[.]sp[.]gov[.]br:443/files/s[.]exe hxxps://cmgovernadorluizrocha[.]ma[.]gov[.]br/Comprovantepdf[.]exe hxxps://conseg[.]ssp[.]go[.]gov[.]br/COAF-POLICIAFEDERAL[.]exe hxxps://conseg[.]ssp[.]go[.]gov[.]br/ComprovanteBBpix[.]exe hxxps://jmcov[.]gov[.]py/cxv[.]exe hxxps://minacu[.]go[.]gov[.]br/ComprovantePDF[.]exe hxxps://procon[.]go[.]gov[.]br/ComprovantePDF[.]exe hxxps://servicos[.]salto[.]sp[.]gov[.]br/j[.]jar hxxps://sit[.]baer[.]gob[.]ve/r[.]exe hxxps://suporte[.]camaratunapolis[.]sc[.]gov[.]br/ti/1[.]exe hxxps://suporte[.]camaratunapolis[.]sc[.]gov[.]br/ti/attvpn[.]zip hxxps://tisup[.]camaratunapolis[.]sc[.]gov[.]br/SoftEther[.]exe hxxps://www[.]mrtb[.]gov[.]ng/apps/attvpn[.]vip info[.]greynoise[.]io sherpaintelligence[.]substack[.]co technology[.]org 24ab9fe5d5be62d3bf055a0ca4508e8bca2996b6d78649dce8145d8a27bc1c5b dev[.]to hxxps://san-sid[.]com/owners` internalsystemsdaily[.]onmicrosoft[.]com internalusahelpdeskit[.]onmicrosoft[.]com ithelpcenter365[.]onmicrosoft[.]com itprotectiondepartment[.]onmicrosoft[.]com mandatorynetworkmonitoring[.]onmicrosoft[.]com newsystemmaintenance[.]onmicrosoft[.]com officedesk365[.]onmicrosoft[.]com officesecures[.]onmicrosoft[.]com onmicrosoft[.]com s3[.]us-west-2[.]amazonaws[.]com 37[.]27[.]52[.]152 additionalver[.]com onemm[.]net pleasewaitcenter[.]top promo-chatgpt[.]com 06095616e12c5f74149bbee85f069f9ce7f75b3744f0db44b356fc83e08c9a0d 0a8303bd7160336adfea4e265678a2c1c53322531e016e9e8767c0a8c29da2ee 6e1431713d5f49a5bd1aaf1570cbef7e844706e9065e4c8858864fd45350b127 c5a080c7ca98aa86f86916cd7e4cdf32c7d8826186d57772a3b6c7496479cbaa d8c2916b9a8b059006303aca474e7b09c7a25e4d4f947b8797341509595dcd19 ebb368eadd8a4aa8d85cc83163ef47ea4df5996caaf2337ae7262b2b1faa226f epmb[.]com[.]my saudconsult[.]com 0c4924956f3db4294ebc4af7321bbccbbf68725633df21b67a5e8863bc01179d 2e4f8f5636450030ad01b923e23077d62a76d489c3145b656e46759d438583ae 2f4ad93d4720b0b43d8f3ed14687fcdbb7e5501974f25bea31cde6acd6fb8846 78c9ecf2d4274148d902b2e9aa2ade21394a55c1258353fa4fb168938bed2eeb 9440e9e3f949dedad1b2f0766b90387a02eb3dddd599e1e58fa24f1eb4672a4b a82bff463ffb33de1186fed482af32e8032411c06dd4f159b1ef93e00a949864 allsteelproducts[.]nl bkc[.]org iglawfirm[.]com www[.]lichtvision[.]com www[.]renorefractories[.]com zenithtechnology[.]co[.]nz rocket[.]chat userpassfort[.]py 4b580d15696334e4e9455cd12506732317d6a185 validate[.]py 194[.]48[.]154[.]79:80 dpapi[.]py fofa[.]info fourlis[.]net getuserspns[.]py hxxp://download[.]anydesk[.]com/AnyDesk[.]exe kerberosv5[.]py lolrmm[.]io main[.]py nopac[.]py ouroverde[.]net[.]br hxxps://www[.]zoominfo[.]com/c/careersource-palm-beach-county/359202628 tum[.]com[.]mx aced7738e9eda9bbef49e0d6129f71340671dd470d2ee3c709a57a6d0091910e bartelsbv[.]nl da7c637c6c56c5558b46c98f552207283b9f316e07e6fb91aa1680bd4538b363 f3fca74475c568a96f97b3b309579bcb0b2844c3c960a69e4dd9e0de00081a6e vkj[.]nl 07414e6bfec164178db6a9fa1bf185ea0484b0e98e59fd6ec7d46f7c3283cbe5 0a60384e98cbc8111154bfbf003ae3b8bb669993adfaa166c3280f43de94d150 124bba499ae2d9c0466c6b4a60ebb0c1aaab5af6a1b47a02609ccfbdff0c6597 144e105972e70b870bcb9eb0ec227e16063fe3831bb8e9a79953bdc6aca3da46 37086f2865f19dfd4e4ed1be7aaa365a58666bc31d5ec7d1901063f1654b71f0 451356d29602a154a9c87c17340e0d1bb781eabb9a641d7d39df7d417753325b 70cb875713cb74cc6a0c61f60be2b13638b9428bc6e28736cb51551c086920bd 74158e3fbf48c37279bd5f33d9475f306e6b0070102f1a6e33e3afeaa1a7cc18 843316b7f80709b92587eaf29e336dec3b46987a74dbd5e2a8e1c45940c2175b 980c0ce674784a903113a6ebf9f58b8ad54f2b32ebf664ca653658206cb23661 b4b9da8951cba81e7cb8668a4c7c3287bf5a06aafa6d83110268b9ce9ae39216 b6e5a1832c6413bcb889d0d4dac7c771b8511ef50e130cc1dd6accec069141fa b9ffa318e7a83921da3e9cfda1280b697d4f5001af9b25a3044918078001d0c1 ba166148b8fba6dd9b9b6e42bac083623d039f9fd23c3feb03d0dc78a6bf9b2b d0fee86def134ed657b85576bcd39ac78397bda4a27cfead6b292fcf5542a077 dnow[.]com e288efbb8bdf4b99aba1eb6e0201ee4cebfceb95ab8ebf5212198753f1c9a917 e883ddb2c0f9e330226c0e28ee82612e4718891353fd54a3146d945f0648d080 erdemhastahanesi[.]com[.]tr esbpr[.]com fcce8883bd61210a544779238663e72fd2d5b07bd8d846f28b161f6fb1a09def generalgruppo[.]it glassdoor[.]com globusmedical[.]com grinfra[.]com ixasystems[.]ch nutrypollo[.]com[.]mx nwtrophy[.]com ptse[.]com[.]tw sunsea[.]co[.]th tecnoaccion[.]com[.]ar thaifilmind[.]com thqnordic[.]com 02e494f1e1271755593c3fe3e2667605bb23b0379ce7e01d0aec57b172dbb198 03cbd69b48c021bf39becd4d7b2456e4d09e303a5194714d58c64bf060d6ae66 28429732efcca36df55f9bc63c72911fd53bfd289414d70042fb9c2b3eeeb6d0 418c414f24a673de68539d38592fc5c3771eb6e3c696d600430d6e00732c8077 69478ba6910339975c0dfd46f6af1f8c1618cee4f28db57517c7ca626bc47efc 7e1c869e62affb780750ef8ed5fa4fa5600a6eab38859e9227463c3646a70a1d 9f35842728c4ec2a41c7d08f8a73dcbdf06e37c9fa40243e512beb391b26b821 9fe41ca9274fda0c0cee7d9965d55bb11a038af70a5775b7b711279f6f45dae3 a2146655593c77ca1f702ed28558b1abbcde6bd936d4511918fd79592c84135f a93f369cac23c8b5905cbd2bd7c6cfdb97be92d363805a6e0ba8fbfcd4478736 acqbuilt[.]com berghotel-oberhof[.]de breburltd[.]co[.]uk d1dba807c14e2748d86d47933c8c2d1e62d4f74d1758a9b4403e8e1029660542 e762959b95a4c4d38d5cdfe7bda8ee1c234c486319e695c992529d480da29088 ee0f3566cf2ff0cc2b97443ee2d29f5ad7f751c2eb350e227bc96df16aa2a8ee ef6a4b7766c4cc1f83f71ed1ea089a4c011c1225a2554bfd011b168b907de8c7 exactaoptech[.]com fes-sport[.]de frm[.]ind[.]br hd-werkstaetten[.]de mbassociates[.]org montronix[.]de ng-engineering[.]de winterdienst-berlin[.]com 07ad35bab98437ebf3730701062365e43965d45b1979f54247d1a131734933ee 0c446ffdd7ee901e122784284d1c840204428f52cf21d5924a20536a12b68750 2531a9f94427cd29a4b895519eeaf257c77425cbc25cf7b1759adf8392f2d4e7 290dc5ced01c6a3e12e2dde572c073d2d52bb9e73f5352f4bc90961bf7fef00c 564832daede2ab8474f5d1481dacc7cf4c1475630de009082949652bf77302c1 7cf0cd213d002cac5f4674a7aabf848bf2caec1513396c21465f20c366f06211 984169a3c906d6bcf7cec3855cdbde125f63ad7b85f6fddca58e9ca30a47c288 ac1d8b8d04d0ee492e5a45c472b7fc67c33ef1296b70ef31a378dda9120b4256 b981ed3ff6443a762a307be4ddcb3a881205496cc52721f957096f65fbe3454e b9cd78518db2a7206c214f5aabbe21cefbcf88e870030257192afdbe43a1fc5e f0613e52c6aca9d7b02e6fd719e372664a38e6ca466d743304d4e3226be5e953 fb4623916cd3d9298fc4dbb7ca27da3c6ac86ea4bb8c6b60c42b2f5046f3c516 hoerburger[.]de www[.]banditchippers[.]com www[.]bliss1041[.]com www[.]careclinics[.]com[.]my www[.]fecredit[.]com[.]vn www[.]framegroup[.]com[.]au www[.]i-one[.]co[.]kr www[.]lamaisondestravaux[.]com www[.]laparchitects[.]com 169b7d57b8cd864fcbcf69129801ae2eab3408b22b628ac31aa984686f727d66 18ec76aacb949d1ddbf1bcb9a7bd5f753209ab417863daff76386a8b2b811c48 5aa6e7d8dfde514b2760a63608427dee0d52937e000541da48ed7e9798b9eb3f 670d653f1d136d83d0bb39e2e24302f26a80dfc8004638ebb369bc866ef8fdaa 93400b5948b1e0e7b70b8c64a2b5a88d787b47dc8fbef97dd746cad92380e017 9fab94c1fe56ef3ba7570d637d7bb85eb30d94d711a9ac7eed50af54d0a02016 df115a3bcd06592dbf71d58aeafa7f59061e21a5c7a8579708e6b33fbfa7f265 ecabdc44d7693a5711984495064a99251201226d40fb2673ed885cb9bc1ecaba ede7483a061499478e52d5400434ad34d9c349259c47344322466045af8961dc lindner-group[.]com www[.]auminc[.]us www[.]itcproperties[.]com www[.]southpacifichotel[.]com[.]hk 730a74cefdbdf8a9864b85a3f127560fbabf2c41ca6ae92e4ffcd849978a1843 apatpa[.]com c0c4a5d43cc88fa8a9cca5838b6c942f9c40101222aeb3806fe19ade68397e5e c837461e2ae9b5c9eb2305052f909799742c37cc86e123e06153c0e29f5c41a2 www[.]app[.]njk[.]ee www[.]veoauto[.]ee 10a18b2841bf83b06eae01eda65e8d2666d0ee5a01382db5a8da4351ab4dad65 25a4e68efc5499a17c6a595eea1f0a5ebdc3359b878a90c46c1ba451d98dd92b 5d8fd95d71b2e09357ccc430f4b97e9d814ba4a1933fd04bfc89c0992ef5ecf0 7384ec86a6f3ceb0b743ed6e40bc2cb706c1099398f654e383bf1e97cf3925df corematerials[.]com hwlochner[.]com www[.]alterconsultores[.]es arxiv[.]org doi[.]org privacyinsightsolutions[.]com signinattcomdynamicilriaploginu0tecp0q3w[.]mailserverupdatealpha[.]workers[.]dev readme[.]md 137[.]220[.]151[.]95 3d541ceb1d0b18639373d02041ad1f7d3d7aef794852be55a3624f4525147af6 a816118d6069eeba26f9ac706c4c782877e0762bc3a04add03ba10ed6ed6b2b3 2a48e76e16295d004a9aa87a167fe3304eb1312fb628a5f608f5d2b9302b847f 7f49ee534aa6ba053131d4ae697eb2eb834bd0079e28c69bf2aa7a203270b024 185[.]86[.]211[.]133 188[.]92[.]160[.]12 194[.]126[.]110[.]119 212[.]47[.]208[.]133 217[.]146[.]68[.]8 217[.]146[.]69[.]20 217[.]146[.]69[.]23 217[.]146[.]69[.]25 217[.]146[.]69[.]49 217[.]146[.]69[.]53 217[.]146[.]69[.]57 217[.]146[.]71[.]253 217[.]159[.]186[.]135 cloud[.]narvavesi[.]ee ecoforce[.]olerex[.]ee f58be26fe4fada09b9c13d8bbd453c25 kajakallas[.]ee kviitung[.]olerex[.]ee olerex[.]ee tagasimakse[.]olerex[.]ee tartutk[.]ee www[.]bussijaam[.]ee www[.]eurochem[.]ee www[.]kroonpress[.]eu www[.]narvavesi[.]ee www[.]parkimine[.]ee www[.]teed[.]ee www[.]tlt[.]ee gitnow[.]dev 207[.]57[.]134[.]202:9998 35[.]77[.]200[.]163:80 200[.]170[.]159[.]131:3333 139[.]180[.]160[.]10:3333 159[.]203[.]162[.]54:3333 159[.]89[.]103[.]56:3333 35[.]205[.]161[.]123:80 043cd4c5b9346b072d4c6dff0a87092556031018 127[.]0[.]0[.]1:9002 127[.]0[.]0[.]1:9003 146[.]70[.]41[.]178 146[.]70[.]87[.]67 206[.]189[.]149[.]191 216[.]245[.]184[.]214 270fc72074c697ba5921f7b61a6128b968ca6ccbf8906645e796cfc3072d4c43 65[.]38[.]121[.]64 bf503b5eb456f74187a17bb8c08bccc9b3d91a7f0f6fd50110540b051510d1ca libcext[.]so malware[.]news signin[.]amazonaws[.]com carhartt[.]com crypto[.]com ccsperfusion[.]com bestsocialmedianewspapper[.]com linked-log[.]com offlineupdater[.]com python[.]org e27ae65977287bdfb7b0e15fd3603f85 218[.]244[.]142[.]4:8889 103[.]6[.]169[.]62:18443 106[.]75[.]249[.]202:6666 124[.]220[.]34[.]180:6666 165[.]154[.]225[.]239:8443 203[.]91[.]75[.]89:5005 210[.]56[.]48[.]227:80 43[.]163[.]88[.]35:80 8[.]134[.]70[.]73:7777 8[.]152[.]212[.]104:443 bleepingcomputer[.]com hxxps://supersystems[.]com/ firebaseio[.]com esopartnerscpa[.]com zummocorp[.]com ajax[.]net anti-malware[.]ru threats[.]kaspersky[.]com cimbsecurities[.]com meeting[.]tencent[.]com qnwallpaper[.]keansoft[.]cn claude[.]ai[.]download-app[.]us clearl[.]co downloading-api[.]it[.]com claude[.]ai webz[.]io 0xrpc[.]io bloodboundcitadel[.]top elisacavaletti[.]it marinexperten[.]dk obfuscator[.]io styletimeset[.]com 022a7bcaa06b1adb9a68553342667ae6cf7393c9ef75ff2a95b842237ac0237d 653df4b7a23a9fd81d5a19bc718b9edc3d8a5b798d7f438c4035c491534df542 macallister[.]com 228b0deb69d5a2d2262287cea8c0369f17f4f3ae8ab5d48f86e1ff88e0939ba2 2c01db07d755889e3c9fbb204daa3809ad2f08644f71f741e9304802648a284b 48b8e4b9f17cf7aba80bb1ed211e8922decf30e5523cb1a010aead538f0c03c1 b7cbd3c8361809e5ab34f474ebcbf8a3e67dba7cb21e2906cefefc36b61b55e0 d315b93874c32dc9a4584b730ff92a120f9ab2aa815404e22b24ea55d15bb6a2 f2948a00e3ad3a0fa1f278212f03956a421ace9db45b85f2c9bc69531e96d881 vigilia[.]com[.]uy www[.]atcomm[.]cn www[.]qihanbio[.]com www[.]stecs[.]com[.]sg 35[.]73[.]165[.]146:80 38[.]242[.]246[.]176:8443 infectonline[.]store 248f37b3b9fb2dee0357582b582fc9502d8156dad121bc7eedf2b45464f5b843 5e39de3c9ed0296b180ee91cba3f92d329928dca4330a1bf3c5bf4564e7c9305 75fd4561678329a1dc674276f55d083a9282da9f6833960a579de2ebeccc77c5 7e9303f81d6f746ec808e97a2bb23af3e488f5c11ae4dfe94fa532c52917dd6b 8dba1b3b4c48191882cf88a105c36b3183e7d9a9f458903d1229875359c39449 a0660dbd771188b5dce4a2fce6547d769d79b512e550224dc33e248043516b1e afd50deb24778c800623e25660121f6ccde879c4aa09e5ff9e8f6b33ccc99445 amzur[.]com b075f7239d1eccd7583180e36dc4598b4c52b7feac648ab029123a388e13c678 c888f20b360f22f0fecf1c2e21471c3804e915a7e98c773462a0fa4fb11db6e6 dc51135163c3c6c53c406d6b64e1d4547cb7ad5b9b9d76d84bbb5324d42bb4fe marketplace[.]e-resident[.]gov[.]ee oam[.]fi[.]ee www[.]dirhami[.]ee www[.]evr[.]ee baltijaam[.]ee tallinn[.]pilet[.]ee www[.]inges[.]ee www[.]kaitseliit[.]ee www[.]instagram-ssew[.]vercel[.]app www[.]amazon-clone-silk-alpha[.]vercel[.]app 0163c6bd3a2701f700f39ad6c0ad0a9e7f4ab4f79bc6d831ae4fdf2782059fa1 4817118107128e4439f88e621799c61fe1fdc8cfb32c0cacd7f4ebd69901d51e 91873ef3f3e1d3563c2be1050a60dc6d73ba4eee04607b2901dfb148217bf217 etnasoft[.]com pm[.]livable[.]com 0fa487a1e83423b3ccfd9fde99c16ee96f2c33cf50567f8de12e66ef23561faf 9e6a4811b38b978726c9e0f10e9b6809078a95d4636c10c5a750aa631b239f74 9e95693daec9ecc62b2ef0f136a01dfe36e8edfeebe7d8dd82fb5017de8a8963 agri-mac[.]com[.]au ccba80f45992f1fceaa66b7c7eab79754aa0029f4a1c60514b4a670367be72ad fac2de095025d824d54d4dbc6ba4a80124ac115480a527534f64aab383a88aab sprachakademie[.]eu zionconstructioninc[.]com 153409018f9eae36d4509309a3293d7f81d6793a079c781b53dac6a20d8cf00b 30cc7b3b308c9253f23d5f5dcd62f86eb8f7a81e5324739fc6f2231051b6f474 637ecaa0f55ec4bf8ba1cf846ebbd858203058b47014d9f2d50f41cbc84e2003 6ccf3d62d72b15eeea00e377cfb9ab707938a6962ff5f8921a11676f1112a668 771782a04b5f3b4246c96c873fef4f9320bc71de944805c72bdfe2672fed5255 9d9230332fec34c46c7feaaf37142e253d63e4fb82887e371407d478b28fc6ad a94f86e86d12b7210c6db08c45376b969435482d6c5ecc561840e10c73425bc6 f5ea5c60988acc4cf850fb25f1f4cd7e1b42455d8d85d9327281e00e49063f1d fpmanagement[.]nl ipro[.]com revealdata[.]com www[.]dotlines[.]com[.]sg www[.]kling-gmbh[.]de 11ddfb569b8f0155042ddae7cf0b25ed1d658b82c908c46da160cc7ebd261e3a 1b556de80ccde2fb8c3776b4038644ecb6d8da7e0001c75ea1400bd8f0a29591 2a4eb5b2bb41be900cbf2349e2f9644e68a3a562761595e375223bb6d1695ebc 33f2fbb222b6c697ef9e10a0265b0d70e80f7106609d80fff35d764ede160952 46ea35ddb860d073efe30b86e0e11e61d3addffebef6a740ff8a2014dea67261 47ff277e693a3c157165f1ff8fd7fb40716d52c3b642cf2960c54d37c394eff8 84ef9c83e099de2a60f89bca2278b7edec9b59e17d16c1a4a2e92a8841a09800 c1541de82f638120aa7d14b92c347a9c3f412f12e2c2c9d8bd61ca6c9b1da431 db0cccb7d49ce6cf74e000d15c2d0f886aba761116f6c88f44c881fe9f25603f dece[.]cz ea0d0b03589d77b9774b3ee7a1e100be1754b4eb2c32f9fd61751f5aff1e4b70 f43ccd742f9a61be2626405a46dc1ed0f0206e361946b300bbc108a7737cf2ab jgsee[.]kmutt[.]ac[.]th qualisteel[.]com servifruit[.]com takt[.]be www[.]opensports[.]com[.]ar 551d5764ec59a22407f186f8b9b6b1a9989d842f390ab2eefb7750ff2695c98d 5bc9644477bd65e4c331fd1622f7ed6bf8c07062296b25214e7f04bf89dc7b34 90050148b3db5bb9b99ee68d33e8f86400b1deac3f528231336921ecb647d8a1 97f8ecc0826183b9299a704486aa0bbcc568aa423b169dd0416ca529132ab221 health[.]nsw[.]gov[.]au nextlevelurgentcare[.]com theheartcenterofmemphis[.]com 104[.]26[.]5[.]127 134[.]209[.]255[.]122 172[.]67[.]69[.]157 195[.]80[.]119[.]141 20df6ed743de2aa306501d540e062fe1 212[.]247[.]238[.]227 212[.]47[.]222[.]68 213[.]184[.]44[.]246 213[.]184[.]60[.]37 217[.]146[.]69[.]22 217[.]146[.]69[.]50 217[.]146[.]69[.]8 217[.]159[.]234[.]151 46[.]22[.]220[.]214 62[.]65[.]34[.]245 62[.]65[.]34[.]248 88[.]196[.]219[.]212 91[.]129[.]89[.]90 91[.]224[.]189[.]34 altero[.]ee dokumendiregister[.]rahandusministeerium[.]ee fp[.]lhv[.]ee gmail[.]co goproperty[.]ee permits[.]ts[.]ee tele2[.]ee transport[.]tallinn[.]ee vagner[.]ee www[.]lhv[.]ee www[.]ts[.]ee 169[.]58[.]178[.]44 hxxps://isc[.]sans[.]edu/podcastdetail/10074 polse[.]us hxxps://addresses[.]performs[.]vu/communications[.]html?good= sav[.]com x22client[.]name chatgpt-codex[.]gitlab[.]io chatgpt[.]com claude-code-app[.]gitlab[.]io lasvegaslaminateflooring[.]com 109[.]236[.]50[.]145 7e1d7ead8d441a9e54c8d5577fa2affbdf0152ac83e7a5217bef2ac0a5012b54 9f16af86d070916cdf9cc1eb4b8d2f8981663a824eaeacd2a6f969ef5008b5b4 10[.]65[.]45[.]223 12011c44955fd6631113f68a99447515 142294249feb536e0edbe6e2de3eb3c3415ecf39 144[.]202[.]61[.]209 149[.]28[.]101[.]219 18f0898d595ec054d13b02915fb7d3636f65b8e53c0c66b3c7ee3b6fc37d3566 2114d655805f465d11b720830d150c145039bcd4 27f7186499bc8d10e51d17d3d6697bc5 45[.]141[.]87[.]55 4f4f8cf0f9b47d0ad95d159201fe7e72fbc8448d 504e1c95[.]host[.]njalla[.]net 504ec1c95[.]host[.]njalla[.]net 52332ce16ee0c393b8eea6e71863ad41e3caeafd 5675a7773f6d3224bfefdc01745f8411 5bf41754bfb3a18611b2a02f7f385960ed24f8e1 68b6d0cc1430e2d4f70e2ba5026d1c4847324269 6f9326224e6047458e692cd27aeb1054b9381c67aaf2fe238dbebfbc916c4b33 71f703024c3d3bfc409f66bb61f971a0 80[.]78[.]28[.]149 829a9dfd2cdcf50519a1cec1f529854b 88df27b6e794e3fd5f93f28b1ca1d3d0 95c96de7dcb5a643559ac66045559cc9 a4bc6bebabb52ed9816987b77ebae6ef70e174533a643aea6265bdf1ed9b8952 a7240d8a7aee872c08b915a58976a1ddee2ff5a8a679f78ec1c7cf528f40deed abb2a6a0f771ab20ce2037d2c4ef5783 ac0fcbc148e45e172c9be0acf9c307186f898803 ae7c31d4547dd293ba3fd3982b715c65d731ee07a9c1cc402234d8705c01dfca aeaf7cc7364a44b381af9f317fe6f78c2717217800b93bee8839ab3e56233254 bcff246f0739ed98f8aa615d256e7e00bc1cb24c8cabaea609b25c3f050c7805 c0e5e4b5fcbd0a30b042e602d99a6ee81ad5d8d7 c6f92d1801d7d212282a6dd8f11b44fe c92c158d7c37fea795114fa6491fe5f145ad2f8c08776b18ae79db811e8e36a3 d15d45d9d9a8ef7a9f048d74b386f620f3b82576 e1521e077079032df974c7ae39e4737cdb4f05c6ded677ed5446167466eeb899 e963d598a86c5ee428a2eefa34d1ffbb f24fc14f39c160b54dc3b2fbd1eba605ec0eb04f f8810179ab033a9b79cd7006c1a74fbcde6ed0451c92fbb8c7ce15b52499353a hxxps://cwe[.]mitre[.]org/data/definitions/427[.]html hxxps://thedfirreport[.]com/2024/01/29/buzzing-on-christmas-eve-trigona-ransomware-in-3-hours hxxps://thedfirreport[.]com/2025/02/24/confluence-exploit-leads-to-lockbit-ransomware microsoft[.]net 18c2090e8a0ae0568af9b87e59eaf8270f23d2909600ed9db91a9444fd8b278f b8d107800403b9197e5b7609ceacd8e4cac1b0f9a1d156e6dacd6c3f7794b36a chrome-stats[.]com wmdn[.]net n-tree[.]com rsk-immobilien[.]de adkissondevelopment[.]com sae[.]com[.]mx facebook-loging[.]blogspot[.]com 1709[.]hk hxxps://news[.]bostonscientific[.]com/update-on-recent-cybersecurity-incident hxxps://www[.]cisa[.]gov/known-exploited-vulnerabilities-catalog hxxps://www[.]cisa[.]gov/news-events/alerts/2026/08/26/cisa-adds-six-new-exploits-to-catalog hxxps://www[.]scworld[.]com hxxps://www[.]scworld[.]com/brief/cisa-adds-owncloud-linux-kernel-and-jfrog-artifactory-flaws-to-exploited-vulnerabilities-list hxxps://www[.]swktech[.]com hxxps://www[.]swktech[.]com/swk-cybersecurity-news-recap-august-2026/ hxxps://xage[.]com hxxps://xage[.]com/blog/cyber-attack-news-risk-roundup-top-stories-for-august-2026/ thecybermind[.]co 5276fe5b04c7e5d0501b9aecbc742d21e5fedbdc55253e7882fbcb4cea1407ca 449aad9747857c8e789f7efadd62c5692432e862e39503b309cfb75490074b8b 6cddf9a2dfe8da7809526e5b70e75c8f916518b89f260cc7ccf1edf44d7bdacb c31f448ff84da3b87b4aa4cea9febf9fca50bc4e16a302b8b041118669a67b5c ferretornillos[.]gt finodayacapital[.]com www[.]sankovn[.]com 103[.]2[.]2[.]160 122[.]17[.]137[.]109 122[.]28[.]54[.]119 124[.]146[.]170[.]99 133[.]18[.]131[.]38 153[.]127[.]237[.]90 161[.]33[.]38[.]102 176[.]28[.]9[.]5 202[.]51[.]9[.]132 210[.]135[.]97[.]117 219[.]117[.]45[.]61 2fwww[.]mitsui-soko[.]com 40[.]74[.]100[.]129 60[.]32[.]200[.]134 7fee7d5417be20cc599957d843c03194a537446c62e7db5cfda44f9ba58e343c c7ea77f46565c9a26755d36ee1a2016dee39302b catosweb[.]kamigumi[.]co[.]jp jreastfaq[.]jreast[.]co[.]jp scm[.]meiko-trans[.]co[.]jp sslvpn[.]toyofuji[.]co[.]jp www[.]dpj[.]or[.]jp www[.]meiko-trans[.]co[.]jp www[.]mitsui-soko[.]com www[.]nuct[.]co[.]jp www[.]pref[.]yamanashi[.]jp www[.]sjn[.]jp www[.]tochigi-tv[.]jp www[.]toyofuji[.]co[.]jp www[.]yurakaiun[.]co[.]jp active-enable-right-click[.]top hxxps://cyberscoop[.]com/unit-42-palo-alto-networks-warning-agentic-ai-frontier-models/ hxxps://socket[.]dev/blog/openapi-react-query-codegen-npm-compromise hxxps://thehackernews[.]com/2026/08/openai-says-reward-hacking-drove-ai[.]html hxxps://thehackernews[.]com/2026/08/three-cvss-100-servicenow-flaws-could[.]html hxxps://www[.]bleepingcomputer[.]com/news/security/australia-arrests-alleged-teampcp-hackers-behind-supply-chain-attacks/ hxxps://www[.]bleepingcomputer[.]com/news/security/mckesson-discloses-breach-after-shinyhunters-claims-patient-data-theft/ hxxps://www[.]bleepingcomputer[.]com/news/security/papercut-releases-second-emergency-patch-for-exploited-flaws/ hxxps://www[.]cisa[.]gov/news-events/alerts/2026/08/27/cisa-adds-three-known-exploited-vulnerabilities-catalog masscan[.]cloud webhook[.]site 74[.]208[.]24[.]40 74[.]208[.]79[.]14 mta-80-125[.]sparkpostmail[.]com get[.]spip[.]net vectorsoft[.]de kdynium[.]cz 38[.]207[.]178[.]192:50812 38[.]207[.]178[.]192:50813 halcyon[.]ai hxxps://www[.]redpacketsecu 4[.]16[.]7[.]1 4[.]16[.]7[.]2 gusto-education[.]com com[.]mm singleton[.]com ngrok[.]io pipedream[.]com hxxps://destangelirvip[.]com hxxps://wp-tracker[.]com/api[.]php 136[.]110[.]54[.]83 136[.]66[.]71[.]144 34[.]125[.]245[.]56 34[.]62[.]67[.]70 35[.]204[.]220[.]189 claude[.]com www[.]facebook-rus[.]blogspot[.]com admetricslab[.]org 154[.]36[.]188[.]98:8080 192[.]229[.]87[.]219 192[.]252[.]180[.]45:6666 206[.]238[.]196[.]96:6666 64[.]81[.]30[.]99 gov12366[.]com 0b615115694b8780a6bd966358e0eda8a8aff93f5111d438ac211868e06a74d5 12111a5bd601cd4002123242d88dfdea3a71f2db6c295fc57d45e3ac06f71ba7 2935be4bcb0c9814f85b9343254c9e023ed13f9458d73a4fd21af39185f22eb2 66a4ab3719e983e0dbf79772bd146984d312e6fb2bba9627394f0441680e6706 a715b027a71f1a97d012d6cf3eb7de8ee6612f05b12e0ab8bbacda6b6a97db9f bd79871c076e12c0c0e87ea96a5ef3797c1c41cd66a7f8e3c9773d1d05558c7c ce2d3a0987e3aaaa543fae816d1ae0e27f9403e33fc1e73231874972b24a1533 e410052d89821231f28ed34aa96cf7838bbf3f9de29571e704ca9d5cc524a404 fd97428eee72c41e6fd91a943243b6357eba073efca60f7a95666c4bf3898cdb incolur[.]cl lemonfarm[.]com mimafoods[.]net partyrentalltd[.]com teccontainer[.]com verbux[.]com wmiemporium[.]com www[.]neooftalmo[.]com[.]br 1c54de5009147677ec85bd2ef947ee9389aef8def6fe63edfa7329112463a26a 405eb263acba845b2928886e5eb8266bb17c4382c04be6c81eb0ac836486edb1 d45168fbceb18b100372ecd8a49d37855d01ad0035b9308efa276f23f2eeef81 jindallifescience[.]com sysconth[.]com 117[.]72[.]182[.]5 fed1dc9868383d86fd5dc28adbc57b1c3ced22028c544f4b3e75fcf4830fd2b1 evo[.]hoster-kg[.]com hoster[.]kg 110[.]232[.]122[.]122 110[.]232[.]122[.]73 124[.]146[.]171[.]130 124[.]248[.]147[.]169 150[.]60[.]208[.]16 150[.]60[.]211[.]82 157[.]112[.]187[.]19 165[.]22[.]228[.]157 183[.]181[.]94[.]6 210[.]149[.]83[.]11 210[.]232[.]10[.]16 60[.]43[.]237[.]35 61[.]126[.]51[.]241 aoimorirailway[.]com glossary[.]mizuho-sc[.]com information1[.]gov-procurement[.]go[.]jp jimin-miekenren[.]jp nptc[.]co[.]jp www[.]aomori-airport[.]co[.]jp www[.]city[.]sendai[.]jp www[.]hakodate-dock[.]co[.]jp www[.]idcj[.]jp www[.]kkj[.]go[.]jp www[.]konanbus[.]com www[.]naikaizosen[.]co[.]jp www[.]seiho[.]or[.]jp 157[.]245[.]213[.]135 captcha[.]py cooldogshistory[.]com digitalpoint[.]com letsdiskuss[.]com grok[.]com sdhomeinspectors[.]com southcarolinacounselor[.]com 239[.]255[.]0[.]1:7400 boschko[.]ca global-robot-api[.]unitree[.]com 51[.]159[.]98[.]241 152[.]32[.]189[.]145:9999 192[.]210[.]135[.]124:3333 209[.]97[.]157[.]78:3333 34[.]101[.]122[.]157:3333 51[.]178[.]106[.]131:3333 54[.]38[.]203[.]62:3333 stemshop[.]top 47[.]93[.]159[.]68:31337 0d1c15cd95a1483b2f91fa4b8ac7f1aed70a364a170aa75c8f4b89ac7a5bcc83 101[.]102[.]235[.]60 101[.]102[.]235[.]70 101[.]102[.]235[.]71 133[.]110[.]235[.]65 133[.]110[.]235[.]74 133[.]130[.]60[.]161 150[.]95[.]169[.]197 160[.]186[.]250[.]80 162[.]244[.]253[.]29 162[.]43[.]105[.]119 162[.]43[.]118[.]39 163[.]43[.]80[.]83 183[.]181[.]96[.]101 202[.]238[.]233[.]70 20[.]46[.]189[.]8 210[.]149[.]92[.]74 210[.]149[.]92[.]76 210[.]196[.]222[.]55 218[.]40[.]12[.]190 219[.]99[.]136[.]44 2ficcj[.]or[.]jp 35[.]244[.]242[.]5 40[.]115[.]206[.]185 45[.]82[.]189[.]75 49[.]212[.]207[.]198 amane[.]nyk[.]com central-lng[.]com d0c5dacd38cfdd66ba8d8ab148b97ef7793253c5 hikawamaru[.]nyk[.]com iccj[.]or[.]jp inet[.]nca[.]aero jp[.]osy[.]co[.]jp kllwebsystems[.]jp[.]klinelogistics[.]com mol-logistics[.]eu museum[.]nyk[.]com track[.]kuronekoyamato[.]co[.]jp www[.]aikai[.]co[.]jp www[.]chukyokk[.]co[.]jp www[.]city[.]fukuoka[.]lg[.]jp www[.]city[.]niigata[.]lg[.]jp www[.]city[.]okayama[.]jp www[.]city[.]osaka[.]lg[.]jp www[.]city[.]yokohama[.]lg[.]jp www[.]city[.]yokosuka[.]kanagawa[.]jp www[.]inpex[.]co[.]jp www[.]jimin[.]jp www[.]jmf[.]or[.]jp www[.]jmuc[.]co[.]jp www[.]klinelogistics[.]com www[.]nitto-ntl[.]co[.]jp www[.]nyk[.]com www[.]sanoyas[.]co[.]jp www[.]shi[.]co[.]jp www[.]tls-inc[.]co[.]jp 117[.]50[.]184[.]221:10080 150[.]187[.]25[.]242:9999 154[.]94[.]224[.]35:2087 45[.]87[.]53[.]6:8443 8[.]137[.]149[.]67:8091 titanblog[.]org fortinet[.]com 20[.]106[.]182[.]197 oast[.]me snowflake[.]net snowflakecomputing[.]atlassian[.]net 4[.]16[.]5[.]1 mocky[.]io 185[.]62[.]1[.]8 hxxp://185[.]62[.]1[.]8/mon/mon[.]zip wiz[.]io ioloo[.]vu bssbfeffoa3a[.]nz d7zzqhzrglbv[.]es nuihuw[.]top sx[.]nuihuw[.]com 192[.]36[.]27[.]51 sherpaintel[.]com rity[.]co defa37c16feddd0ac8e686e6ca89e5c14f12b972234c823b215f0108ec265262 13[.]231[.]27[.]0:80 www[.]bet-facebook[.]blogspot[.]com www[.]netflix-clone-psi-bice[.]vercel[.]app ss[.]py 1[.]0[.]0[.]2 3[.]0[.]0[.]4 dilmahshop[.]co[.]kr fluxoras[.]site jad[.]co[.]kr anydeskupdate[.]com netviewremote[.]com windowservicecemter[.]com 11[.]110[.]0[.]141 11[.]134[.]0[.]53 11[.]136[.]0[.]37 11[.]138[.]0[.]2 11[.]138[.]1[.]7 tnmed[.]org business-data-leaks[.]com helpdesk[.]com 149[.]72[.]248[.]16 o3[.]sg[.]calendly[.]com photo-26654[.]cfd tgsrepcrack[.]py 113[.]44[.]89[.]172 b79426deb1be63a05be467c03f7613fdc431a92196f94965a4418a8ab5c53da5 4e84a57735a9e448e53ca2cc11c3c1848d38026e7f0278bff1a75f666e691d68 discourse[.]ifin[.]network justice[.]gov scmp[.]com therecord[.]media time[.]com 211[.]27[.]196[.]111 kwe[.]com 10df3451915ea35bcb17efe121415f24182680e2d07fc09df07ee695072104c1 31[.]58[.]209[.]241 31[.]58[.]209[.]241:8000 7447d0d0c34779d4c519823b39bf6ddc16d2b34a226b82ee69da6f5b4a77ad82 10f5817c271e626e58456610f5c3a2dda4abb928c87a4742e099c3f6dbbdbfff 111[.]87[.]221[.]81 118[.]27[.]122[.]214 133[.]167[.]25[.]3 13[.]107[.]246[.]53 153[.]122[.]205[.]40 162[.]43[.]122[.]136 163[.]45[.]246[.]1 163[.]49[.]35[.]121 194[.]63[.]248[.]52 195[.]225[.]15[.]99 1f6bdc1e6f6b959cb7086c1c1df75098e87ed80860956b056914203de6b78ace 202[.]32[.]8[.]152 203[.]180[.]136[.]87 20[.]251[.]195[.]61 20ver[.]jp 210[.]129[.]65[.]84 210[.]136[.]96[.]6 210[.]148[.]118[.]162 210[.]172[.]207[.]93 210[.]239[.]93[.]203 210[.]239[.]93[.]204 211[.]14[.]7[.]143 21a3fe0cd9d5c415d545e925e2ed1e3cd522ad165d41a6a513989f807ded9c2d 220[.]156[.]83[.]129 252fmy[.]au[.]com 2c98418aa037bd5ab085d24beb1550e1c1f7322378881d7dcdb7b7fe70a32077 2fconnect[.]auone[.]jp 2fmf2apg01[.]marsflag[.]com 2fmy[.]au[.]com 34[.]111[.]228[.]171 34[.]120[.]178[.]97 3d97b23fc0c907eb3abc5127aa9dce02054158caf639295bdda446cab7b2cc89 40hp[.]molgroup[.]com 40molgroup[.]com 4690d7264a77ada7dfc41b5d32f3016b15e54631ae87f5f80afc7be9d725b41a 69154fe2ee94506bc02ec090051bfcf8d4bdedab32e3cc2ad08887e9751e99eb 79[.]170[.]81[.]232 7c6a2030627a9a283a2e9a8b2c14037d45aa1aaab23e32db0b283a0e21b1f49d 7edb85280a479a4bb40e70e5013357a4887520a0c5a70a6442c6d8216e4e2878 85[.]131[.]213[.]17 8de4664b41b7a8edd35a33ff55672486879a87060bc4ec916ac8ae7aac4d0f92 applymail[.]do connect[.]auone[.]jp dadfa9f1cc8e7e1cd72a8693577bceda34eb4cd4585ec953615372ace11c4a9f doc6-test[.]mitsubishi-logistics[.]co doc6-test[.]mitsubishi-logistics[.]co[.]jp doc6[.]mitsubishi-logistics[.]co[.]jp e88fd594494bb3bfdb5428498e3a5d83 fc00d794789d421af106bfb10e3d6a82 forgottenidpass[.]do form[.]cao[.]go[.]jp gempyonoshokai[.]do login[.]do net[.]seino[.]co[.]jp nkom[.]no siteneigyo[.]do skatteetaten[.]no track[.]seino[.]co[.]jp www[.]chugoku-np[.]co[.]jp www[.]city[.]akita[.]lg[.]jp www[.]city[.]chiba[.]jp www[.]city[.]sukagawa[.]fukushima[.]jp www[.]city[.]uto[.]lg[.]jp www[.]digdir[.]no www[.]goyokaiun[.]com www[.]imazo[.]co[.]jp www[.]meitetsu-worldtransport[.]co[.]jp www[.]mitsubishi-logistics[.]co[.]jp www[.]mol[.]co[.]jp www[.]politiet[.]no www[.]pref[.]gifu[.]lg[.]jp www[.]pst[.]no www[.]seino-financial[.]co[.]jp www[.]seino[.]co[.]jp www[.]shugiin[.]go[.]jp www[.]tbs[.]co[.]jp www[.]toyo-logistics[.]co[.]jp updateservicecenter[.]com discuss[.]rapid7[.]com www[.]facebook-seks-30[.]blogspot[.]com 107[.]189[.]18[.]7 chamber-ua[.]org dosportal[.]app drive[.]google[.]verify-drive[.]com foreignrelations[.]us internationalaffairsportal[.]us ms[.]state[.]gov stateaffairs[.]us statistic-ms[.]live verify-drive[.]com d347170752a28e2b8c4b8b9f3cab2e3a6541ba11682c94498d26eb9002779d60 8[.]146[.]207[.]128 thomphon[.]com tomcat[.]apache[.]org mediapool[.]bg getpdfdigital[.]cloud 59[.]110[.]228[.]141 cdn[.]discordapp[.]com media[.]discordapp[.]net t[.]me hxxps://archive[.]ph/Xowgn hxxps://t[.]co/usH8GT0quv vascara[.]com cgcgabon[.]com karkinos[.]in verbux[.]cl 7081c859ec6ec62bc369252d901ee655 dnb[.]com memsic[.]com blog[.]relayshield[.]net relayshield[.]net 5c67a39a7d2face6cfca7477c47b63a71590a181a0014eae7a8cbc34094736be 8de1a83a5130559a50786324bb3d187c457de0ec15413c9e15c444c7a7c30185 9c3c4685fdf7bc72945001d6a218f6abf2d7c991d076f31f8ecece0080642f9a acacf192b43e5034eb9811ee3d87e2114a1d018001857f60db74b5b168859db8 www[.]ctec-truckbody[.]com www[.]metalconversions[.]com r136a1[.]dev slashdot[.]org 0[.]0[.]0[.]0:11434 241dd8ec6243d24bf937983b75b054e7b2956872b430094cb930c9527f97691d 2b0fab530e8ed663a4212b5ff388e184f09d1baa9f28278b0f23b4fadddc0e4b 38384151ca74c7dfc32611e41ea4b9bd996aa2345c98fc87769713128a71eee9 3b4c2e859741f8ef202f318bdac3f0346771d7263c46b44f099ca6acace1cddb 90099ba1249666ed56640bd5a87f454a54d5d452638239985b582fa5066b8a13 a5ea06a2f7ce1edfcaa2c17ea655105d4ab0958b9175522e24b1898b86e83272 b8eb3035a6c8ee03331631aed62629cda17d474188bb7d66820c72fc24d583f4 f8025f7f2e3417a690b5f5b6c509b88f9f8bb955b3d4c1794c742f24114d99b3 hamiltoncompany[.]com morganservices[.]com network[.]procore[.]com www[.]ai-thermal[.]com 1a47163b18bd84248f1749a31dd37690c1d9ee1d72d9a511deb8cc64fd41b2dd 41a15f2e2cdb5d42843b2e214b193fa094549584f18683981a772a5dc4391167 45cdd6bb0fddbf1fd6f16efab7589fcf1193627663d9a95c63a99a438b7e6a5a 553804e05a6926cc1c8f6b354047c26c7608228428f764ed380c12a3014bfe5f 60f2847950c8051e0f83a3cbd21acfb2a1df995f000c8d974dd90a303d370659 6d0870574ba568d2c11aed12e53cf3e34b17364547ee9d3960cf1da5b7f5fd5d 76f485d2b90888eeecd580b00f0d0d599840b7f9e561ab550b0be198e60003b9 78736c6733cc0853dfc67b056715748e78b3419720b4d03471f8bacbd7f2a735 7de82453d1b3a90072dd8323551f2a2ddb7aaf5b9064ae178f68074e698a3b56 copcp[.]com e8a01b3a1cc0dfc2ccd28b0226b3304da9701b30f7b8b94546861d3d3daff061 f1fed3de9fc6c221f895b83ca3e34ae6bd0711739f115e4ccd6b2ea7ed417272 industry[.]airliquide[.]kr johnsoncityhonda[.]com kidneyregistry[.]com lockheedsolutions[.]com parkderochie[.]com studiolegaleese[.]it tiseopaving[.]com www[.]arich[.]com[.]tw www[.]baichi[.]com[.]tw 20381b1e502c766486fddb0b26184073ae80619e07311d62ae81a4049da05aea a394897ab44d050f65b0a8775261ae724a19c2453d18ecfe30babafc15d19c9b ntu[.]ac[.]uk www[.]a-plussoft[.]com 879aaa93132d78c2f8d20c60279da9f8b21576d6 api[.]keyval[.]org hxxps://unpkg[.]com/ndmxchdjxn2@1[.]0[.]0/index[.]html login[.]microsofte[.]live bluetrait[.]io dfir[.]ch hxxps://cutt[.]ly/praXEwzs` hxxps://dfir[.]bluetrait[.]io/simple/msp_download_agent` 101[.]102[.]210[.]138 101[.]102[.]235[.]61 101[.]102[.]235[.]62 101[.]102[.]235[.]72 103[.]3[.]1[.]150 111[.]108[.]184[.]60 111[.]108[.]184[.]62 111[.]108[.]184[.]70 111[.]108[.]184[.]71 111[.]108[.]184[.]72 113[.]41[.]55[.]35 142[.]251[.]13[.]121 142[.]251[.]140[.]83 150[.]95[.]189[.]46 183[.]90[.]231[.]131 202[.]214[.]64[.]64 202[.]247[.]51[.]60 202[.]247[.]51[.]61 202[.]247[.]51[.]62 202[.]247[.]51[.]71 202[.]247[.]51[.]72 202[.]79[.]240[.]47 202[.]79[.]240[.]49 202[.]79[.]240[.]62 202[.]79[.]240[.]67 202[.]79[.]241[.]63 202[.]79[.]241[.]65 202[.]79[.]241[.]75 20[.]78[.]11[.]169 210[.]149[.]92[.]234 210[.]175[.]70[.]104 220[.]100[.]235[.]9 2ffinder[.]api[.]mf[.]marsflag[.]com 34[.]120[.]72[.]179 3af35b0f6734da8c5229eca1243385aa4453c94a35cdb7c5625c2bf28bd440ef 3f8fabc4822995811e427b5451d4432e6a73684dd7715e91efe9c70d9f0a53a7 4[.]189[.]224[.]230 5c375830a5ea87098847b794b011dd7e7b093ad6c967b695361cac8cb359aeac 60[.]56[.]170[.]141 70e7f3cc65797b87759c3c71a61e5fc2370bad9e4519abb258694be71d8dd737 85[.]131[.]197[.]40 85[.]131[.]221[.]124 a01[.]meiko-trans[.]co[.]jp a02[.]meiko-trans[.]co[.]jp a03[.]meiko-trans[.]co[.]jp a04[.]meiko-trans[.]co[.]jp apps[.]meiko-trans[.]co[.]jp b2e[.]fujitrans[.]co[.]jp bbss[.]softbankbb[.]co[.]jp d0bcf3eba39e3c19cf565ecdd44e74b56ddeb177 f3461177456353674ad142be8a457536fb4b5bcb ghs[.]meiko-trans[.]co[.]jp gsc[.]page id[.]my[.]softbank[.]jp meiko-trans[.]co[.]jp r-net[.]sumitomolife[.]co[.]jp sc[.]city[.]osaka[.]lg[.]jp www[.]chiginkyo[.]or[.]jp www[.]city[.]fukui[.]lg[.]jp www[.]city[.]maebashi[.]gunma[.]jp www[.]dai-ichi-life[.]co[.]jp www[.]fujitrans[.]co[.]jp www[.]i-ppi[.]jp www[.]isewan[.]co[.]jp www[.]nse[.]or[.]jp www[.]pref[.]aomori[.]lg[.]jp www[.]pref[.]ehime[.]jp www[.]pref[.]fukui[.]lg[.]jp www[.]shintaku-kyokai[.]or[.]jp www[.]sonyfg[.]co[.]jp www[.]sumitomolife[.]co[.]jp www[.]tcb-terminal[.]co[.]jp terminal[.]co[.]jp 77[.]239[.]124[.]102 wget[.]sh 94edf5396599aaa9fca9c1a6ca5d706c130ff1105f7bd1acff83aff8ad513164 jilinebyli[.]top 45[.]59[.]160[.]199 17[.]0[.]4[.]31 196[.]251[.]84[.]11:7771 85[.]31[.]235[.]109:5160 aclaraciones-digital[.]online balonx[.]online callbalonx[.]info panelbalonxfs[.]xyz soporte-aclaracion[.]xyz 63f90e6e1cf9e86f367afbe295c7f7d3433aaae0b6d503f0c6521f7772b9888d 80aba2e751dad73afffaeb997c53cbfd426eb6b740be9f016517e6e3d5a71b04 91[.]92[.]240[.]88 d4acf58ca8501813f8b90a661f7c432c1a7e2f83ffff5273682c9d2d822264dd d8649421e0855ecd56714ee4371bb424c59504bac9279f2def0c67edc2a1c231 175[.]27[.]214[.]144 34aa13b22687c94621717e8b2860abc75e565fbacaf6593e44b93f148f22ec92 50848d50c50982a14dc7c722b21f374361cd487af3e5b09affb6853293db546d mswalker[.]com 113[.]45[.]253[.]80:443 206[.]238[.]42[.]153:4433 117[.]72[.]39[.]83:4433 152[.]32[.]202[.]240:8443 thecybersecguru[.]com 169[.]254[.]169[.]254 darkforums[.]ru hxxps://anonfilesnew[.]com/s/4t-mBJg9wMy 0cc00486f16c50d3cb221a30c324bcc10fc6a50a484128825d059f8183cdc6e9 225ce6836c2605d183fd1221db5016fa3c1b6c9df615ddab43af680bc3501a2b 24486e2e7973e1eddcb55f351fdbec7ac308fcccd3a3484a31cd0b6e115741a4 3b9a9b574c21cfe10d23ec9d348b4402c614e4cd0757d7dc3d3b75eb34337f73 49305fa23e67f87ab17f7e55e6ddeed9381a0d78261ccdc6a3b67136fda00e4a 4cbb94fabbb3c7788914e5d14fbdd91d1150f572300f2b5659680b89d4a73606 514473ddf55c767019a585543ce7a80e4b88b235423397a79d84ea5d6c472fb7 80682b94da38727b4eda6adaf3d8fe93368a5a08b0fe5caa0c3329bcd2a4fbbb b0488f34211ec92394c326d8061828c7590a3069eb9ebd5fdc9c9dcfb426e62c b7cf9d5ae715ab837dbbc780af827b07635251424c74d05fdeae7f8f44b49bc1 ca48a42235a9ec6b81cf3a0bcf317b99bd63eb4c2428bc28ea0426434e0d0a9b dentistinnewbritain[.]com furnbed[.]co[.]za slgjustice[.]com www[.]123lumpsum[.]com www[.]consegsa[.]com www[.]cosmon[.]com www[.]pumpengineering[.]net socradar[.]io 32adeba684be8cdc6a6138cd3cf97fe600bc977e8c8f7f3ef602af5d9d125ce7 52a9c9bdda8ac4221edc116a4bf11401a6d66538a571ea6fd53dcd755fb918a2 b99e47b1cd2023497aaf31d18f6fbd387e012b6d2864ddcededf6922dc2bba1a cf0067a857889c9a1a41f2b6a53be77ae939ef837c0a4b89609ce963f1ce2f73 lagegepesca[.]it libertygrp[.]com www[.]daengineering[.]com www[.]jonesandlittle[.]com 592b173131df81cb501f8a297f6ef7e485343257e190160cd98885455f749fc9 af0c0d5b4a32295077bfbcd2e35e1df1331e374becf1dd6ddfad3d61478bf573 criba[.]com[.]ar d71c0974b5f9d24bd1242a9f28c4a0a32e71e9fcea349c9bfad315cbb84a435c dba914a32e8355dee5cfa3594068b2734c62a790316cb758e19f5414d9f4a565 frato[.]com www[.]furnishedquarters[.]com bsc-dataseed[.]binance[.]org perfectverified[.]com 5d91d857c5befffe1f8b4afd83fadc77c4725d676a907e197b8ff49758f62ef5 vapi[.]ai 1d8852f25d3f2fb732106c244c4b9e2c40e5765898f64618b2bcbacbef5cc76d 65fb7f2b323688ad76bded7d2a6268816c52ae5c10d657909385df022c782b15 77a7a3b77cf5c165ca0cc3f436e9f9e68387f639d5142bca504897709038c4c7 7e81ffb14dbd7055f0d4de5df78946073757a798b1fd6040c6baab42a1122f13 85562d008ffe30aef0fdf41f134732033cbec40d08d5510a66ecf71713885fac c726d063ea8eb6c365fc52c601bd31e3d5e84e8227d0aba9b6b95bf26d30c8b7 ce6de0932c470740556a4f94d8ec19b41d578264fd643358a2bae70505e970c3 dba2be05706be95f6f3458a5949253f4ecc68160de436fa621a18843cc4d4073 ffdccab689f856a0f12130968a70ca9a055caf4f8235ac2b0eaaf66bc323ba34 www[.]ae[.]design www[.]coldfish[.]ca www[.]cwico[.]com www[.]federisabogados[.]com www[.]meridianforest[.]ca www[.]ptesm[.]com 30acba97cbf7f8aac9241129e3bcf17fe925467b012b53c0a5cd5aa641932a23 3a6af1f41a1ee28d733bb73f255bdbee4bd0836c0f30f5effd82df97397c4341 5868e02674e9694af10a13643951ffd9b43aff7668cdf95591063628358beaa4 60149117b117666967f5db996a03b035526873e18f2f835c7ef7d68ebd8ace89 63bb2e0ae1e2ecd1cf4baa9bcb3ae4d931a20780749fefc6ded222293a68eaf7 6aefde123faa8e709f4594ad9ba7803ce65854427f1930391046eaf7aa5bd2e5 adt[.]com fd270c0541ac491f30746bc5072ea648b0cea0810cede2fa602c282900a40802 globalgo[.]com[.]pe stp[.]it www[.]euroflorasrl[.]it 185[.]174[.]100[.]0 bandhiem[.]com cheacker[.]store pynutech[.]store volatilesour[.]store lovable[.]app aspencore18[.]com atlas-compass[.]com bright-links[.]com grove-12[.]com grove-satin[.]com parentpreneurx[.]com quill-flint[.]com swiftsaverfin[.]com trekmesh15[.]com vine-96[.]com 3ad4bf5a86d26ffbf09cae42af330a98 admin[.]uipoxy[.]com cardoor[.]cn com[.]tw proxyforu[.]com 09fe30d73daa47c5ddc07c67ba4939ee69e40a4423c42d803bef45f457c15f0e 133[.]167[.]8[.]93 133[.]18[.]35[.]19 141[.]147[.]180[.]172 153[.]120[.]139[.]116 162[.]43[.]122[.]215 194[.]91[.]14[.]23 202[.]213[.]110[.]82 202[.]213[.]122[.]193 202[.]247[.]51[.]70 202[.]79[.]241[.]64 202[.]79[.]241[.]73 203[.]180[.]136[.]77 203[.]216[.]199[.]109 210[.]148[.]118[.]43 210[.]149[.]83[.]7 210[.]149[.]83[.]76 210[.]154[.]200[.]10 211[.]14[.]10[.]34 219[.]99[.]141[.]134 220[.]100[.]236[.]107 220[.]100[.]236[.]98 220[.]156[.]83[.]143 27[.]85[.]237[.]177 2fwww[.]port-of-nagoya[.]jp 40gmail[.]co 94[.]188[.]236[.]173 caldav-porta[.]nca[.]aero expresswork[.]jp ngmail[.]com www[.]city[.]kobe[.]lg[.]jp www[.]city[.]matsuyama[.]ehime[.]jp www[.]city[.]nanao[.]lg[.]jp www[.]docomo[.]ne[.]jp www[.]esri[.]cao[.]go[.]jp www[.]fujitransport[.]co[.]jp www[.]jbaudit[.]go[.]jp www[.]jsda[.]or[.]jp www[.]meirintetu[.]co[.]jp www[.]nca[.]aero www[.]paj[.]gr[.]jp www[.]port-of-hakata[.]or[.]jp www[.]port-of-nagoya[.]jp www[.]pref[.]ishikawa[.]lg[.]jp www[.]shinyokumiai[.]or[.]jp www[.]soumu[.]go[.]jp www[.]td-holdings[.]co[.]jp www[.]tokai-kyowa[.]co[.]jp www[.]worldtimes[.]co[.]jp bi[.]zone 43[.]140[.]219[.]182 6447fcb0ec0720e4e433b9caf0df9c7df12f4a3067312ccd7aaeb46d745676dd 2f3635b999ad3ee165b78f0786568ae49b43bf45eda6f85121d4c53f9b6fa3c2 182[.]255[.]91[.]104 d39242cf54b806d8431b09229d81901574dc3ab7512db551c67ebd836dca3185 b9763d1e54a6219afd576f79b8f345ef2c4734d1875d05c151f0fd7657eac99c api[.]glazeceramics[.]com 103[.]187[.]26[.]176 103[.]6[.]244[.]46 185[.]181[.]230[.]71 statcounter[.]com 127[.]0[.]0[.]1:15733 blockchain[.]com myca[.]adprimblox[.]fun s1[.]deadseaproductions[.]com seq[.]mediaimg23[.]monster 1001gacor[.]org 11gokil[.]org a8f19d598e6a49d8510d73d41fc445246755ed321c2f76985a463a9fef537eb0 gta6demo[.]asia gta6demo[.]eu gta6demo[.]us pinterest[.]com rockstar-gta-6[.]com ses[.]1001gacor[.]org sm188dnsx[.]top steamcommunity[.]com telegram[.]me investing[.]com 207[.]57[.]134[.]202 b4628dbf587ea4b84000ade3273bdfcfc9b9f9358667271c465a6330a16405f2 9aaa106fe3e8a39c6ea1bebdb99b011c490c984e28e229605be3a3ac6ad6cbd7 0328c26f469fd1f0dc1b74e09610b2f95296c60bb1335ed4c3249bb8c04bc3da 113[.]45[.]253[.]80 13325d9b67d205262d26d23031a7ae71b4316af98b91dd7499bf6e1dfb62aafd 3459b051722672b5ea2f363eb81533fc48650d1cf1849b8b8ac73550b503ab93 43c2ff2c194e57dd3093261162b3a287a716c4d81dcc74cdae41000c8a80181a c46548a49982c63ccf8fb4a558b701212b690faf9589d694d3f529e7109ec743 06f20b7c75ccb976f14c12be557782833a94a0e55d5e58b08395bedde4424603 91f433a8bd7c1e7e89216a30e91eb84275df4d717a3f8a9c1a407d6c6b9657dc d4c722e1cf2bcfa17853ab571eab4943ce80e67e02a25490b0c4690ef6964ffd d5997781fba9c5174973cf54a3977d6e13f038bf5c54e49f3e71e7664be43c19 ff5f5be3c523edc1723f84b5f83a68437313cf1c12b7609ce10a8a0691ade932 92f6f5bd66c1e864027297013ddae487d84ee6a9e92d6886f91702ba20cf0241 08dd4232e2bf2f0b12b125deddafe85dbf303308bb0eb83d13c1894cbe1fd494 tin[.]tokyo77hit[.]com www[.]davroc[.]co[.]uk www[.]chernyy-law[.]com denizhalil[.]com hxxp://169[.]254[.]169[.]254/latest/meta-data/iam/security-credentials/ hxxp://attacker[.]com/webhook filereserve[.]blob[.]core[.]windows[.]net 23[.]254[.]164[.]0 23[.]254[.]165[.]112:443 23[.]254[.]165[.]112:9089 23[.]254[.]167[.]107:443 23[.]254[.]167[.]13 23[.]254[.]167[.]216 25ad700976873c76af785cb99b33c48db7df8b81f21d1e9e06b3676b9a9373ae 61198155da51b838772eecf5bfaac6cbc4dcc388dccc56658fc28a8e831b34d4 b5c1b5b0763a8809a644a8f92224653f0aca623a98eecc714d27f74b80fbe436 build[.]rs crates[.]io f22e3e01e38bcdf001f0d15a2dbfdec5a1cf8eff f4767ad92cb61401fd69139cade563501c39b991 fc0fdb978eac72f4484b48db058e4473f1bc516e ff7e20cf642346bf893f1eca808df82035bb53d0 hwsrv-798836[.]hostwindsdns[.]com hxxps://23[.]254[.]165[.]112:9089/ 0e58ed8671d6b60d0890c21b07f8835ace038e67 30e525b776c409e03c2d6f328f254965 hxxps://gist[.]githubusercontent[.]com/nikitastupin/30e525b776c409e03c2d6f328f254965/raw/memdump[.]py memdump[.]py 05afcc8c482f86f1f02c643057944d40eb1ea117a9df35fc44375d062c60d9e8 0c34f851c6f8d3d2c0807d0dcea8785d08717f67e632aa9b72a7ec3ebafbc99e 113d17ecc5dbc01d9388f58eb3a32ca314c81b55afe58bdd74efee2bfe548082 3e8ae481a597b084ea01c6f36504a01b74cc4e1f6815b042f410badba823b258 485894856c9e63d9873dbb62f2c13cc7e5a1289492a101463dcb5e1a39eb54f4 8ac2f7c7e518862a7563f3450e2a4c5c24dcb107cbeaf8520700dd61a9ffd7b5 b864810b502ca5169ecd63a55c9107295795062f35412f96d7f6997566c46e6f bea9c1088f67bdbe854dc98b7aad229dd5b23ff77bc11e70a5dbaa32cdd5ce97 c9ef7719ae6bb7628f3c5ef95f0921461c45edd51dca844efa36fb6c43c05695 compendiumusa[.]net d2b072c905fd6918ab2579da86fd6d08e8bdffaf707efedcba9c81f6f24d341e f03469feabe88fb34b351a812c0209657b673037f047f59ea4820cdb9188ebde f5380c6d6b4557005bf114ae3e1a567a3afb9c50b6612de96ba4aa76b1ac5952 ifn[.]com[.]ar mobilemed[.]com[.]br pappyjoe[.]com www[.]anth[.]pk www[.]blackcat[.]com[.]qa www[.]clearalign[.]com www[.]difor[.]cl www[.]paoloboldrin[.]it www[.]pawlyclinic[.]com www[.]yocale[.]com 114[.]114[.]114[.]114 dksu[.]top freebasic[.]cn 2f4cc9e753e704d38f6b24372d116d14a637f31a9e5e617fe83111e280fd1c5f 59c276ded5211ed73df6791f0988ca526796b136063f450158e0ffe61be1e961 5cb18e167bdc6887f2cf38e840dd3bff8ad66a3f333d679deab6a324b55e77f1 7c4caaaf4fe987db884b5c5ea61c360adba242d8cab010b9184719f930bf18a1 8e365331b065e734c3a2cf46e3e6a3feb16ab1248fb8dfa275981fc7c306dc5a a4d0792974a843875d06c9dde20dd1e5b2b09949e3b7a38cd51937e76b290788 af2860114e7b823f66ab4fefdf2c5bbe72a9dcf3ecff9cba8e1cf485918f766e affcabbb64a08c1b3214ae1ba9759bac45deb06e8646f93cd94f44441a602ee2 centromedicoosi[.]com clinassoc[.]com consultoriomovil[.]net corona[.]co[.]jp dc32e0b87bf942ed80465430da24177ffd750d77dd6d8a05f5fc7a489893f1c3 factoryfive[.]com fecb2e58154b9c175bbe53000ec2574b16f0e92646f4257644e4d2cc2974ae8f meducar[.]com mpapharma[.]com nyi[.]co[.]kr skylineperio[.]com www[.]trailertransit[.]com 01f5c1b54c48dd309a5f3e1a62500e0f01f47c3b0ef0fd5f79f2390cb043a3d5 2da1ae7478c88753cf1b3b03d575bbdd3ad40b5e0263949a92d6648ea966d2b7 45819df908aa329f0a2afcb1e72b227d9bb1f7638d941dff6da3026aee3bfdb5 53cbf2d0fbf7b7fff345437778773706523d9d709e2f48e8e84c821082834971 58b4aba076da1f966dcd6d94fe55c10be72ef3fa5ed27134b6bb3e36e5dd8fba 76bfe15ee6cd72606772d765076fb0b99f73e5ae5869b50a40c36277a82e5ba6 9a72612cc7ca6de6cdd38f659e790a737128ae612fc65ff28d334a0b4fb9fca5 af6d5fd8e961aa93c1e7aa2008e3479fc29986fdf5bb27faf19ad968890b62ee agscinemas[.]com autodie-llc[.]com befc530f3574b33683164dec8eeff6fede02f62adf4612dac0725cf48a31489a caccdd3eaa461ac8204792ec957ade9d19bac7cff86298894209df84ff5eb46e d2dec52ee03a85a8d94111d5b0ecdbda96ba0ff59897aa1ed598ee502b0ac317 db9e75a1e94802bcf14da479f406d0902887294db8d3fd1087659b266d7e3fcc dca5b09c0b700b6af90ac47a2d8e8e0d3c4c9a8de364c66576c425e9a6b7c5cb efe78f1fc4a79cf3012c4de941f6ad8d4b2c3a73b908f6692bd8b7ab609767ab eyecarecenterofsnohomish[.]com gouldsherwood[.]com layher[.]cl phoenixlitho[.]com pinnaclehealthcare[.]net proveli[.]com rugglessign[.]com schardein[.]com volktek[.]com 2dad69e162d2344ec369ed95eac298443c74f13bd786e243d46192353e49613b privnote[.]com hxxps://marcktechno[.]com 103[.]14[.]13[.]224 104[.]18[.]18[.]5 104[.]18[.]19[.]5 104[.]85[.]24[.]66 133[.]125[.]58[.]140 133[.]18[.]72[.]53 133[.]250[.]249[.]18 141[.]147[.]168[.]221 153[.]127[.]159[.]206 153[.]127[.]50[.]169 158[.]101[.]159[.]128 165[.]100[.]213[.]103 1[.]33[.]172[.]224 202[.]247[.]96[.]109 203[.]216[.]216[.]102 210[.]129[.]11[.]206 210[.]159[.]10[.]133 211[.]14[.]10[.]40 211[.]14[.]10[.]64 2fmember[.]nichibenren[.]or[.]jp 2fwww[.]nomuraholdings[.]com 2fwww[.]sompo-am[.]co[.]jp 2fwww[.]sompo-rc[.]co[.]jp 32d54712f0e31792929da543ce67c2ac 40live[.]com 74[.]115[.]51[.]8 85[.]131[.]197[.]180 kobe-cci[.]weebly[.]com member[.]nichibenren[.]or[.]jp prime-as[.]co prime-as[.]co[.]jp reserve[.]seikan-ferry[.]jp www[.]dei[.]or[.]jp www[.]inpit[.]go[.]jp www[.]jaia-jp[.]org www[.]jcaa[.]or[.]jp www[.]jcci[.]or[.]jp www[.]jcer[.]or[.]jp www[.]jef[.]or[.]jp www[.]keidanren[.]or[.]jp www[.]khi[.]co[.]jp www[.]kyo[.]or[.]jp www[.]mizuho-sc[.]com www[.]nichibenren[.]or[.]jp www[.]nomuraholdings[.]com www[.]sajn[.]or[.]jp www[.]siteitosi[.]jp www[.]sompo-am[.]co[.]jp www[.]sompo-rc[.]co[.]jp www[.]instagram-login-authentication[.]duckdns[.]org 103[.]185[.]249[.]199 436e55ef38e0e3dc5350671da6fd713674f303fece53bfd6f098b1d56ce3e517 fee17cdbeaa9bd670e8251aedad9f7196558ce35109ef9ff129d69c130886703 20[.]187[.]120[.]42 783dc8b29402fba010ace9274e4c9f2802dc3c8f8003f87397e7cc76df9eee36 83a6587c8684df1798e01a0319d9c901b984c3aa9b1ea9587b5ce59d618f3d3a e9b08d6b2c1912f306c4ec5e98aeed8908e1cc506123cb3365aca39db4c55544 f650fdd57d0442a043107599ff187260095405c48a3f63c5a4ea170e91aa5654 information1[.]gov 34[.]12[.]167[.]78 ftp[.]py kitploit[.]com tftp[.]py resi[.]com gov[.]in 91[.]215[.]85[.]103 hxxp://91[.]215[.]85[.]103/pay_or_leak/instructure_affected_schools_list[.]txt slackin[.]online tmpfiles[.]org sentinelonepro[.]com virusblocker[.]it[.]com 100e03eb4e9dcdab6e06b2b26f800d47a21d338885f5dc1b42c56a32429c9168 104[.]21[.]16[.]155 104[.]21[.]30[.]90 104[.]21[.]52[.]10 104[.]21[.]88[.]89 127[.]0[.]0[.]1:11664 127[.]0[.]0[.]1:24003 127[.]0[.]0[.]1:49157 138[.]124[.]183[.]215 162[.]0[.]209[.]121 172[.]67[.]172[.]177 172[.]67[.]174[.]176 172[.]67[.]193[.]233 172[.]67[.]213[.]171 173[.]255[.]204[.]62 185[.]93[.]221[.]12 193[.]168[.]143[.]196 195[.]123[.]225[.]161 195[.]123[.]225[.]251 195[.]211[.]98[.]249 1a8ebf914ebea34402eecbf0985f05ae413663708d2fcc842fc27057ac5ec4ed 203eda879dbdb128259cd658b22c9c21c66cbcfa1e2f39879c73b4dafb84c592 206[.]206[.]123[.]209 206[.]206[.]123[.]209:443 217[.]196[.]98[.]61 217[.]196[.]98[.]61:4444 23fff588e3e5cc6678e1f77fab9318d60f3ac55f 2d92890374904b49d3c54314d02b952e1a714e99 31[.]13[.]248[.]153 333e1c5967a9a6c881c9573a3222bed6ada911c6 33a6b39fbe8ec45afab14af88fd6fa8e96885bf1 34[.]233[.]204[.]207 35[.]153[.]92[.]249 35[.]157[.]36[.]116 35[.]172[.]8[.]165 36bc32becf287402bf0e9c918de22d886a74c501a33aa08dcb9be2f222fa6e24 37471af00673af4080ee21bd248536147e450d2eff45e8701a95d1163a9d62fe 38999890b3a2c743e0abea1122649082a5fa1281 3[.]124[.]114[.]34 3[.]66[.]241[.]8 3[.]69[.]194[.]165 3[.]69[.]236[.]35 3[.]72[.]42[.]242 411dfb067a984a244ff0c41887d4a09fbbcd8d562550f5d32d58a6a6256bd7b2 45[.]129[.]199[.]214 45[.]135[.]232[.]3 45[.]150[.]65[.]85 495363b0262b62dfc38d7bfb7b5541aa 4a013f752c2bf84ca37e418175e0d9b6f61f636d 4b3e9c9e018659d1cf04daf82abe3b64 50abc42faa70062e20cd5e2a2e2b6633 5348970723b378c7cae35bb03d8736f8e5a9f0ac 54[.]159[.]36[.]188 54[.]165[.]22[.]33 54[.]175[.]181[.]104 6c3b2490e99cd8397fb79d84a5638c1a0c4edb516a4b0047aa70b5811483db8f 77eede38abdc740f000596e374b6842902653aeafb6c63011388ebb22ec13e28 8dfa63c0bb611e18c8331ed5b89decf433ac394a 8fb5034aedf41f8c8c4c4022fdde7db3c70a5a7c7b5b4dec7f6a57715c18a5bf 91889658f1c8e1462f06f019b842f109 91[.]194[.]11[.]183 91[.]194[.]11[.]64 94[.]131[.]108[.]254 94[.]232[.]249[.]100 94[.]232[.]249[.]108 94[.]232[.]249[.]186 94[.]232[.]40[.]49 95[.]164[.]68[.]73 97d72c8bbcf367be6bd5e80021e3bd3232ac309a 9eaa8464110883a15115b68ffa1ecf7d a2b6479a69b51ae555f695b243e4fda1 ad3c52316e0059c66bc1dd680cf9edad altynbe[.]com anikvan[.]com avtechupdate[.]com ba99cd73b74c64d6b1257b7db99814d1dc7d76b1 boriz400[.]com c8ea31665553cbca19b22863eea6ca2c ccb6d3cb020f56758622911ddd2f1fcb d7bd590b6c660716277383aa23cb0aa9 dauled[.]com erbolsan[.]com f4cb6b684ea097f867d406a978b3422bbf2ecfea39236bf3ab99340996b825de filomeruginfor[.]com grasmertal[.]com grasmetral[.]com hxxp://127[.]0[.]0[.]1:11664/ hxxp://127[.]0[.]0[.]1:24003/ hxxp://127[.]0[.]0[.]1:49157/ hxxp://45[.]129[.]199[.]214/vodeo/wg01ck01 hxxp://91[.]194[.]11[.]64/MSI[.]msi hxxps://cloudmeri[.]com/comm[.]php hxxps://github[.]com/The-DFIR-Report/Yara-Rules/blob/main/28761/28761[.]yar hxxps://illoskanawer[.]com/live/ hxxps://workspacin[.]cloud/live/ jarkaairbo[.]com kasym500[.]com kasymdev[.]com resources[.]avtechupdate[.]com ridiculous-breakpoint-gw[.]aws-use1[.]cloud-ara[.]tyk[.]io samderat200[.]com scupolasta[.]store techbulldigital[.]com tyk[.]io uncertain-kitten-gw[.]aws-euc1[.]cloud-ara[.]tyk[.]io wehelpgood[.]xyz 152[.]32[.]132[.]177 b5369ee791014dfd9c17a1ccd16e0f29de42add92abb94bf2bbf29f49e1ffa9e 8dc4405d4108241521ffe658f6c2a42ad665f85fafbe7fe8625243f642f18c74 compliancehub[.]wiki fly[.]io sim[.]ai espac[.]cl 0fa2f314a259f56653d179490dc1b885fbb63b80a899e4a77dd0cad46c0e196a 49[.]235[.]52[.]47 f21ef7bb68c394388f77bbb690835a193115ecd67993f05ce4287fa94c73c4fa 7945e8162ff6c8edca1a324f5be0e8f8b379932734fc80377a5a4e05789672c5 95ee745dc6ad08a39f8c868a395c4bbbe45e2e92587e9cb9e2158408c72d7cb5 139[.]196[.]111[.]118 fb1720d85c2b0b48c0b883101cf784e2a275ca510c64831d24714eabf594d765 66a6aaefd1736d67423dc28d9ff0da6f7d18fdebf4ce8b496545bf061769e005 commands[.]md 157[.]245[.]159[.]8:3333 101[.]47[.]40[.]1:8443 192[.]155[.]90[.]71:3333 216[.]238[.]121[.]111:8443 52[.]149[.]13[.]67:3333 88[.]99[.]165[.]179:8443 163[.]53[.]219[.]180:31337 212[.]60[.]151[.]85:8443 23[.]94[.]252[.]82:31337 69[.]48[.]228[.]147:31337 199[.]188[.]100[.]215:31337 43[.]131[.]50[.]177:31337 47[.]89[.]175[.]103:31337 57[.]129[.]110[.]30:31337 66[.]63[.]162[.]235:31337 103[.]121[.]92[.]150:31337 129[.]226[.]195[.]254:31337 185[.]207[.]154[.]238:31337 192[.]129[.]226[.]132:31337 209[.]99[.]191[.]90:31337 163[.]53[.]219[.]87:31337 173[.]214[.]172[.]252:8443 189[.]249[.]193[.]210:31337 192[.]110[.]167[.]181:31337 89[.]223[.]95[.]171:31337 47[.]109[.]23[.]77 d607a8410999035a6806931aed6feda8fc030ebc78b91fc151eab21c941c7e65 eaf545619fbc8b467f921a0158dbb69355a0372ec32a61c10809fca691e5a5b6 6f10265bdaed5e9b504036414c9be1fb8d0d01b765cbe30d23b72913e0c20810 8c1217af795f1a98525367cb150c5793172b0a6a533fcf91e5656f0f5bc0542c 169[.]58[.]82[.]229:80 8[.]137[.]149[.]67:8060 111[.]228[.]55[.]96:443 117[.]72[.]159[.]96:9998 117[.]72[.]39[.]83:30005 154[.]221[.]25[.]38:80 169[.]58[.]121[.]189:4443 178[.]128[.]80[.]204:80 207[.]57[.]134[.]202:443 8be5a2e99d5cfee40957e0500e78ce0368d20abe32ca666ab1b25afcceba079a bokfinancial[.]com cf5963a8866a26df0389ca82d4ffbb10c15a8f076b401b0dfae27a5bdeec6ba4 f8b2acbcbcc02506c7042fa8debe599604da7870f4f7b54985c3034faf07a7d6 novocure[.]com 03207285a200481a409145785180be7a8f8e16927c50aa3387350afa146ab745 10645e9c5d5a9da0cfdf38330b48b2d720613960093c2755d1c2ba33f1d136be 15b90f56937efd108bceb6b34cea841704dc18332ee96a54c721949f7166b2e8 15f3c3b02285b93f6b92bca0df16b106f99af38238732f4a53010fb6eb5b208a 1ad1453170e36efe4b067636916852c63011169ca3ae7ad2e4ac5398d349f477 2ac8fa42aed86a5280a4b5f049af955b538ced71990e14e4b6ab456330b3751a 3444a9ed0706073ea7041e1357f2ff3ea5e57b375c479a0dae1e85446b72a091 3da3b06c640d5468f1c7b7c219c9e9720e705f25296f86889337eb68ea4d689c 3e6d1e3f7f0af401ca26b1e222caa9707b1f6389ff81a93b3eae7e572196cfdf 5aa1d28c9f388b85c8a7025f749c50436a21dd45f3a2671a768e33329b2ba243 64b032b2e865b6d4284e6e3e1deb52eb31d841b16a1c4ccccc45bb4dfc01c0d0 8f22ba5201428a74ccc094ed286df844482be1dc16e0e2afe0e095f70eccd8ad abacusadv[.]com d5e6409ee5eeaea36b18d79dc376dcf8b93d4a102848d535f3360b2e7d190ff1 flechabus[.]com[.]ar ihs911[.]com kesslercreative[.]com lbf[.]ph longhorninvestments[.]com oteis[.]fr patelcpaoffice[.]com rxpe[.]com tower[.]co[.]nz 181daa22f254c8b5faf5ac6a9f16cb458ea5bfbf5362aa375316c6fb1c2fc1f4 2ccba243db1cc489c85888282731f8226865e80af8884a7c1ea9d14166428c4e 2e01e7025e52c34d4ce7d97ae310ca74cc8d40293752d58b440e41a38da2d9c7 844472961640be1f9ebe493d0f29a7d7e3715c02923b5fc08dc8fcef18ec12d4 cc8eb65888b702a2a577a9150b38f96ca1d8962cbabd07ce49178edf9f2d929e freelom[.]cz holzmarkt-chemnitz[.]de islandnetjm[.]com mgrlaw[.]com 0079049ef40a47fda2808ace74ceaee117a4731eba4d31f0b09107db03d12280 410cea113e903ee971563d7fdfd7549f8714ee619082fdb88be9d3409c520b9d 9ce831d4b3ba8d9a3793a947299349b3766bfafa982a20007c0a88a5076ff485 c0e9def1e0b5a835aa5e913052737a49888059a678ed93399c7688d1eef79e9d cedarridge[.]org crielectric[.]com d3105810f33758f0b1b01ab4f05326d2be38d2dda485f08cbc1255b6ce268f61 meridianlogisticgroup[.]com victorypersonalcare[.]weebly[.]com www[.]evergladesboats[.]com 276f56a214066c84cf36560a4aea6292d6c224132cf9e4fc54b82be2ba92a2d5 1a3e8bf069cffb0dfda701a3cf182f4cfc7944b0867bfe58276bb474a8076152 2d7c026cca31e89443a30e59ea323a5052a0698a6572984f68833e9ca9550f28 37226a2781c2d186de6cffa8931aa4a3341e86f606f361fc848f47571cc61304 49aadb1e42b7adae2323dbffcc0f6d1a41b97adb6b45fb6c53c772dc7ea4f9b3 5850dee29de9822d0ed881f3fb16fb6fc9b1c6f2183fabbd73334b9304864c72 881014f134177a01e9f31315e9bfc1fa88f03b91429f689d5ad2c2c65dc9aaf2 b26571f7fb5404f08df8f3e781ba0f1d54171227bf940672ba0de4a2a445db53 c6c07260466b115e6dd6e01893b27f9a9d83819d742de6c62ee80e54cc99ad99 cliftonglass[.]com ebe305acf70a68ab7f436cca13d6ce1777cbc1ea7abc1b7646a2862bdc79da67 firstcommercellc[.]com www[.]ipic[.]com www[.]quakerstate[.]com[.]mx 176174ecc7e7921c1d9dfac3f9a91a225172829b9d2ac6405f61d3d8f6967577 2b96048ee4eaae160f5477e3f949f7dc2e32cfe02497201753980efa568bfb2d