# Copyright (c) 2014-2018 Miroslav Stampar (@stamparm)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/James_inthe_box/status/1040718336173137920

host2.azaronline.com

# Reference: https://twitter.com/avman1995/status/1039929322612641792

mail.efx.net.nz

# Reference: https://twitter.com/James_inthe_box/status/1039878859007569920
# Reference: https://www.virustotal.com/#/ip-address/37.59.117.243

http://37.59.117.243

# Reference: https://twitter.com/avman1995/status/1040493935234371584

ftp://ftp.fasttradeco.com

# Reference: https://twitter.com/MalwareHunterBR/status/1016486687059402752

herosoup.org

# Reference: https://twitter.com/ViriBack/status/983011333506588672
# Reference: https://pastebin.com/nwWHHFe0

http://bobby.ziraat-helpdesk.com/login.php
http://chibu.ziraat-helpdesk.com/login.php
http://chisom.ziraat-helpdesk.com/login.php
http://dashi-dashi.ziraat-helpdesk.com/login.php
http://eizzy.haoldd.com/login.php
http://elb.haoldd.com/login.php
http://emy.agrillcs.com/login.php
http://ezeoma.agrillcs.com/login.php
http://figure.agrillcs.com/login.php
http://files.ziraat-helpdesk.com/login.php
http://free.agrillcs.com/login.php
http://jboy.agrillcs.com/login.php
http://jizzy.ziraat-helpdesk.com/login.php
http://joe.ziraat-helpdesk.com/login.php
http://haoldd.com/okilo/login.php
http://ike.agrillcs.com/login.php
http://isa.haoldd.com/login.php
http://kc.ziraat-helpdesk.com/login.php
http://kelvin.agrillcs.com/login.php
http://marchforward.usa.cc/WebPanel/login.php
http://marchforward.usa.cc/youngnascent/WebPanel/login.php
http://mi.haoldd.com/login.php
http://okey.haoldd.com/login.php
http://small-kelly.agrillcs.com/login.php
http://tonishl.ga/alifriend/WebPanel/login.php
http://tonishl.ga/jide/WebPanel/login.php
http://tonishl.ga/shanker/WebPanel/login.php
http://tonishl.ml/kc/WebPanel/login.php
http://tonishl.ml/nonso/WebPanel/login.php
http://tonishl.ml/sammy/WebPanel/login.php
http://yg.haoldd.com/login.php

# Reference: https://twitter.com/James_inthe_box/status/1046070749138735110

shahrproject.ir/wp--admin/

# Reference: https://twitter.com/James_inthe_box/status/1044198938847244289

moranhq.duckdns.org

# Reference: https://twitter.com/Jan0fficial/status/1047023512383311873

venividivici.host

# Reference: https://twitter.com/Jan0fficial/status/1047051546851254272

etvidanueva.com/photos/images/WebPanel/login.php
etvidanueva.com/photos/images/fulls/WebPanel/login.php

# Reference: https://twitter.com/Jan0fficial/status/1047053960689987584

allpeople.cc/WebPanel/

# Reference: https://twitter.com/James_inthe_box/status/1047495498867728384

hp-compoundlng.com/zuniga/zuniga.php

# Reference: https://twitter.com/avman1995/status/1046620646137102336

repoyochar2u.ddns.net
repoyochar2u.hopto.org

# Generic callback path

/zuniga.php
