# Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://blog.talosintelligence.com/2018/06/my-little-formbook.html?m=1

drylipc.com/em1/
handanzhize.info/d5/
bddxpso.info/d7/
atopgixn.info/de8/
cretezzy.com/am/
cretezzy.com/do/
casiinoeuros.info/d3/
newraxz.com/as/

# Reference: https://twitter.com/avman1995/status/1038285919219068928
# Reference: https://pastebin.com/6MRD35Pq

http://136.144.52.99
http://198.185.159.145
http://47.91.170.222
lotochain.com
n01.tech
ourcrazyveterans.com
sy-adm.com
yinuxw.info

# Reference: https://twitter.com/dms1899/status/1038276577254146049
# Reference: https://pastebin.com/4pDsDuxn

http://5.101.78.222/
http://5.255.94.75/saite/gate.php
0day4today.com
commercekorea.net/hx289/
magnagrecia.net/h319/
npromo.eu/index.php
southsidenewhomes.com/hx341/

# Reference: https://twitter.com/voidm4p/status/1037294325091250177

handanzhize.info/bo/

# Reference: https://twitter.com/ps66uk/status/1036782703788605440

ghazicraft.com/sp/

# Reference: https://twitter.com/ps66uk/status/1036773879321190400

truemusclesnow.com/ca/

# Reference: https://twitter.com/ps66uk/status/1036773694243332096

sosmedplus.com/bu/

# Reference: https://twitter.com/ps66uk/status/1036781260516061184

newd4y.com/sp/

# Reference: https://twitter.com/malware_traffic/status/957956818906632192

boosterfx.com/jfe/
cabel-ispoffers.market/jfe/
conditionalmachines.com/jfe/
derekblasberg.net/jfe/
exoticlocale.com/jfe/
idlevents.com/jfe/
fhsdjhfsdkj.com/jfe/
lynkieevents.com/jfe/
mansiobbok.com/jfe/
wshamg.com/jfe/
yougethosted.com/jfe/

# Reference: https://pastebin.com/bEqJKZfZ

peliculainfantiles.com/em02/
vanzundertconsulting.com/jo/

# Reference: https://twitter.com/nullcookies/status/1046929109811630081

derwamanojaz.com/ssl/

# Reference: https://twitter.com/James_inthe_box/status/1046864076624646144

graimmer.com/zz/
ww7.keygirl.site

# Reference: https://twitter.com/pollo290987/status/1044947696451235840

high5fundraising.net/ar8/
lechevalierorange.com/ar8/
returnlostitem.com/ar8/
sftpcomponent.net/ar8/

# Reference: https://twitter.com/James_inthe_box/status/1044580953912266758

aldocompliance.com/kkk/

# Reference: https://twitter.com/James_inthe_box/status/1044324089714724870

graimmer.com/sam/

# Reference: https://twitter.com/nullcookies/status/1046924081591988224

bharimatrasay.com/tifan/

# Reference: https://twitter.com/James_inthe_box/status/1047488230763913216

d.coka.la/ORg1ie.jpg
d.coka.la/BI0asY.jpg
jgc.com.mx/dat/heavy.jpg
jgc.com.mx/dat/mila.jpg
nothernpridecommunications.net
mrawesomescloset.com

# Reference: https://twitter.com/James_inthe_box/status/1047846258239401986

graimmer.com/ald/
refractoriesdirectory.com

# Reference: https://twitter.com/dvk01uk/status/1107851408269824000

higcaf.com/la/

# Reference: https://twitter.com/dvk01uk/status/1098070906029723649

symtual.com/jo/

# Reference: https://twitter.com/dvk01uk/status/1091013599018000386

funguythings.com/secure/

# Reference: https://twitter.com/dvk01uk/status/1089807824731947009

humanytc.com/ps/

# Reference: https://twitter.com/dvk01uk/status/1089748801571700737

zinrop.com/pe/

# Reference: https://twitter.com/James_inthe_box/status/1108064849651601408

melendyou.com/rm/

# Reference: # Reference: https://twitter.com/James_inthe_box/status/1110579161884577792

liongrooming.com/h338/

# Reference: https://twitter.com/makflwana/status/1068015579586453504
# Reference: https://pastebin.com/TurChwaE

jeycop.com/ku/
scubaarabia.com/ku/
journeystudentcamp.com/ku/
niger-online.com/ku/
simplegreenhabits.net/ku/
essayontime.science/ku/
frankandmidori.com/ku/
525pwz.info/ku/
check-or-wreck.com/ku/
purdomlnc.com/ku/

# Reference: https://twitter.com/dvk01uk/status/1118565721892634624

slideus.com/uz/

# Reference: https://twitter.com/pancak3lullz/status/1092534221783158784

mitafa.com
seajayssailing.com
327503788.com
michkatravel.com
recoil.world
lianglinyiyou.com
full-art.com
despasito.net
23o95.com
cultivatingimmaturity.win
dtrchampions.com

# Reference: https://twitter.com/pancak3lullz/status/1092434571889688576

w3c.ink
idreamstartup.com
tiaohuobuy.com
droptxt.com
demopex.com
thebodyshelinglogic.com
millcms.com
artframephotography.com
whitelodgingcollege.com

# Reference: https://twitter.com/pancak3lullz/status/1083019107568619521

goodies.biz
win603.com
microbreweriesassociation.com
xn--hck5aza9o8c.site
orangefirestarter.com
mmareligion.com
elhomegifts.com
mecharniser.com
xinghuategang.com

# Reference: https://twitter.com/pancak3lullz/status/1121108516637433859

/h383/?CneDl=

# Reference: https://twitter.com/pancak3lullz/status/1034149890983641089

/eu/?Lh54A=

# Reference: https://twitter.com/malware_traffic/status/1080623037471432704

/hx310/?JreXz=

# Reference: https://twitter.com/pollo290987/status/1082400417370251268

/private/?Uv1x=

# Reference: https://twitter.com/pollo290987/status/901090998343929859

click-ticke.site

# Reference: https://twitter.com/Antelox/status/895299149284999168

wow-tracking.site

# Reference: https://twitter.com/luc4m/status/1124220235656118272

arsimport.com/h383/
iniwhmya.com/h383/
molakalyva.com/h383/

# Reference: https://twitter.com/dvk01uk/status/1125703826890199040

mecharniser.info/ni8/

# Reference: https://twitter.com/luc4m/status/1126043316305506304

alabamaseosolutions.com/da/
foodome.net/da/
humanytc.com/da/
shopnow1.com/da/
wealths.us/da/
zjydl.com/da/

# Reference: https://app.any.run/tasks/5582d288-8fef-456e-be79-a8d80d1df829

rachelkinseyforcongress.com/la/

# Reference: https://twitter.com/dvk01uk/status/1120628599793553408

tiboxe.com/uz/

# Reference: https://twitter.com/JAMESWT_MHT/status/1128996781054996480
# Reference: https://app.any.run/tasks/c0094589-70db-4cbe-a7de-f1a08b79168f/

/ca/?U4kp=

# Reference: https://twitter.com/malware_traffic/status/1130450003422351360

/ha/?1b=

# Reference: https://twitter.com/dms1899/status/1138414720199864320

mypeeps.ninja  
yuchuanjz.com  
tasmanuka.online  
perryleycraftgin.com  
ttklyn.com  
pipiguan.com  
kw7ob.com

# Reference: https://twitter.com/James_inthe_box/status/1138478169755754496

explorenoblesvillehomes.com
prytherchforcouncil.com

# Reference: https://twitter.com/luc4m/status/1140979690758262784

tlkcloudem.com

# Reference: https://twitter.com/JayTHL/status/1141056334244253698

promotionzynovawillzerodacontinuegood.duckdns.org

# Reference: https://twitter.com/Racco42/status/1141672784357146624

desklink.duckdns.org

# Reference: https://twitter.com/killamjr/status/1131368397617475584

joeing.duckdns.org

# Reference: https://twitter.com/luc4m/status/1143815529079156738

srcalci.com 
paxfulk.com 
ajexin.com 
gmcpr.net 
shots.golf 
artnfoods.guru 
biocombustiveis.com 
phpcoding.life 
ncfgmm.com

# Reference: https://twitter.com/James_inthe_box/status/1146183202467303424

virtuoussnowball.com

# Reference: https://twitter.com/reecdeep/status/1149224578532741120

hsctsu.com
srilankika.com
westernenergymedicine.info
xn--5nq67dt91acob217ad91b.com
xn--fhqv52e1ueg8n.com

# Reference: https://twitter.com/1ZRR4H/status/1149282913751617536

vfxwarrior.com
protocol.life
15churchroad.com
djcreview07.com

# Reference: https://twitter.com/hexlax/status/1150113306545467393

regular123.com/nk7/

# Reference: https://twitter.com/hexlax/status/1150744858132451328

mecharniser.com/hx301/
shaxob.com/h329/
shaxob.com/h331/

# Reference: https://twitter.com/James_inthe_box/status/1154398293524271104

24648040.ngrok.io

# Reference: https://twitter.com/dms1899/status/1165009802470277120

241369.com/bul20/
apachedrone.com/bul20/
beziehungswerk.net/bul20/
regular123.com/bul20/
sadathetoure.com/bul20/
telnyc.com/bul20/
the-brand-nursery.com/bul20/
trendteasindia.com/bul20/

# Reference: https://twitter.com/dms1899/status/1165762759738437632

aagangirlshostal.com/bt/
bbo6331.com/bt/
crossfitktresrios.com/bt/
darts-bar-nova.com/bt/
dclogisticsbrasli.com/bt/
fanfantxt.com/bt/
haiju365.com/bt/
longlifebaba.com/bt/
sixfiguresuccessmastery.com/bt/
somosvip365.com/bt/
starfleetcartography.com/bt/
sukfat.com/bt/
yj.ink/bt/

# Reference: https://twitter.com/dms1899/status/1165742047539662850

americangypsealife.com/w11/
andareavela.online/w11/
dpthkee.com/w11/
espritmoteur.com/w11/
fawazalhokairfashions.com/w11/
get-housesecurity.sale/w11/
jeyucite81.win/w11/
kzxuqf8w7.biz/w11/
mbk.partners/w11/
olivianaphotography.com/w11/
woodlandsdogretreat.com/w11/

# Reference: https://twitter.com/reecdeep/status/1166255171200004100

alptraumaclinic.com/x2553/
amobad.com/x2553/
artilary.com/x2553/
artistsandcreatives.com/x2553/
beyhanbilisim.com/x2553/
hunde-betreuung.com/x2553/
mecharniser.com/x2553/
pixelorlando.com/x2553/
ronicooper.com/x2553/
scjieniu.com/x2553/
superbotany.com/x2553/
khosravanigroup.net/x2553/
tc521.net/x2553/
pen6.net/x2553/

# Reference: https://twitter.com/reecdeep/status/1168937433171484676

eprivacyguards.com/oa/
nimble.report/oa/
shinrigaku-riron.com/oa/
xn--gdka3eubcx5ge.com/oa/
sukfat.com/oa/

# Reference: https://twitter.com/smica83/status/1169553710999060481

joyhoundinc.com 
margaretminguy.com 
racooncity.net 
seastarways.com 
szahjw.com 
tp-hostel.com
travelersintheworld.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1172122495652155392

selforall.info
haddadunited.com

# Reference: https://twitter.com/coderippers/status/1156857536026484736

burkwp.com

# Reference: https://twitter.com/James_inthe_box/status/1173953038098128896

starttoto.com/vh/

# Reference: https://twitter.com/malwaremustd1e/status/1175779000687325186

beautyzonebyheidi.com
ristorantepagus.com
sensingbridge-platform.com

# Reference: https://twitter.com/dvk01uk/status/1178696483522191360
# Reference: https://app.any.run/tasks/3b84770f-b06e-47c8-b193-9be3c4c7a6bf/

dealskabaap.com
drrichardorlandi.com
ferienwohnung-dodel.com
geohoof.com
identityapparelonline.com
kxmphs.com
romanoimoveis.com
superadminapp.com
termesahiltaksi.com
veroxin.com

# Reference: https://twitter.com/luc4m/status/1179413765147807744

7thgenerationrabble.com

# Reference: https://twitter.com/luc4m/status/1181880797399326721

cvasajhsjkls00pro.co.uk

# Reference: https://app.any.run/tasks/d933e54f-4a1b-431d-ac1a-46b1f7dbe792/

alphlinic.com
atlantisads.com
apps-tv.com
cheapmonclerjacketsoutlets.com
edmov.com
eurodisfraz.com
hhtdhg.com
nieuwtij.com
pelvicheartspiritalchemy.com
skylod.com
xiaolinjia.com
xn--dll-8n0e103b.com

# Reference: https://twitter.com/JAMESWT_MHT/status/1186906425836081153

100rupeeeliquid.com
allixanes.com 
cattybcreative.com
fastbatterysystems.com
lokmazel.com 
moonchildenterprises.com 
pi2023.com

# Reference: https://twitter.com/wwp96/status/1187064601327919104

guzelkaybettik.com/hz/
podwath.com/hz/
dairobby.com/hz/
danielemenchetti.com/hz/

# Reference: https://twitter.com/wwp96/status/1189234871291564035

cartedevisitegratuite.net
palsgraphor.com
veroxin.com
ferreiralove.com

# Reference: https://pastebin.com/29uSdMAk

cancertreatmenttransport.com/dg/
chuangshunchem.com/um/
garthhassel.com/px/
golaminators.com/bo/
hairminders.com/px/
kovaxy.com/b5/
mizorl.com/s40/
moraxy.com/dg/
rwinzresearch.com/um/

# Reference: https://twitter.com/wwp96/status/1191014781911736321

camexpertangkor.com

# Reference: https://app.any.run/tasks/c0597f3d-f31a-40f8-85e1-b0a8eb3af899/

926cb.com/cc/
molestuk.com/cc/
shabbirinstruments.com/cc/
