# Copyright (c) 2014-2021 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/ReBensk/status/1246378698296573953

f0piz.monster
telefonuguncellexx.b-cdn.net

# Reference: https://twitter.com/ReBensk/status/1254290984143224832
# Reference: https://twitter.com/bl4ckh0l3z/status/1280477627137101826
# Reference: https://www.virustotal.com/gui/ip-address/46.227.68.99/relations

4pokerrs.xyz
b0bl0.xyz
dontworryman.club
everybodygent.club
g0nz.xyz
hnoraip.world
kalyanshop.best
mydqy.xyz
placeoftomcat.club

# Reference: https://twitter.com/ReBensk/status/1298309715533889538

roopkivo.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1300471423056707588
# Reference: https://twitter.com/B0rys_Grishenko/status/1300472447171522564
# Reference: https://www.virustotal.com/gui/file/301ebcb7e1088854dcac5ec14d072fa81fe26ff64fb165641dc7839861483d1e/detection

interia-poczta.email
premiumdrops.xyz
truehomemoney.xyz
trustpoopin.xyz
trygotii.xyz
trytogoi.xyz

# Reference: https://twitter.com/ReBensk/status/1302931396609024003

epoczta-interia.com

# Reference: https://urlscan.io/result/860795c3-5e5b-463f-8b9b-42c36f54746c

webupdateadobe.best

# Reference: https://twitter.com/ReBensk/status/1313001660642463744
# Reference: https://twitter.com/ReBensk/status/1313038179520348160

fullhdvideoizlemesitesi8007.xyz
hducretsizvideoizle74345.xyz

# Reference: https://twitter.com/ReBensk/status/1314507421843251201

hducretsizvideoizle67715.xyz

# Reference: https://twitter.com/ReBensk/status/1315169622711132160

hducretsizvideoizle58452.xyz

# Reference: https://www.virustotal.com/gui/ip-address/178.132.78.155/relations
# Reference: https://www.virustotal.com/gui/ip-address/155.138.142.41/relations

account36653.xyz
ban7896.xyz
bracket86.xyz
breed5473.xyz
cap6896.xyz
collection9834.xyz
compromise5863.xyz
concede638.xyz
drama6532.xyz
embark8962.xyz
garage5473.xyz
handy63987.xyz
ignore4576.xyz
loose8365.xyz
musical7366.xyz
primary79836.xyz
prize4538654.xyz
progressive453453.xyz
sigh73865.xyz
vegetation389354.xyz

# Reference: https://twitter.com/DjoNn35/status/1314145636367900677

leave-alone.me

# Reference: https://www.virustotal.com/gui/domain/germany99.com.de/relations

germany99.com.de

# Reference: https://twitter.com/ReBensk/status/1316976610919284736

hdfullvideositelerii24709.xyz

# Reference: https://www.virustotal.com/gui/ip-address/80.82.76.26/relations
# Reference: https://www.virustotal.com/gui/file/1cc4ebe8988cf29b84057ff152841ff6c9e320926784e1eb392703121ae1fa6b/detection

asasasasdada.xyz
bestmemsonline.xyz
colormixcomaback.info
fusinopoo.xyz
givemejob.xyz
givemeyourpussy.xyz
keygeneertyuio.xyz
mobilsecurity.link
oldsk.monster
roopkivo.xyz
rotiuvosivc.xyz
trustpoopin.xyz
trygotii.xyz

# Reference: https://twitter.com/B0rys_Grishenko/status/1337097822009692161

60dnipremium.cloud

# Reference: https://twitter.com/B0rys_Grishenko/status/1319368056884350976

http://102.130.116.13

# Reference: https://twitter.com/Cengiz86035319/status/1322958967509819392
# Reference: https://www.virustotal.com/gui/ip-address/45.32.144.211/relations

3vam4nd3s.xyz
accent48.xyz
admission7689.xyz
agile45743.xyz
ally23762.xyz
ann4s4wai.xyz
anniversary63.xyz
ant48.xyz
appear324234.xyz
area4535.xyz
assignment54789.xyz
aware325.xyz
basis23456.xyz
benefit5478.xyz
bleed678954.xyz
bow25.xyz
boy241.xyz
br1xt0nr0l3s.xyz
break3241.xyz
buffet1235.xyz
carriage458.xyz
cellar6759.xyz
chapter1535.xyz
chest426.xyz
chimpanzee235235.xyz
chin235423.xyz
citizen543.xyz
coincide436.xyz
coma48.xyz
comfortable486.xyz
competence4453.xyz
conservative34567.xyz
constellation365.xyz
continuation45786.xyz
convert34576.xyz
convict6234.xyz
correspond580738.xyz
countryside5789.xyz
courtesy457.xyz
dawn97853.xyz
demonstration345342.xyz
die9978.xyz
dimposivess12.xyz
direction43567.xyz
disappear787863.xyz
domination5437.xyz
ear235.xyz
economy4664.xyz
election3252.xyz
electronics38.xyz
ethics234537.xyz
exceed46334.xyz
expose235235.xyz
fastidious346.xyz
fet0r34i.xyz
find152654.xyz
firefighter77856.xyz
flour3256.xyz
foundation4864.xyz
gallery5732.xyz
garage34734.xyz
glass47485.xyz
grudge547.xyz
guard6586.xyz
hasonek4rbl4ck.xyz
health264.xyz
highway468.xyz
hobby347.xyz
horizon547.xyz
horn5956.xyz
hostile3256.xyz
hurl22541.xyz
hypothesis25437.xyz
impulse234.xyz
inn358.xyz
insurance354756.xyz
iron325.xyz
j0hnc3n4.xyz
kill3467.xyz
koran3663.xyz
loan4568.xyz
loyalty34.xyz
machinery325.xyz
make90.xyz
mixture34.xyz
mold54.xyz
mountain5427.xyz
movement2345.xyz
negligence7785.xyz
nose4523.xyz
operational43632.xyz
palm38.xyz
parachute35445.xyz
patent856.xyz
patrol48.xyz
pedestrian54763.xyz
pile234.xyz
platform25.xyz
poor9873.xyz
portion115876.xyz
preach687786.xyz
quote32423423.xyz
reach457.xyz
read34677.xyz
relationship3474.xyz
reliable14213.xyz
rhetoric32543.xyz
rhetoric547.xyz
road436.xyz
scrap12364.xyz
scream879.xyz
section235.xyz
smash6767.xyz
sow21413.xyz
speculate5736.xyz
stamp98763.xyz
stimulation2554.xyz
switch347.xyz
talk23432.xyz
temporary325321.xyz
theater685.xyz
therapist4536.xyz
thinker452.xyz
ticket6585.xyz
tip3457.xyz
tiptoe32543.xyz
tired43556.xyz
trainer3245.xyz
turn35223.xyz
turn457.xyz
umbrella55463.xyz
uncle243.xyz
union436.xyz
way5653563.xyz
wheel359585.xyz

# Reference: https://twitter.com/ReBensk/status/1328897070237937664
# Reference: https://www.virustotal.com/gui/ip-address/165.227.192.68/relations

hdvideoplayerfullizleme7745.xyz
accent48.xyz
admire112.xyz
advantage4336.xyz
almalehonest44.xyz
antdrym5.xyz
anutw47.xyz
at345.xyz
attachment85.xyz
audience223.xyz
avant-garde64.xyz
azyhome64.xyz
baby081.xyz
bad2251.xyz
banquet231.xyz
barbarou325.xyz
beef85.xyz
belong34.xyz
bigextreme22.xyz
bind56.xyz
birthday3467.xyz
bite346.xyz
bomb234.xyz
border86.xyz
bow25.xyz
brainstorm9657.xyz
broccoli135.xyz
bush447.xyz
by334.xyz
calquickl6.xyz
cancer566.xyz
carriage458.xyz
carve842.xyz
cast73.xyz
chemistry667.xyz
chickene543.xyz
ckenunarme3.xyz
club556.xyz
coat457.xyz
coma48.xyz
complication2356.xyz
congress553.xyz
consideration221.xyz
correspond580738.xyz
creep3425.xyz
crude4578.xyz
csplendidbu453.xyz
dashing4.xyz
depression31.xyz
descent1563.xyz
dgetevery43.xyz
dilemma935.xyz
dirty83.xyz
dismiss16.xyz
distort99.xyz
doubledisti3525.xyz
dpanickyblus23.xyz
drainedsolidab55.xyz
dribble586.xyz
easantdif75.xyz
edge568.xyz
electronics38.xyz
erati543.xyz
exclusive324.xyz
explode221.xyz
expression2357.xyz
extinct26.xyz
exualap4.xyz
fate325.xyz
fee437.xyz
ferentthankf35.xyz
first325.xyz
fisherman623.xyz
follow364.xyz
follow413.xyz
foundation4864.xyz
fraction748.xyz
free33412.xyz
frozen112.xyz
gallon5631.xyz
glass25.xyz
gun255.xyz
haunt3.xyz
health264.xyz
highway468.xyz
hingelderlyrigh4.xyz
hlovelyos75.xyz
humor335.xyz
hypothesis334.xyz
identification112.xyz
ignite123.xyz
ignite8563.xyz
implication324.xyz
incapable214.xyz
inflation658.xyz
inn358.xyz
insist569.xyz
integration6325.xyz
ivebeginninga12.xyz
kitchen123.xyz
lake436.xyz
lebackground12.xyz
lectroni7354.xyz
legislature84.xyz
lepublicka543.xyz
loan4568.xyz
long655.xyz
madgi4.xyz
mark5368.xyz
matr1xrel03ed.xyz
mbentdr587.xyz
mechanical258.xyz
meelectri78.xyz
ministry579.xyz
mmylivepl99.xyz
move453.xyz
musical5638.xyz
name33.xyz
nctsoftvarious213.xyz
ndesirab786.xyz
necklace442.xyz
necklace467.xyz
no856.xyz
noise774.xyz
nominate34.xyz
nose3478.xyz
omplexm45.xyz
option678.xyz
or3865.xyz
ostitchy21.xyz
outline1532.xyz
overwhelm612.xyz
palace35425.xyz
pallingchi4.xyz
palm38.xyz
password4325.xyz
patrol48.xyz
perception124.xyz
physical756.xyz
pioneer377.xyz
polish223.xyz
prey225.xyz
prince457.xyz
producer446.xyz
profession4758.xyz
professional685.xyz
project124.xyz
promise789.xyz
puterectdis78.xyz
quote1245.xyz
reality4451.xyz
reason3131.xyz
reckless255.xyz
reduce1234.xyz
reduction341.xyz
refuse685.xyz
relaxation6332.xyz
reliance673.xyz
remain114.xyz
repetition547.xyz
report436.xyz
reputation552.xyz
revenge37.xyz
revolution334.xyz
routinecoop453.xyz
scaredcla1.xyz
settlement55.xyz
sifiedlea54.xyz
sin3568.xyz
sjealous345.xyz
skeleton12.xyz
smaximu758.xyz
smile234.xyz
snap6589.xyz
spend4366.xyz
sport0014.xyz
spot4411.xyz
stalemuc5.xyz
steep54.xyz
storage6799.xyz
structure455.xyz
surgeon56.xyz
systematic335.xyz
table6532.xyz
tanc354.xyz
tap331.xyz
teacher6302.xyz
tear3856.xyz
tfulcivilcombat4.xyz
theorist34.xyz
thersupre54.xyz
threaten8635.xyz
tooth1256.xyz
tract768.xyz
transaction344.xyz
traughtgross453.xyz
treatment1926.xyz
twist246.xyz
uldressvisu2.xyz
uncle134.xyz
unktight5.xyz
use7354537.xyz
valley13.xyz
veil658.xyz
vejazzyu534.xyz
video3468.xyz
visible48.xyz
vision441.xyz
warning432.xyz
weigh346436.xyz
which5.xyz
witness3865.xyz
youth664.xyz
ysteriou54.xyz

# Reference: https://www.virustotal.com/gui/file/e85cd3a474569037c377db6e25dbbdd8fd0a87b6c496a0b0bb0b4e434a56300e/detection
# Reference: https://www.virustotal.com/gui/ip-address/172.104.225.253/relations
# Reference: https://twitter.com/ReBensk/status/1334808068916269056

ability52.xyz
abscised33.xyz
accept1121.xyz
acknowledge35.xyz
acquire785.xyz
add436.xyz
adventure65.xyz
age658.xyz
airport48512.xyz
alcades38.xyz
allow89.xyz
allyl93.xyz
announce34534.xyz
aphidian72.xyz
arbors8.xyz
armours1.xyz
art23546.xyz
art67.xyz
asmongolds112air.xyz
aspect278.xyz
assaultt45.xyz
astrona23.xyz
authentic56.xyz
avoid635.xyz
barleduc89.xyz
beeping5.xyz
believe43676.xyz
bent3457.xyz
blush122.xyz
bobble8.xyz
bonehead7.xyz
born44.xyz
boutiq543.xyz
bozro62.xyz
brag7.xyz
brashy45.xyz
bulletin23.xyz
buyer5452.xyz
cable23.xyz
cachepot76.xyz
candidate18.xyz
canister7.xyz
carnivalaa32.xyz
carpenter562.xyz
carvi22h1goldstone.xyz
carvin45goldstone1indian.xyz
carvin4oldston42019.xyz
caserne3.xyz
catch121.xyz
cause222.xyz
cavemen33.xyz
cell7825.xyz
child97.xyz
church72.xyz
cicale23.xyz
coincide807.xyz
college7354.xyz
comatose54.xyz
come34657.xyz
comma347.xyz
concept728.xyz
consider46.xyz
coveters8787.xyz
crabbily786.xyz
crabmeat66.xyz
creases13.xyz
currency3754.xyz
database786.xyz
davi74e1goldstein.xyz
declared786.xyz
deer547.xyz
delay68.xyz
delivery52479.xyz
dinner54.xyz
divaroty4.xyz
dosses938.xyz
drink22.xyz
dryness78.xyz
echidnas64.xyz
economics73.xyz
economist11.xyz
eddie4hall4olds.xyz
efflux23.xyz
embarras4sment4.xyz
emerge3643.xyz
enlaced938.xyz
ery542.xyz
exacter32.xyz
excusing3.xyz
execution367.xyz
explore55.xyz
failure782.xyz
fall47.xyz
fan235.xyz
flower76.xyz
fluenti235.xyz
found214.xyz
front55.xyz
goals1in.xyz
gods33menu1reaction.xyz
gods6of6egypt.xyz
godsmenu323.xyz
godsplan12.xyz
gold22knight.xyz
gold26film.xyz
gold26live.xyz
gold2digger.xyz
gold2hunter4.xyz
gold324.xyz
gold35gym6jordan.xyz
gold41ust.xyz
gold4dance.xyz
gold5boy.xyz
gold6hunter.xyz
gold7chain.xyz
goldberg6.xyz
goldgym436india.xyz
goldha23.xyz
goldhand61.xyz
goldhile6.xyz
goldhofer2.xyz
goldhofer32trailer.xyz
goldhood267.xyz
goldhouse29.xyz
golds11in2hey3mouth.xyz
golds11kitchen.xyz
golds1bes6team.xyz
golds1cabrona.xyz
golds1catcher.xyz
golds1fool.xyz
golds26bar2.xyz
golds26life.xyz
golds2channel.xyz
golds2clever.xyz
golds2fit.xyz
golds33ki4.xyz
golds34dogs.xyz
golds3cheating.xyz
golds3fish.xyz
golds3yg.xyz
golds44demon.xyz
golds4barton.xyz
golds4birthday7.xyz
golds4fragile.xyz
golds4intro2.xyz
golds4ym4egypt.xyz
golds56juice.xyz
golds5country.xyz
golds5gym7elliptical.xyz
golds6diary.xyz
golds6face.xyz
golds7car.xyz
goldsan11.xyz
goldsandsmusic24.xyz
goldsattafree66.xyz
goldsattaking73.xyz
goldsboro3.xyz
goldsburn7.xyz
goldship15.xyz
goldsit124.xyz
goldson34.xyz
goldspec324.xyz
goldsrc23.xyz
goldsssgy22apan.xyz
goldstar265.xyz
goldstar2g10.xyz
goldstylet21.xyz
goldsun357.xyz
government782.xyz
groggy3.xyz
gules876.xyz
half324.xyz
hand436.xyz
have8912.xyz
heat17.xyz
hehs236.xyz
helic3opter1.xyz
hierarchy412.xyz
hmoist45.xyz
homework78.xyz
horseas32.xyz
illustrate688.xyz
income33.xyz
increase45.xyz
inculcate333.xyz
incur2332.xyz
induce16.xyz
induct22.xyz
industrious463754.xyz
inquisitive212.xyz
interrupt3.xyz
j22goldsmith.xyz
james11f22goldstein.xyz
jstn12v22golds.xyz
just215golds.xyz
kebob1.xyz
khej33.xyz
kif37.xyz
kmjs26golds.xyz
kodak21black36golds.xyz
komvu43.xyz
kooky387.xyz
labarums6.xyz
lancesaa33.xyz
landogolds532.xyz
language884.xyz
lapkol322.xyz
lawine37.xyz
learn74.xyz
length73.xyz
lineage8.xyz
literacy536.xyz
localize33.xyz
lose45.xyz
loss352.xyz
lower67.xyz
lunch938.xyz
lungwort51.xyz
magnificent365.xyz
maintain9865.xyz
mammas7.xyz
manager78.xyz
mark432.xyz
meaning377.xyz
meat87.xyz
mellow457.xyz
menisci34.xyz
motion325.xyz
name24325.xyz
narcissi4.xyz
narrow547.xyz
navasaa44.xyz
neuritis33.xyz
niceties7.xyz
nizzahti23.xyz
nkflaw12.xyz
occludes398.xyz
offramps78.xyz
oral423.xyz
oralist38.xyz
organize341.xyz
origanum69.xyz
outline21.xyz
outsworn5.xyz
oxzam345.xyz
pandits837.xyz
paper326.xyz
part223.xyz
pear1234.xyz
pilau87.xyz
pimped87.xyz
planular1.xyz
plead364.xyz
point780.xyz
preemie97.xyz
preflame65.xyz
pressure34.xyz
process235.xyz
proclaim25.xyz
product977.xyz
professor787.xyz
promise47.xyz
proofed5.xyz
quaverer5.xyz
quicksand435.xyz
rake47.xyz
raspy347.xyz
realize765.xyz
regret44.xyz
release780.xyz
relicts4.xyz
rems76.xyz
repot27.xyz
resolve586.xyz
retinas6.xyz
ride67.xyz
saacaste3d.xyz
sack05.xyz
sail69.xyz
sail98.xyz
scoters398.xyz
sedate2343.xyz
seed54745.xyz
shifters437.xyz
sibilant23.xyz
silent3256.xyz
sink2.xyz
sink457.xyz
slippery3253.xyz
slunk423.xyz
spare125.xyz
spare235.xyz
sparkle375dfv.xyz
split4365.xyz
spread708.xyz
staff754.xyz
stitch35.xyz
strap325.xyz
strumpet4.xyz
studio78.xyz
suggest352.xyz
supreme12344.xyz
survival32.xyz
swallow325.xyz
sweep325.xyz
swing32.xyz
table9876.xyz
taboret1.xyz
tale787.xyz
talk235.xyz
test442.xyz
theory123.xyz
throat221.xyz
tiger447.xyz
tilters6.xyz
tmik345.xyz
traipse8.xyz
transform780.xyz
trunk46.xyz
trysting3.xyz
tuck56.xyz
uelott45.xyz
undertake346.xyz
unequaled3467.xyz
union3.xyz
unperson38.xyz
utobeyroug64.xyz
vanillisaa134.xyz
vexillum23.xyz
volutin8.xyz
weary53.xyz
weigh486.xyz
wife72.xyz
wise3256.xyz
woebegone775.xyz
worker782.xyz
world34.xyz
yards2.xyz
yummy34678.xyz
zuzal468.xyz
zygosis55.xyz

# Reference: https://www.virustotal.com/gui/ip-address/8.208.16.59/relations

kakekelapeq.xyz
papoperelef.xyz
kekekanka1.xyz
norpedf.xyz
hlelew3.xyz
markalandiniz.xyz
juppeterrac.xyz
yuerepere.xyz
sennesinbeeee.xyz
burcakblack.xyz
brosdalses14.xyz
volio22liboli2312.xyz
volioliboli2312.xyz

# Reference: https://twitter.com/ReBensk/status/1335784219029671938

fullvideohdizle12.icu

# Reference: https://twitter.com/ReBensk/status/1336560919095046144

fullvideohdizle34.icu

# Reference: https://twitter.com/ReBensk/status/1337616433308553218

fullhdvideoizlepremium442.icu

# Reference: https://twitter.com/ReBensk/status/1338346030073462785

fullhdvideoizlepremium872.icu

# Reference: https://pastebin.com/tpCXf6B1

satellite124.xyz

# Reference: https://twitter.com/B0rys_Grishenko/status/1336960110225190913

http://51.75.246.67

# Reference: https://twitter.com/malwrhunterteam/status/1337056171593764864
# Reference: https://www.virustotal.com/gui/file/5801c89c2990347b29e0d98ab9e3caa3c6924dafe5e0993c1339aa48c219145a/detection

http://160.119.253.194

# Reference: https://twitter.com/malwrhunterteam/status/1343643222317391877
# Reference: https://www.virustotal.com/gui/file/20b02605a5271b72648d97a7aa687672992256d78b74fece81812a090c62c5c1/detection

http://209.141.40.93

# APK

/AllegroKredyty.apk
/Chrome_Bildirim.apk
/NowaPocztaInteria.apk
/Poczta_o2.apk
/WP_Poczta.apk
