# Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: anubis, nautilusbot

# Reference: https://blog.trendmicro.com/trendlabs-security-intelligence/google-play-apps-drop-anubis-banking-malware-use-motion-based-evasion-tactics/

areadozemode.space
aserogeege.space
dingpsounda.space
dosandiq.space
firstdoxed.space
hdfuckedin18.top
nihaobrazzzahit.top
oauth3.html5100.com
privateanbshouse.space
project2anub.xyz
projectpredator.space
protect4juls.space
scradm.in
seconddoxed.space
selectnew25mode.space
taiprotectsq.xyz
twethujsnu.cc
uwannaplaygame.space
wantddantiprot.space
wijariief.space

# Reference: https://twitter.com/0xabc0/status/1072523751902842882

androidclay.net
companiesaasental.work
dawrawscyas.com
fhasadadu.in
finatop25.space
justdomain.space

# Reference: https://www.fortinet.com/blog/threat-research/new-wave-bianlian-malware.html

tombaba.club
tomcatdomains.page.link

# Reference: https://blog.trendmicro.com/trendlabs-security-intelligence/anubis-android-malware-returns-with-over-17000-samples/
# Reference: https://otx.alienvault.com/pulse/5d2395b2c7176db2a979b938

blackleaf.top
firstdoxed.space
ktosdelaetskrintotpidor.com
lskbfidsbvkjsfgakfjsdffsdfupdate.net	
marksteylor.us
ndudetto.top 
playclints1.space
sositehuypidarasi.com

# Reference: https://twitter.com/PRODAFT/status/1108263404781912064

colbrte.top

# Reference: https://twitter.com/PRODAFT/status/1110807911280922624

boxtools.net

# Reference: https://twitter.com/ViriBack/status/1139714810092904448

hannnnax.top

# Reference: https://twitter.com/0bfusCat/status/1191293661415428096
# Reference: https://www.virustotal.com/gui/ip-address/27.254.33.56/relations
# Reference: https://www.virustotal.com/gui/ip-address/35.188.192.191/relations

http://27.254.33.56
http://35.188.192.191

# Reference: https://www.virustotal.com/gui/domain/yuyuhakusho.info/relations
# Reference: https://www.virustotal.com/gui/file/3fb55b8a5e613c3eb8354796ab3e0c4927686568da00815fa6af1e08ce01c571/detection

yuyuhakusho.info

# Reference: https://www.virustotal.com/gui/file/5b48d6813adf43b784b273ecc93d1ca071b79ac3b0d7ab3579e16f791e8d5c34/detection

vityamuibk.temp.swtest.ru

# Reference: https://www.virustotal.com/gui/file/d787a51abfa7113c0b7260793ab54fe6fd3c0121d6d75ff57af0064deab6fd24/detection

svetaperov.temp.swtest.ru

# Reference: https://www.virustotal.com/gui/domain/sss17sss.ru/relations

sss17sss.ru

# Reference: https://www.virustotal.com/gui/domain/sss10sss.ru/relations

sss10sss.ru

# Reference: https://www.virustotal.com/gui/domain/3n0rmous.xyz/relations

3n0rmous.xyz

# Reference: https://www.virustotal.com/gui/ip-address/47.56.114.152/relations

aasd.xyz
firebug.online
pozhsoyuz.site

# Reference: https://twitter.com/dubstard/status/1237282412054413312
# Reference: https://twitter.com/LukasStefanko/status/1237300467161538560

santander-movilsecure.info
r7ssh1ng.xyz

# Reference: https://twitter.com/500mk500/status/1237402626532278275

zxc.global

# Reference: https://twitter.com/JAMESWT_MHT/status/1238375580057419778

coronaviruscovid19-information.com

# Reference: https://twitter.com/1ZRR4H/status/1239751485312970753

coronavirus-apps.com

# Reference: https://twitter.com/ESETresearch/status/1239820488110718976

coronavirusapp.site

# Reference: https://twitter.com/LukasStefanko/status/1239899416598843393

update-apk.net

# Reference: https://www.virustotal.com/gui/ip-address/8.208.19.185/relations

rootbot.ug
vor.ug

# Reference: https://twitter.com/m0br3v/status/1243822579196088320
# Reference: https://twitter.com/LukasStefanko/status/1257696107406204928

v-lert.com
mandamientos.ga

# Reference: https://twitter.com/DrStache_/status/1244580484073623552

botnew.ug

# Reference: https://twitter.com/DrStache_/status/1244699819500806147
# Reference: https://pastebin.com/u0tmn67x

http///185.117.90.9
http://147.135.170.169
http://162.241.65.149
http://185.20.184.50
http://194.58.92.30
http://195.230.23.26
http://198.23.236.114
http://209.250.239.168
http://217.107.34.192
http://217.12.208.13
http://34.90.99.193
http://45.159.188.44
http://46.17.104.140
http://5.39.217.240
http://5.45.70.149
http://54.38.175.231
http://63.250.42.96
http://63.250.45.48
http://94.103.94.56
http://95.217.32.209
adsenseservices.online
aliexpress.spb.ru
aloproton.top
bestmix.ga
yobit.press
superbeer1989.top

# Reference: https://twitter.com/ReBensk/status/1243895116097560587

dw.mailbux.site
vestwareta.temp.swtest.ru

# Reference: https://twitter.com/ReBensk/status/1243889895136997376

betaavantajlari.com

# Reference: https://twitter.com/ReBensk/status/1242820463031726080

weatherr.xyz

# Reference: https://twitter.com/apkdetect/status/1246459199460171776

vestna1975.xyz

# Reference: https://www.virustotal.com/gui/domain/hertzo.xyz/relations

hertzo.xyz

# Reference: https://twitter.com/ReBensk/status/1249645490192281601

rapmusicstyle.xyz

# Reference: https://twitter.com/pr3wtd/status/1250096277276315650

subesizislemlercom.cf

# Reference: https://www.virustotal.com/gui/file/0ab6fb467983a230a2bff00c29bfcbaee76cfe2dfa2ec71d77570e56f0ab2e0b/detection

your-truth.club

# Reference: https://www.virustotal.com/gui/domain/sytkalona.com/relations

sytkalona.com

# Reference: https://twitter.com/SmashTheKernel/status/1250788303512756225

covid-saglikbakanligi.com

# Reference: https://twitter.com/LukasStefanko/status/1250815254914895875

http://192.243.102.56

# Reference: https://twitter.com/ReBensk/status/1251202340830556161
# Reference: https://www.virustotal.com/gui/domain/medikalipla34zza11.com/relations

keeplive2.cc
medikalipla34zza11.com

# Reference: https://twitter.com/SmashTheKernel/status/1251204405506039808

ozkandan.com

# Reference: https://twitter.com/SmashTheKernel/status/1251546640806219780

evndekalkap8gb.com

# Reference: https://twitter.com/SmashTheKernel/status/1251592343117053952

evdekal20gbdestektr.com

# Reference: https://twitter.com/dubstard/status/1251745907147710464

xn--evdekalsengblardusunme-0ld.com

# Reference: https://twitter.com/SmashTheKernel/status/1251958264700510210

gazolcer.com
hayatevesigarturkiye.com

# Reference: https://twitter.com/SmashTheKernel/status/1251969918075113474
# Reference: https://www.virustotal.com/gui/file/5a5ec74af1b5638f343aafb27d79f55c6af366a31d361beaab027865ad1c8a19/detection

hayatevesigarturkcell.com
subesizbankabasvurusu.ml

# Reference: https://twitter.com/malwrhunterteam/status/1252549899381608449

ortakoporotör.com

# Reference: https://twitter.com/mertcangokgoz/status/1252907971866251269

hediyegapsinternet.com
tryagain.beget.tech

# Reference: https://twitter.com/mertcangokgoz/status/1252999575188758530

dedecom.ga
sosyaldestekcom.ga

# Reference: https://twitter.com/ReBensk/status/1253185302673289217

malgagarsos.sc.ug
worlgarebudd.ga

# Reference: https://twitter.com/mertcangokgoz/status/1253244997530419201

evdekalan20gbkazaniyor.com

# Reference: https://twitter.com/ReBensk/status/1253303545681625091

evdeinternetinvar.com

# Reference: https://twitter.com/ecarlesi/status/1253441825593085953
# Reference: https://twitter.com/500mk500/status/1253446081029046273
# Reference: https://www.virustotal.com/gui/file/707ecce8a160caf203c624629b0fa207cf6b57a1929aa795a9631129cc2949a4/detection

sabunlu.com

# Reference: https://twitter.com/mertcangokgoz/status/1253606439106600960

hediyeinternetpaketim.com

# Reference: https://twitter.com/mertcangokgoz/status/1253608999024558081

evdekal20kapgb.com

# Reference: https://twitter.com/mertcangokgoz/status/1253610464950603776

hayatevesigar-10gbnetkazan.com

# Reference: https://twitter.com/ReBensk/status/1254035434436308992

hayatevesigarturkiyem.com
subesizbankabasvurusu.ml

# Reference: https://twitter.com/AdemOzcan68/status/1254507257427001345

10bwr.com
sendekurtul.com

# Reference: https://twitter.com/malwrhunterteam/status/1254851984873738242
# Reference: https://www.virustotal.com/gui/file/bdfff045b60c28c2a8b8bbc21affd27dac725b506aaa8be1c891ce9aea3242f8/detection

durancamberk.com
kampanyainternetbasvuruevindekal.com

# Reference: https://twitter.com/malwrhunterteam/status/1255014881687941120

hediye-internet-saglik.org

# Reference: https://www.virustotal.com/gui/file/94b0ce7f4772f14203318fac3ef734d548583101756651cbc8327559aa8e87f3/detection
# Reference: https://www.virustotal.com/gui/ip-address/8.208.10.238/relations
# Reference: https://twitter.com/500mk500/status/1255107451755642881
# Reference: https://pastebin.com/iA2rCVWM

aircool.club
bigbi.club
buckett.club
da-blay.club
deepcooling.club
ebaka.club
eyser.club
hapy.club
hebdnesjnjdjnsnn.club
karantin.club
lamabot.club
makakaka.club
morpeh.club
ozeroo.club
perevodchiks.club
platina3.club
popugai.club
proton236.club
raketas.club
sport219.club
tailand.club
thailands.club
tututu.club
vards.club
your-truth.club
zadrots.club
zaebali.club
zalman.club
zlos.club
zotac.club

# Reference: https://twitter.com/ReBensk/status/1255733724831870976

muhtesem20gb.xyz

# Reference: https://twitter.com/mertcangokgoz/status/1255769217376419846

kazanin20gbturkiye.com

# Reference: https://twitter.com/mertcangokgoz/status/1255771473295413248

hediye-internet.site

# Reference: https://twitter.com/mertcangokgoz/status/1255770609503657990

xn--20gb-tanmla-kullan-l0c.com

# Reference: https://twitter.com/malwrhunterteam/status/1255776900926095360

updateflashplayer.link

# Reference: https://twitter.com/mertcangokgoz/status/1255834722699182082

hediyem20gb-internet.org

# Reference: https://twitter.com/mertcangokgoz/status/1255841829481824256

www-ecimer-uygulamayukleme-govtr.com

# Reference: https://twitter.com/mertcangokgoz/status/1255885022923554819
# Reference: https://www.virustotal.com/gui/file/5f04f7b808154a6ee2fe058b68c0078ee6fea308e80e05062a83b82d9fb70ee5/detection

saglikodemelerinial.org

# Reference: https://www.virustotal.com/gui/ip-address/91.211.247.69/relations

10bpy.com
10bwr.com
1498tl-devletdestegi.com
alabeni.com
alacaa.com
albaros.com
asemi2.com
asemi3.com
asemi4.com
asemiler.com
asemiler1.com
ashleywalkerfuns.com
aslanyarim.com
aslemir.com
aslemirem.com
aslemiren.com
asmiller1.com
asmiller2.com
baykuus.com
benceee.com
biterzi.com
bulacaa.com
bulakaa.com
cakirim.com
ceekicc.com
cemhayta.com
cirmik.com
clogwars.com
dedelik.com
direksiyondersiozel.com
durubey.com
efrisuren.com
ekopaket-turkcell.com
elievarsen.ru
eserkafes.com
finecures.com
gamefilo.com
gazolcer.com
gelberiberi.com
gelinciik.com
gidabilem.com
gobigonbig.info
gocmenyapi.com
grepolis-download.space
halasturizm.com
hangikapi.com
hangisaat.com
hanimkadin.com
haszemin.com
havug.net
havuj.net
havum.net
havup.net
havux.net
hawak.net
hawua.net
hawue.net
hawur.net
hawus.net
hawuw.net
iadebasvuru-uygulamasi.com
imailz.site
iqos06.com
izcimedya.com
izleseneq.com
izniksanat.com
kadzimagenius.com
kaktuus.com
kapsla.com
karacaa.com
kitkattt.com
ledger-live.com
loraw.net
lpgci.com
makaraa.com
maritosrickytos.com
meetnik.com
menendi.com
modakombini.com
onlinearabul.com
parfumodax.com
pataraa.com
playme.lt
posfatura.com
profotomotiv.com
pwuclan.com
rentacarkiralama.com
ruhsatsepeti.com
saansaar.com
sabunlu.com
saglikgovtr-destek-basvuru.com
sahinkucuk.com
seawtex.com
seercee.com
sendekurtul.com
sinavbasarisi.com
spaltindustries.com
swaatex.com
swatsheeel.com
swatsheel.com
takasii.com
tircekici.com
tizamedya.com
toorunn.com
ucuzataksi.com
unimasa.icu
ustalaryapi.com
vault.ug
viktor2.com
winyor.com
wmkolik.com
xblunter.com
yakacaa.com
yapmabe.com
yawak.net
yazpet.com
yerax.net
yerox.net
yetisge.com
yewax.net
yutmak.com
yuvamkonut.com
zennabe.com
zennabe1.com

# Reference: https://twitter.com/mertcangokgoz/status/1256137772060102665

ramazanda20gb.xyz

# Reference: https://twitter.com/mertcangokgoz/status/1256134646997438470

ramazanda20.site

# Reference: https://twitter.com/mertcangokgoz/status/1256133761911193600

20gbinternet.gratis

# Reference: https://twitter.com/mertcangokgoz/status/1256159729581244417

20gb-internet-kullan.com

# Reference: https://twitter.com/mertcangokgoz/status/1256160173137301504
# Reference: https://twitter.com/ReBensk/status/1256206619303526401

20gbkazanmafirsati.com

# Reference: https://twitter.com/mertcangokgoz/status/1256161070311505925

evdehayatvar-20gb.com

# Reference: https://twitter.com/mertcangokgoz/status/1256161999505043457

faturali-faturasiz20gb.com

# Reference: https://twitter.com/malwrhunterteam/status/1256307456260689920

http://81.177.140.138

# Reference: https://www.virustotal.com/gui/ip-address/81.177.140.138/relations

xyz5xyz.ru

# Reference: https://twitter.com/mertcangokgoz/status/1256508745749798917

saglikbakanligi-destek.org

# Reference: https://twitter.com/mertcangokgoz/status/1256504467186487297

ramazan20gbinternet.com

# Reference: https://twitter.com/mertcangokgoz/status/1256505382542991362

hediye20gb.online

# Reference: https://twitter.com/malwrhunterteam/status/1256484118566785024

kimbaktiprofilime.com

# Reference: https://twitter.com/W3B_B3ND3R/status/1237694235748577280
# Reference: https://www.virustotal.com/gui/ip-address/27.254.33.56/relations

/Anubis%202.5/

# Reference: https://twitter.com/mertcangokgoz/status/1256855384901464065

hediyepaket20gb.com

# Reference: https://twitter.com/mertcangokgoz/status/1256932429044109314

saglikbakanli-hediyeinternet.org

# Reference: https://twitter.com/malwrhunterteam/status/1257194073330507781

donoffermaster.best

# Reference: https://twitter.com/ReBensk/status/1257150225291988992

ramazangeldi20gbinternet.com

# Reference: https://twitter.com/ReBensk/status/1257149765810180097

kcc.earth

# Reference: https://twitter.com/mertcangokgoz/status/1257242805174505472

hediyeinternetpaket.com

# Reference: https://twitter.com/mertcangokgoz/status/1257242452970344448

xn--20gb-hediyefrsati-nvc.com

# Reference: https://twitter.com/mertcangokgoz/status/1257273505483231235
# Reference: https://twitter.com/mertcangokgoz/status/1256225541495173123

1000tl-iade-aidatodeme.com
1000tldesteksistemi.com
10gbps.store
1498tldevletdestegi.com
1gb-internet.hemenyukle.online
20gb-evdekaldiye.com
20gb-gratis-telecomunicazioni.org
20gb-internet-kullan.com
20gb-internet.org
20gb-internett-kullan.com
20gb-korona2020.com
20gb-tanımla-kullan.com
20gbaktiflestirturkiye.com
20gbhayatevesigar.com
20gbhediye-internet.com	
20gbhediye-internet.net
20gbhediye-saglikbakanligi-onayli.com
20gbhediye-saglikbakanligi-onayli.online
20gbhediye-yukle.com
20gbhediyeanindasende.com
20gbhediyeinternetim.site
20gbhediyepaket.com
20gbhediyesaglikbakanligionayli.com
20gbhediyeyukle.com
20gbhediyeyukle.online
20gbhediyeyukle.org
20gbinternet-evdekal.com
20gbinternet-hediyem.net
20gbinternet.gratis
20gbinternet.online
20gbkazanmafirsati.com
20gbkazanturkiye.com
20gbramazanhdyesi.online
2500tl-kartaidatlarini3dileode.org
30gbinternet.com
30gbinternet.online
30gbpaket.net
40gb-internet.com
aninda30gb.com
aninda30gb.info
bedava20gbramazan.info
campangna20gb.gratis
cimer-20gbhediyeinternet.com
cimer-2500tlonlinekartsorgulamagovtr.com
cimer20gbinternetpaketi.tk
devletonayli-20gbyukle.tk
devletonayli20gbhediye.tk
evdehayatvar-20gb.com
evdekal-20gb.com
evdekal-20gbkazan.com
evdekal-birysel-giristr.net
evdekal-kampanyasi20gbhediye.com
evdekal-kampanyasi20gbhediye.org
evdekal20gbkampanya.tk
evdekal20gbkampanyamerkezi.tk
evdekal20gbkazan.com
evdekal20gbkazan.net
evdekal20gbyukle.tk
evdekaldiye.com
evdekaldiye20gb.com
faturali-faturasiz20gb.com
hayatevdevar20gb.com
hayatevesigar-20gb.com
hediy20gb-internet-online.net
hediye20gb.online
hediyeinter.net
hediyeinternet.website
hediyeinternet20gb.com
hediyeler10gb-ramazan.net
hediyelerkazan-evdekalturkiye.org
hediyem-20gbinternet.org
hediyem20gb-internet.net
hediyem20gb-internet.org
iletisimbaskanligi20gbpaket.com	
indirtanimlagelsn20gb.net
info20gb.com
internet-20gb-saglik.com
internet-20gb-saglik.online
kazanin20gbturkiye.com
kazanturkiye20gb.com
kazanturkiyem20gb.com
mobil-internetpaket20gb.com
muhtesem20gb.xyz
muhtessemramazan20gb.com
mujdepaket20gb.com
ramazan-hediyesi10gb.net
ramazan20.site
ramazan20gbinternet.com
ramazanayihediyesi3aylar.net
ramazanda20.site
ramazanda20gb-trtr.com
ramazanda20gb.xyz
ramazanda20gbhdye.online
ramazanda20gbkampanyasi.com
ramazanda20gbsizlerehediye.com
ramazanda20gbsizlerehediyelerimiz.com
ramazanhediyeniz20gb.com
ramazanhediyenizialin.com
ramazaninternethediyesi.com
saglikliramazanda20gb.com
sende-yararlan20gb.com
sendeyararlan20gbdan.com
sendeyararlannturkiye20gb.com
sendeyararlanturkiye20gb.com
sinirsizpaket-heryone20gb.com
sizdeyararlanin20gbdan.com
sizeozel20gbinternet.com
tumoperatorlere20gb.com
turkcell20gbinternetiniz.net
turkcellden20gbsizlere.net
turkcelldeninternet20gb.net
uygulamahediyelerimiz-20gb.net
uygulamahediyelerimiz20gb.org
xn--20gb-hediyefrsati-nvc.com
xn--20gbhediye-interneti-karma-ekc68r.net
xn--maliyebakanl-20gbhediye-ned36bb.net
xn--salkbknl20gb-hediye-6ucg40bfb.net

# Reference: https://twitter.com/ReBensk/status/1257290843419009025

www-cimer-mobiluygulama.com

# Reference: https://twitter.com/malwrhunterteam/status/1257651750082920449

tellerbackseat.club

# Reference: https://twitter.com/mertcangokgoz/status/1257646190881116161

10bpy.com
20-gbinternetbedava.net
20gbnetim-bedava.net
campana20gb.com
ektarifem20gb-indirimli-turkcell.com
evde-kal20gb.online
iletisim20gbmobil.com
paketlerimiz20gb.com
ramazanayihediyesi10gbcepte.net
ramazandaiadeleriniz.online
ramazandestekyardimlasma.net
ramazanhediyesi-10gbhediye.net
resmi-aidat-iade-alma.org
saglik-bakanligi-20gb-hediye.online
saglik-bakanligi-20gb.com
www-cimer-mobilgirisyeni-gov-tr.com
www-internet-20gb-saglik.online
xn--campaa20gb-x9a.com

# Reference: https://twitter.com/malwrhunterteam/status/1257728763913175040

yandexclou.temp.swtest.ru

# Reference: https://www.virustotal.com/gui/ip-address/8.209.72.246/relations

keeplive2.cc

# Reference: https://twitter.com/malwrhunterteam/status/1258300139372007424
# Reference: https://www.virustotal.com/gui/domain/xyz7xyz.ru/relations

xyz7xyz.ru

# Reference: https://twitter.com/ReBensk/status/1258368269720797190
# Reference: https://www.virustotal.com/gui/file/a2c69b3dec41122fef36c061d26ac69a2234f0ecab1ee6876d801dca52800efc/detection

www-cimer-mobilapk.com

# Reference: https://twitter.com/SmashTheKernel/status/1258641094369251328

20gbinternetevdekal.com
blueeyes.top
silverain.top

# Reference: https://twitter.com/malwrhunterteam/status/1258666135412715520

bizbizeyeteriz20gb-hediye.net

# Reference: https://twitter.com/ReBensk/status/1258999729222008835

saglikbakanligindan-destek.net

# Reference: https://twitter.com/mertcangokgoz/status/1258772156474851328

1000tlpandemibasvurusu.com
1000tlpotdemibasvurusu.org
20-gbinternetevdekal.com
2023iade-taleplerims.org
20gb-evdekal.com
20gb-evdekalbirlikteyiz.com
20gbinternet-senevdekal.com
20gbinternetevdekal.com
20gbnet-paketim.net
20gbpaket-indirimli-turkcell.com
20gbtarife-indirimli-turkcell.com
20gbucretsizinternetkampanyasi.com
30gbhediye.com
30gbinternethediye.com
30gbsanaozel.com
aidatodeme-hizmeti.com
ailesosyalyardimbakanligi-sosyaldestek.org
anketkurumsal.com
anketkurumsal.xyz
bolbol25gb.net
evde-kal-turkiye.com
evde-kal20gbkazan.com
evde-kaldiye20gb.com
evdekal-20gbinternet.com
evdekal20-gbkazan.com
evdekal20gb-hediye.com
evdekal20gb-internet.com
evdekal20gb-kazan.com
evdekal20gbhediye.com
evdekal20gbyukle.com
evdekalana20gb.online
evdekalbedavainternetinikap.com
evdekaldiyebedavanet.com
evdekaltowel.com
evdekalyeter.online
hediye-kutusu20gb.net
hediye30gb.com
hediye30gbinternet.com
hediyebahari.net
hediyesesepeti.xyz
ikramiramazan10gbtrweb.com
indirimli-20gb-turkcell.com
indirimli-20gbinternet-turkcell.com
indirimli-20gbpaket-turkcell.com
mobile20gbgratis-internet.com
ramazan-hediyeniz10gb.com
ramazanhediyeleriniz10gb.com
ramazanhediyesi-10gbinternet.net
sanaozel30gb.com
sarayhediye.com
seferberlik20gb.com
sen-evdekal20gbkazan.com
senevde-kal20gbkazan.com
senevdekal20-gbkazan.com
senevdekal20gb-kazan.com
senevdekal20gbkazan.com
sosyaldesteknet.com
sosyaldestektaleplerionline.org
sosyeldestekonlineislemlerim.net
tc20gb-desteknetpaketi.org
tr-hizmetlerim-kontrol.org
tr-kontrolhizmetlerim.org
trthizmetleri.com
tumoperatorlere20gbdestek.com
tumoperatorlere20gbhediye.com
turkcellhizmet.com
turkishgovtr.org
turkiye-evdekal.com
vatandasdestek.com
xn--evde-kal-trkiye-8vb.com
xn--saglkbakanlg20gb-dqchb.com

# Reference: https://twitter.com/ReBensk/status/1259146097978564609

boxberry1.ru
promo-betcity.info

# Reference: https://twitter.com/malwrhunterteam/status/1259158214517633024

evdekalinternetinbizden.com

# Reference: https://twitter.com/malwrhunterteam/status/1259165644475547651

edevlet-destek20gb.net

# Reference: https://twitter.com/ReBensk/status/1259483496327729159

5ka-bonus.ru
steam.ug

# Reference: https://www.virustotal.com/gui/ip-address/217.8.117.7/relations
# Reference: https://twitter.com/malwrhunterteam/status/1271873903955193857

http://217.8.117.7
android.ug
cheat.ug
hvncroot.ug
loaderprivate.ug
superbot.ug

# Reference: https://twitter.com/ReBensk/status/1259742801060753408

senevdekaldiye-hediyeinternet.com

# Reference: https://otx.alienvault.com/pulse/5eb5dc29f93f6c29a4d710fa

aboutyukle.net

# Reference: https://twitter.com/ReBensk/status/1259767180486467585

reklamunet70.xyz

# Reference: https://twitter.com/SmashTheKernel/status/1259802866522488832

binsletr.net
yuklesm.org

# Reference: https://twitter.com/SmashTheKernel/status/1259801643748667392

besieged.top
sen-evdekal20gbkazan.com

# Reference: https://twitter.com/malwrhunterteam/status/1259805343544156160

btc-chenger.site

# Reference: https://twitter.com/mertcangokgoz/status/1259808237064458241

saglikgovtr-aileleredestek.net

# Reference: https://twitter.com/ReBensk/status/1259812051737772032

yandexmai3.temp.swtest.ru

# Reference: https://twitter.com/mertcangokgoz/status/1259791288582488064

10gb-evdekal-duyurutrweb.com
1498tldevlettendestek.com
1ogbevdekal-duyuru-webtr.com
1ogbvevde-kaltrgiris-duyuru.com
2023iade-bilgilerims.com
2023iade-talep-bilgilerim.com
20gbhediye.com
20gbinternetbizdensizleregelsin.com
20gbtarifem-indirimli-turkcell.com
20gbtarifen-indirimli-turkcell.com
30tlbedavabonus.site
aidat-geri-odeme-basvurusu.com
aidat-geri-odemesi-basvuru.com
aidatbasvurgirisi-turkiyegovtr.com
aidatbasvurmagiris-turkiyegovtr.com
aidatbasvurugirisi-turkiyegovtr.com
aidatbasvurulari-turkiyegovtr.com
aidatbasvurumerkezi-turkiyegovtr.com
aidatgeriiadebasvur.com
aidatiadedevlet.com
aidatsistemhizlmetleri-online.com
bankakampanyalari.net
bedava-host.com
bedavaweb.net
bilisimcumhuriyeti.com
cumhurbaskanlik1002.com
e-basvuru-islemi.com
e-govtr-karaname.net
edevlet-aidatodeme.com
edevletbankakredimerkeziaidatiadeleri.com
edevletbasvurulari-hibedestek.com
edevletdestek-paketlerionline.com
edevletimaidem.com
enparaozel-8yil.com
enparaozel8yil.com
eporta-aidathizmeti-gov-tr.com
eportal-aidatodeme-gov-tr.com
ettnet-kampanya.site
evdekal-tr10-gbweb.com
evdekal20gbcimer.com
evdekal20gboperator.com
evdekaldiyeturkiye.com
evdekalinternetinbizden.com
evdekl50gbkznn.net
fenomenkampanya.com
finansbanka.com
garantilialisveris.com
hazinebakanligivatandasportal.com
hediye20gbtr.com
heray-internetbizden20gb.com
herkese20gbveriyoruz.com
indirimli20gb-internet.com
indirturkiye.com
instapaketim.com
kartaidatsistemionline-hizmetler.com
kartiadeaidatmujde.com
kolaymobilodemebozdur.com
krediet-online.com
kurumsalfinans.net
lg-destek-servisi.com
limitsiz20gb-paket.com
maliyehazinebakanligi.com
netal10gbkampanyanet.com
ramazanbereketi10gbhediye.com
ramazanda-evdekaldiye10gb.com
ramazandaiadelerbasladi.com
ramazanhediyepaketi10gb.com
ramazanpaketi10gb.com
ramazansenlikleri1ogb-webtr.com
saglik-bakanligi-evdekal-20-gb-kazan.com
saglik-bakanligi-evdekal-20gb-kazan.com
seferlik-20gb.com
sende20gbkazan.com
senevdekal-turkiye.com
seninbedavahostingin.com
trttkatkipayigovtr.com
tumoperatorlere20gb-devletten.com
turkcell.tel
turkiyesaglikbankasi.com
www-cimer-mobiluygulama-govtr.com
www-cimer-mobiluygulamasi-govtr.com
www-garantibbva-yenilenenmobilesube.com
ziraat-maliyebakanligi.com
ziraatiledevletfon.com
ziraatmaliyebakanligi.com

# Reference: https://twitter.com/SmashTheKernel/status/1259829607638933505
# Reference: https://www.virustotal.com/gui/ip-address/8.208.89.250/relations

hemamasm.com
mklammna.com
yasimmena.tech
topleamna.com
krazmnnat.com
code-maj.com
senbugundeevdekaldiye.com

# Reference: https://twitter.com/ReBensk/status/1260056152965918720

ispartatr.com
yukletm.org

# Reference: https://twitter.com/DrStache_/status/1260183433168461824

brazzersmobil.tk

# Reference: https://twitter.com/ReBensk/status/1260426747771846656

backbone.top
nospoils.top

# Reference: https://twitter.com/ReBensk/status/1260502947680698368

20gbhediyetr.com

# Reference: https://twitter.com/ReBensk/status/1260530474583306240

alfabanksecurity.ru

# Reference: https://twitter.com/ReBensk/status/1260791061301137409

atakanhadixx.com
vatandas20gbportal.com

# Reference: https://www.virustotal.com/gui/file/b8d245b62fdb7370aaef0133b62c25c3eb60d2d0f15d8170b2255c26d489a589/detection

yerax.net
yerox.net
yewax.net

# Reference: https://twitter.com/mertcangokgoz/status/1261230003481608193
# Reference: https://twitter.com/mertcangokgoz/status/1261232094044475392

xn--saglk-bakanlg-20gbaktivasyon-1geib.com
yazpet.com

# Reference: https://twitter.com/mertcangokgoz/status/1261592317082906625

herkez20gbnetpaketi.com

# Reference: https://twitter.com/mertcangokgoz/status/1261628251044265984
# Reference: https://www.virustotal.com/gui/file/2a3beb3bd616facd2af9f19edda47128bfbc6229b1de0d82cac72a35d26da283/detection

1498tl-devletdestegi.com
dedelik.com

# Reference: https://twitter.com/mertcangokgoz/status/1262049550472065024

20gb-etkinligi.com
sevdi4485.beget.tech

# Reference: https://twitter.com/mertcangokgoz/status/1262058727726886912

xn--20gbnternethedyendowland-tvdk.com

# Reference: https://twitter.com/mertcangokgoz/status/1262107661857959942

saglikgovtr-destek1498tl.com

# Reference: https://twitter.com/mertcangokgoz/status/1262358998076002304

saglik-20gb.com

# Reference: https://twitter.com/mertcangokgoz/status/1262358999598596097

evdekal20gbdestek.net
yukle20gb.com

# Reference: https://twitter.com/mertcangokgoz/status/1262359001548931072

duyururamazan-x.com

# Reference: https://twitter.com/ReBensk/status/1262676640074657793

acsknight.com
hdfuckedin18.top

# Reference: https://twitter.com/malwrhunterteam/status/1262745341448732673

btkappmobil.com

# Reference: https://twitter.com/ReBensk/status/1262965621920280577

usyukle.com

# Reference: https://twitter.com/yusaerguven/status/1264056288591437824

alabeni.com
alacaa.com
benceee.com
bulacaa.com
izleseneq.com
karacaa.com
kitkattt.com
winyor.com
yapmabe.com
yetisge.com
uayukle.com
uyukle.com
uyukle.info

# Reference: https://twitter.com/yusaerguven/status/1264846690424623104

1498tlsosyallyardim.com

# Reference: https://twitter.com/ReBensk/status/1265865097966235648

aktivasyon20gbtanimlama.com

# Reference: https://twitter.com/jorgemieres/status/1266444202554114053

http://104.154.85.112

# Reference: https://twitter.com/ReBensk/status/1268144797149286407

20gb-kampanya.cf

# Reference: https://twitter.com/ReBensk/status/1268149780607369216

ramazanbayrami-20gb.cf

# Reference: https://twitter.com/ReBensk/status/1268390655732129793

hertanaotel.com

# Reference: https://twitter.com/ReBensk/status/1268798391355654144

bedava2020internet.cf

# Reference: https://twitter.com/yusaerguven/status/1268844182396952582

btkziraat.com
ziraatbtk.com

# Reference: https://twitter.com/malwrhunterteam/status/1268899165070860290

client876.4bo.ru

# Reference: https://twitter.com/ReBensk/status/1268916810272907265

http://185.212.131.244

# Reference: https://twitter.com/ReBensk/status/1269138543072489474
# Reference: https://www.virustotal.com/gui/file/82d91a59da4098406748ec6c46baad76b96678deb4fba7a1df19089abb56d699/detection
# Reference: https://blacklist.cyberthreatcoalition.org/vetted/url.txt

binsyukle.com
binsyukle.net
binsyukle.org
baykuus.com
bulakaa.com
ceekicc.com
evdekalinternetinhediyenet.com
iletisimbakanligi20gb.com
saansaar.com
seercee.com
takasii.com
toorunn.com
yakacaa.com

# Reference: https://twitter.com/ReBensk/status/1269603217861742592

btkdestekweb.com

# Reference: https://twitter.com/malwrhunterteam/status/1269998642921910274

zap537679-1.plesk11.zap-webspace.com

# Reference: https://twitter.com/makflwana/status/1270605407765983232
# Reference: https://www.virustotal.com/gui/file/40fe3763fa3ccce836b38d7a1950450c306e892e10d84c255fcb4874fea49ca6/detection

annsuaa.xyz

# Reference: https://twitter.com/ReBensk/status/1272431573732937729

cumhur-sizee.com

# Reference: https://twitter.com/malwrhunterteam/status/1272560136981229575

dskjds.info

# Reference: https://twitter.com/malwrhunterteam/status/1272847315762634753

aleynatilkiporn.com

# Reference: https://twitter.com/ReBensk/status/1273118838243168256

pandemi-destek-hizmeti.net

# Reference: https://twitter.com/malwrhunterteam/status/1275111481386950657

http://102.130.120.91

# Reference: https://twitter.com/benkow_/status/1275404262990807041
# Reference: https://pastebin.com/RqKJAP3G

http://31.210.173.212
http://37.46.131.122
http://45.10.219.8
http://45.141.84.36
http://46.30.41.186
http://5.8.88.193
http://51.68.106.164
http://91.218.114.11
http://91.243.80.13
http://91.243.83.121
http://91.243.83.145
http://91.243.83.16
http://91.243.83.34
http://91.243.83.72
http://92.63.192.163
http://92.63.192.55
http://92.63.192.82
http://92.63.192.89
http://92.63.192.90
http://92.63.197.136
http://92.63.197.42
http://130.0.235.205
http://176.119.1.94
http://185.130.104.241
http://185.139.70.14
http://185.189.13.46
http://185.224.132.254
http://185.254.120.127
http://185.254.121.178
http://185.254.121.28
http://185.254.121.36
http://185.254.121.82
http://185.254.121.87
http://185.8.177.138
http://185.81.99.228
http://188.130.135.50
10bwm.com
2dakkadadomain.com
abdola.host
androidsupdate.com
annsuaa.xyz
anu-send-bis.com
anubbbis.xyz
anubissaveurl.xyz
anubsavessl.xyz
anubupdate.xyz
auupdate.eu
baklaa31la.com
bankowo.biz
billdrop.la
borjomi-ge.club
br0unj.club
broundim.club
bumerbume2.temp.swtest.ru
cashbackfix.com
cashbacksend.com
cashbackstep.com
cashbackwork.com
cleanandr00.com
clockwartimes.hk
crazyfasting.icu
crazymonkey777.com
d3nbrabus.club
d4ft4rd4t.club
d8rabus.club
daayfaan.club
deathstars.lc
dedelik.com
doktorlar.com
domimantus.club
dominantuss.club
dopingself.cymru
dr1ft0n.club
dr44nfargu5.club
dramrainbow.top
ebuvseh.com
elka929.club
enterandquit.com
erestanperraxd.xyz
estopchik.top
ewrwsdfas.in
f4rgu5gr44n.club
f4td4ft4r.club
faandaay.club
flashnew111.top
floatbackjack.com
fress.xyz
fruss.site
genjutsu.ga
gethighreuus.xyz
giro69basss.top
gr1p0n.club
haadrigeh.xyz
hawue.net
hidra.club
hiyahowa.at
hiydra.club
iadebasvuru-uygulamasi.com
icecreamvanila.xyz
id1971723.xyz
id1971724.xyz
judnbas.eu
juzzgzazws.org
ksrfgcontstant.xyz
lastver4563.top
legalyusedstuffs.xyz
liuekk3ui.hk
loraw.net
lowermopejfgakvfhdjdj.site
melisacocuk.com
newtest456678.top
nnpowe.ug
opally.xyz
orishaoko.ml
pawanub.xyz
pestola.online
pinpong.top
piton77cm.top
pothta.club
pox1932kakoy.top
prenet.xyz
qestero.xyz
randomsage.work
rewwaresrm.temp.swtest.ru
rgcheaplogic.xyz
rumblll.xyz
rxetcryvtubyinurxetcryvtubyinumcryvetucaybnu.com
saveback.xyz
schvhost.us
sendback.xyz
setixx.xyz
sevdi4485.beget.tech
simplecashback.org
sonic-querry.com
sotermas.icu
sotermas.xyz
superbeer1989.top
sutrablin.club
tasteofseafood.xyz
tchelovekoblako.club
truesigma.wales
trytomyself.com
tvrp.pw
twitchggs.com
u36317.test93w.ru
vitel.top
yatinlan.com
yerax.net
yourdarkside.club
zones.systems
zxxxz.uno

# Reference: https://www.virustotal.com/gui/ip-address/84.38.183.65/relations

anubupdate.xyz
pawanub.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1276189703591604225

hesislemleri.com

# Reference: https://twitter.com/malwrhunterteam/status/1277680036510945282
# Reference: https://www.virustotal.com/gui/file/3a8f31b438fb9791c2e9ee56b3352cd6961e6de4658f7cb973eba0fb5cb402de/detection

alemmcukur.com

# Reference: https://twitter.com/andsyn1/status/1278304796076802048

www-ecimer-destek.com

# Reference: https://twitter.com/malwrhunterteam/status/1279301100512968704

5k-card.ru

# Reference: https://twitter.com/ReBensk/status/1279391963159179264

safepage.cloud

# Reference: https://twitter.com/bl4ckh0l3z/status/1280477627137101826

dontworryman.club

# Reference: https://twitter.com/ReBensk/status/1280121056141901829
# Reference: https://www.virustotal.com/gui/ip-address/85.95.240.191/relations
# Reference: https://twitter.com/malwrhunterteam/status/1290633704176521216
# Reference: https://www.virustotal.com/gui/file/c2e5b10c477eab186af357c770bb899316eb7e5e9f02dd3caccd5df10863a974/detection

abodeflahsplay.com
abodeflahsplayre.xyz
abodeflahsups.xyz
abodeflashplayre.xyz
abodeflasplayer.xyz
adobeflahsply.com
adobeflahsplyr.com
adobeflahsupdate.com
adobeflashplayerup.com
adobeflplayer.com
adobeplayernew.com
adobeupdateplayre.com
esracaner.com
flahsplayeradobe.xyz
flahsplayerdownload.xyz
flahsplayerupdate.com
flahsplayerups.xyz
flahsplayre.com
flahsplayredown.com
flashabodeplay.xyz
flashabodeplayer.com
flashliveplayer.xyz
flashplaier.xyz
flashplayera.xyz
flashplayerdown.com
flashplayernew.com
flashplayernew.info
flashplayerservice.info
flashplayerupdate.top
flashplayr.xyz
flashplayreabode.xyz
flashplayredownload.com
flashplayredownload.xyz
flashplayreguncel.xyz
flashplayreup.com
flashplayreupdate.com
flashplyer.xyz
flshplyr.xyz
googleplaysevrice.com
newflashplayer.xyz
phlashplayer.xyz
playerupservice.com
playreupdate.com
playservice.info
playserviceup.xyz
playsrv.xyz
playsrveup.xyz
playupdate.info
playupdate.xyz
playupdater.xyz
updaterflahs.xyz
updatesrv.info

# Reference: https://twitter.com/ReBensk/status/1280361803957055489

www-ecimer-destekpaketi.com
yuvamkonut.com

# Reference: https://twitter.com/ReBensk/status/1280368722935525376

gamefilo.com
www-ecimer-destek2020.com

# Reference: https://twitter.com/malwrhunterteam/status/1280533384352202753

covid19-pandemidesteklerimiztrweb.com

# Reference: https://twitter.com/malwrhunterteam/status/1281175775824273409

flashplayerdown.com

# Reference: https://twitter.com/malwrhunterteam/status/1283035532772220934
# Reference: https://twitter.com/LukasStefanko/status/1283045245685501958
# Reference: https://www.virustotal.com/gui/domain/thepeoplenew.org/relations

thepeoplenew.org

# Reference: https://twitter.com/ReBensk/status/1284727682861805575

http://77.245.158.32
e-pandemiwebbasvurulari.com

# Reference: https://twitter.com/malwrhunterteam/status/1286389244072792067
# Reference: https://www.virustotal.com/gui/file/84d581892e7279dc398fb9fec60ad1f3e808b8c08b8d521afb84383ed29452d1/detection

atlanaserx.temp.swtest.ru
yandexmau2.temp.swtest.ru

# Reference: https://www.virustotal.com/gui/file/401b6d3378a1e2faf322f4ef7d8fb16bc9b9e80b9e31bfad7bbf21397f1b8928/detection

atlantkre5.temp.swtest.ru

# Reference: https://www.virustotal.com/gui/file/ba89fa49121538b01a4aacf9c22790f8c05d8e8b47419ca01494634e4def1691/detection

viberupda5.temp.swtest.ru

# Reference: https://www.virustotal.com/gui/file/e89e7ca87d8718c138ffe0732b1716670b989c7b10a34ce58130c778809346e9/detection

yandexma26.temp.swtest.ru

# Reference: https://twitter.com/malwrhunterteam/status/1286618384008990721

qnbfinansenparacepsube2020.com

# Reference: https://twitter.com/malwrhunterteam/status/1288171205011398656

androidyazilimguncelleme.com

# Reference: https://www.virustotal.com/gui/file/95571296179f71c044103fd61b42bf57a89e088004676199dcd2750ed32231b0/detection

jjshddd.top

# Reference: https://www.virustotal.com/gui/file/6f54147d0032b8243cc8fcddb110026fbd8d4157a772409d00df5f58a392828c/detection

athan.ru

# Reference: https://www.virustotal.com/gui/file/7f6b94fda63b7133834aca7b2155cfc6be6cb0cecafa3658856a8bfa45cca9a7/detection

helaa.com

# Reference: https://twitter.com/pr3wtd/status/1100010818568159238

keylisttr.pw
olumadamolunlan.pw

# Reference: https://twitter.com/0bfusCat/status/1074926166891470849

dawrawscyas.org

# Reference: https://twitter.com/0bfusCat/status/1036245731953319937

biz.bot.nu

# Reference: https://twitter.com/LukasStefanko/status/1037951727411097600

aqszbo.igg.biz
fgbhn2.usa.cc

# Reference: https://twitter.com/ViriBack/status/1139714810092904448

hannnnax.top

# Reference: https://twitter.com/PRODAFT/status/1138360435432972288
boxtools.net

# Reference: http://tracker.viriback.com/dump.php (# 2019-11-04, Anubis)

http://199.192.29.145
http://81.177.180.138

# Reference: http://tracker.viriback.com/dump.php (# 2020-02-23, Anubis)

anusbus.store
find4youphone.online
hyggo.net
new99year.xyz
newwinter.xyz
old22bobby.xyz
zamfuzz.net

# Reference: https://twitter.com/x42x5a/status/1107674030897799168

http://45.67.14.206

# Reference: https://www.virustotal.com/gui/ip-address/8.208.80.114/relations

bigslice.top
corpleaks.net
dopemob.top
fitolday.site
goodtimes.top
howtodoit.top
isntlev.site
lasttrone.top
liberlov.site
likok.top
longstory.top
mekilent.site
newhunters.top
nightblues.top
nowknowhow.top
rixkom.top
sdsx.site
yirpow.xyz

# Reference: https://www.virustotal.com/gui/file/7e54df9c16c87e6918307ef1bb5e8760ac9001cfa6e0e8763616e3cb2cc00558/detection

nindo.info

# Reference: https://twitter.com/malwrhunterteam/status/1291372842316111873
# Reference: https://twitter.com/malwrhunterteam/status/1298948484771520512
# Reference: https://www.virustotal.com/gui/ip-address/193.36.63.146/relations

adbflplayer.info
adbflsplyr.biz
adbflsplyr.info
adbflsplyr.xyz
adobeflashplayerupdate.xyz
adobeflashplayerupdateservice.xyz
bestadbflshplyrupdte.com
flashcloaker.info
flashplayer-guncellemesi.xyz
flashplayerupdater.info
serviceflashplayer.info

# Reference: https://twitter.com/ReBensk/status/1291661242864742405

e-pandemigiriswepsiteleri.com
parfumoda.com

# Reference: https://twitter.com/malwrhunterteam/status/1293492413391089664
# Reference: https://www.virustotal.com/gui/file/3ba97156dcdece1e5532931f0098d916f6684d38a9e0ba177fa1203e00630944/detection

tr-netflix.com

# Reference: https://www.virustotal.com/gui/file/2c24caa7c50347699df23fbad8a2d83c329312f8206f9cd08a27a6876ab73bd0/detection

emrshoes.cf

# Reference: https://twitter.com/B0rys_Grishenko/status/1293817549210124288
# Reference: https://www.virustotal.com/gui/ip-address/8.208.84.18/relations
# Reference: https://www.virustotal.com/gui/file/0067771d350cc8bd376b9356fa1ffc61b070f09fcb789241de8ab107055535e1/detection

apkallegrplay.net
apxover.cn
baqusda.xyz
barracudanow.ga
beeftexs.com
blctrsb.site
cailpercovers.com
corpleaks.net
cv2020.space
fcurewardsus.com
fexfil.xyz
fitolday.site
flexfil.site
fraud-world.top
fresscored.cn
goldine.xyz
horosua.xyz
joriswelst.site
lan-up.date
leftzir.xyz
lookupsky.net
luxuryboutique.top
providset.xyz
regisbrow.site
ruropos.xyz
scrot.site
shabukenke.ga
stelfkin.site
thefredoos.site
theostingros.site
treymart.xyz
trustcneck.com
tuseguridadylamia.ga
updateflashplayer.network
vaxton.pw
visfrola.site
vistagep.site
vredfow.site
xvttpivpxvtt.site
xyggo.xyz
yenkos.xyz
yopotff.xyz
yulot.xyz
zebelli.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1293828988964675587

aksigortaailem.com

# Reference: https://twitter.com/Cengiz86035319/status/1293983337376288768
# Reference: https://www.virustotal.com/gui/ip-address/8.209.107.107/relations

darkwhitechoco.top
lexluthor.top
privatevideo.digital
privatevideo.live
privatevideo.online
slimdenim.top
strykercrp.com
welcometocity.top

# Reference: https://twitter.com/Cengiz86035319/status/1292530868758761472

bayionline.xyz

# Reference: https://twitter.com/ReBensk/status/1295393427354419201

beskerebesden.com

# Reference: https://twitter.com/malwrhunterteam/status/1295410668791910401

pandemi-destekfonyardimibasvurukatilimi.com

# Reference: https://twitter.com/ReBensk/status/1297072158292811782
# Reference: https://www.virustotal.com/gui/file/fee8dad99d767d8d07ad7e46e18b8d9a4ff8a92a8d7743f8919585d327258e11/detection

sagliklievdekaliniz.com

# Reference: https://twitter.com/ReBensk/status/1297554727576702977
# Reference: https://www.virustotal.com/gui/ip-address/5.149.248.2/relations

20gb-hediye-internet-aktivasyon-tanimlama.ml
20gb-hediye-internet-aktivasyon-tanimlama.tk
20gbhediyeleribasladi.ml
cimmmer-iaderleri-baslamistir.ml
cimmmer-iaderleri-baslamistir.tk
cukurrentcarskartelimdfer.tk
ifsazzers-video-platformu.ml
ifsazzers-video-platformu.tk
katiroglurentcarskirlma.com
kestanezamani-saglik.tk
martilerrentcarskirolrte.com
pandertosbalar.ml
pandertosbalar.tk
saglik-20gb-hediye-tanimla.ml
saglik-20gb-hediye-tanimla.tk
saglik-20gb-hediye.tk
serysaglik.ml
serysaglik.tk
tc-saglikbaknaligi-20gb-hediye-internet.ml
tr-online-subem-giris-mobil.tk
webkatiroglurentcarskirlma.com
pandemi-destek-fon-yardimi-basvuru-katilimi.com

# Reference: https://twitter.com/ReBensk/status/1297567472854458368

sosyaldestekonbasvuru.com

# Reference: https://twitter.com/ReBensk/status/1297865674983968768

web-onlinetr-covid19tr.com

# Reference: https://twitter.com/ganeshnathan28/status/1297924135650308100

anubiscode.fun

# Reference: https://twitter.com/ReBensk/status/1298292652845211653

guzelbilisimdengeldik.com

# Reference: https://twitter.com/ReBensk/status/1298291170347491329

cepteinternet20gb.com

# Reference: https://twitter.com/ReBensk/status/1298564082686201856

giris-anasayfa-coviddestegi-basvuruwebtr.com

# Reference: https://twitter.com/malwrhunterteam/status/1298952237063049219

opetkampanya.club

# Reference: https://twitter.com/ReBensk/status/1299211942427602945

1000tlbasvuru-destek.com

# Reference: https://twitter.com/malwrhunterteam/status/1299631670623121413
# Reference: https://www.virustotal.com/gui/file/28d26c83efdaa1f4a3d6693eedb4e0f0687425e2be5322e4c9e33987011b466e/detection

passionhd-porn.com

# Reference: https://twitter.com/ReBensk/status/1299977916508499968
# Reference: https://www.virustotal.com/gui/file/669e5bc3e1117a229aeeadb37a740aaee3a5ee4e07f6f789518c3716e3fd7a33/detection

sb-tedbirwebgiristr.com

# Generic

/406e8b2b28b39726/login.php
/67656gtdm,mnvjuyhjfbnxhgfgWERESFFGDXSGHGbhgdrgdhgfhg/
/7k6ijun5yb4rtvevun6yi7mi6ynu5tb/
/8huayth8duye7g8hh76dt3yQS/
/989aa1996afe587dbbf6f46ec8ab514f/
/anubis/login.php
/dag/login.php
/fucksom/login.php
/B0UrKFg4cSL4xSgnUPPC/
/Gsh6kSNDSTfr7jdBfG/
/fullprivateanubis/
/injasdfasdfasd23/
/injclientup/
/injfull/
/verynicepussymymilf/
/d3d/a1.php
/d3d/a10.php
/d3d/a11.php
/d3d/a12.php
/d3d/a13.php
/d3d/a14.php
/d3d/a15.php
/d3d/a16.php
/d3d/a2.php
/d3d/a3.php
/d3d/a4.php
/d3d/a5.php
/d3d/a6.php
/d3d/a7.php
/d3d/a8.php
/d3d/a9.php
/d3d/a1.phpy
/d3d/a10.phpy
/d3d/a11.phpy
/d3d/a12.phpy
/d3d/a13.phpy
/d3d/a14.phpy
/d3d/a15.phpy
/d3d/a16.phpy
/d3d/a2.phpy
/d3d/a3.phpy
/d3d/a4.phpy
/d3d/a5.phpy
/d3d/a6.phpy
/d3d/a7.phpy
/d3d/a8.phpy
/d3d/a9.phpy
/inj/a1.php
/inj/a10.php
/inj/a11.php
/inj/a12.php
/inj/a13.php
/inj/a14.php
/inj/a15.php
/inj/a16.php
/inj/a2.php
/inj/a3.php
/inj/a4.php
/inj/a5.php
/inj/a6.php
/inj/a7.php
/inj/a8.php
/inj/a9.php
/inj/a1.phpy
/inj/a10.phpy
/inj/a11.phpy
/inj/a12.phpy
/inj/a13.phpy
/inj/a14.phpy
/inj/a15.phpy
/inj/a16.phpy
/inj/a2.phpy
/inj/a3.phpy
/inj/a4.phpy
/inj/a5.phpy
/inj/a6.phpy
/inj/a7.phpy
/inj/a8.phpy
/inj/a9.phpy
/inj/fafa.php
/inj/in_axis.php
/injclientup/fafa.php
/injectfull/
/kokojamba1212/
/se54ees5gse55wgsdfgdy/
/Parasitusss/
/o1o/a1.php
/o1o/a10.php
/o1o/a11.php
/o1o/a12.php
/o1o/a13.php
/o1o/a14.php
/o1o/a15.php
/o1o/a16.php
/o1o/a2.php
/o1o/a3.php
/o1o/a4.php
/o1o/a5.php
/o1o/a6.php
/o1o/a7.php
/o1o/a8.php
/o1o/a9.php
/o1o/a1.phpy
/o1o/a10.phpy
/o1o/a11.phpy
/o1o/a12.phpy
/o1o/a13.phpy
/o1o/a14.phpy
/o1o/a15.phpy
/o1o/a16.phpy
/o1o/a2.phpy
/o1o/a3.phpy
/o1o/a4.phpy
/o1o/a5.phpy
/o1o/a6.phpy
/o1o/a7.phpy
/o1o/a8.phpy
/o1o/a9.phpy
/ping/ping1.php
/ping/ping2.php
/ping/ping3.php
/ping/ping4.php
/ping/ping5.php
/ping/ping6.php
/ping/ping7.php
/ping/ping8.php
/ping/ping9.php
/ping/ping10.php
/ping/ping11.php
/ping/ping12.php
/ping/ping13.php
/ping/ping14.php
/ping/ping15.php
/ping/ping16.php
/private/add_log.php
/private/checkPanel.php
/private/tuk_tuk.php
/es_com.rsi.php
/es_es.evobanco.bancamovil.php
/es_es.lacaixa.mobile.android.newwapicon.php
/jp_jp.co.sevenbank.apppassbook.php
/jp_jp.co.rakuten_bank.rakutenbank.php
/jp_jp.mufg.bk.applisp.app.php
/il_com.ideomobile.hapoalim.php
/tr_garantibank.php
/tr_qnb_finansbank.php

# APK

/35gb_hediye_internet.apk
/5kabonus.apk
/5kbonus_obf.apk
/aksigorta.apk
/Android-Guncelle.apk
/AndroidGuncelleme.apk
/basvuru_devlet_destegi.apk
/BMWSECURITY.apk
/btkdestek.apk
/Cimer.apk
/cimerdestek.apk
/corona.apk
/Club_Romance_Mod.apk
/devlet_destegi_basvuru.apk
/hediye10gb.apk
/hediye20gb.apk
/HES.apk
/gratisnet.apk
/pandemisosyal.apk
/pandemi-yardimi.apk
/pandemi_basvurusu.apk
/pandemi_basvuru_uygulamasi.apk
/Salla_Kazan.apk
/turk-chat.apk
/Turkcell.apk
/update-google.apk
/updflashplayer.apk
