不正URLへのアクセス、不正メールの受信
-
メール受信した
弊社お客様0社 URLアクセスした
弊社お客様0社 -
2022/12/07
※2022/12/07 更新
マルウェア感染させると考えられるURLを検知（2022/12/07）
■IoC（※1）
| Type: | IOC: | Signature: |
|---|---|---|
| URL | hxxp://103[.]171[.]0[.]73/googledrive/[.]svchost[.]exe hxxp://103[.]171[.]0[.]73/msnserver/[.]svchost[.]exe hxxp://103[.]232[.]53[.]228/msnserver/vbc[.]exe hxxp://208[.]67[.]105[.]179/killdemzx[.]exe hxxp://23[.]95[.]122[.]232/lee[.]exe hxxp://45[.]139[.]105[.]66/invoice[.]exe |
Agent Tesla |
| URL | hxxps://www[.]time4unow[.]com/wp-content/config_20[.]ps1 | Amadey |
| URL | hxxps://3978b[.]fate[.]truelance[.]com/subscribeEvent hxxps://b0f69[.]fate[.]truelance[.]com/subscribeEvent hxxps://cf0bc[.]fate[.]truelance[.]com/subscribeEvent |
FAKEUPDATES |
| URL | hxxp://103[.]133[.]110[.]147/googledrive/vbc[.]exe hxxp://103[.]133[.]110[.]147/googledrive2/csrss[.]exe hxxp://103[.]133[.]110[.]147/outlook/csrss[.]exe |
Formbook |
| URL | hxxp://easydipe[.]com/co32[.]rar hxxp://easydipe[.]com/co64[.]rar hxxp://easydipe[.]com/sti32[.]rar hxxp://easydipe[.]com/sti64[.]rar |
Gozi |
| URL | hxxp://esplogem[.]ga/bryn/re[.]php hxxp://171[.]22[.]30[.]164/kelly/five/fre[.]php hxxp://208[.]67[.]105[.]161/gk2/five/fre[.]php hxxp://171[.]22[.]30[.]164/mous/five/fre[.]php hxxp://103[.]133[.]107[.]162/googledrive/audiodg[.]exe hxxp://103[.]133[.]107[.]162/msnserver/audiodg[.]exe hxxp://103[.]139[.]44[.]52/msnserver/csrss[.]exe hxxp://163[.]123[.]142[.]197/msnserver/[.]win32[.]exe |
LokiBot |
| URL | hxxps://8llc[.]net/lite/index[.]php | NetSupportManager RAT |
| URL | hxxp://185[.]215[.]113[.]66/twizt/ | Phorpiex |
| URL | hxxp://12h1[.]com[.]br/ou/index[.]php?QBOT[.]zip hxxp://2minutecoding[.]com/ln/index[.]php?QBOT[.]zip hxxp://4obzor[.]ru/index[.]php?QBOT[.]zip hxxp://4square[.]com[.]pk/atau/index[.]php?QBOT[.]zip hxxp://aaae[.]co[.]in/el/index[.]php?QBOT[.]zip hxxp://abacusshopee[.]biz/ee/index[.]php?QBOT[.]zip hxxp://akke[.]am/nn/index[.]php?QBOT[.]zip hxxp://alkareementerprises[.]com/aalp/index[.]php?QBOT[.]zip hxxp://arshamim[.]xyz/rrtm/index[.]php?QBOT[.]zip hxxp://aspsupport[.]hu/natu/index[.]php?QBOT[.]zip hxxp://atuzalstudio[.]com/uilb/index[.]php?QBOT[.]zip hxxp://bajwasahib[.]com/em/index[.]php?QBOT[.]zip hxxp://benigletechnologies[.]com/nnom/index[.]php?QBOT[.]zip hxxp://bigasoft[.]org/vu/index[.]php?QBOT[.]zip hxxp://ceyloncampus[.]com/utn/index[.]php?QBOT[.]zip hxxp://cumin360technologies[.]in/tuta/index[.]php?QBOT[.]zip hxxp://diresaica[.]gob[.]pe/ro/index[.]php?QBOT[.]zip hxxp://dsresearchcentre[.]com/oo/index[.]php?QBOT[.]zip hxxp://eccobolsas[.]com[.]br/iumq/index[.]php?QBOT[.]zip hxxp://eidx[.]org/te/index[.]php?QBOT[.]zip hxxp://elastechcambodia[.]com/rese/index[.]php?QBOT[.]zip hxxp://elmelok[.]com/per/index[.]php?QBOT[.]zip hxxp://emekelmasmermer[.]com[.]tr/oede/index[.]php?QBOT[.]zip hxxp://emoty[.]com[.]br/dsne/index[.]php?QBOT[.]zip hxxp://equitytitleandtrust[.]com/siv/index[.]php?QBOT[.]zip hxxp://eventtrick[.]com/is/index[.]php?QBOT[.]zip hxxp://exchange-mail[.]org/ers/index[.]php?QBOT[.]zip hxxp://exospherecorp[.]com/uqr/index[.]php?QBOT[.]zip hxxp://ezstove[.]lk/tu/index[.]php?QBOT[.]zip hxxp://fbi-sos[.]org/et/index[.]php?QBOT[.]zip hxxp://firedoghosting[.]net/qdo/index[.]php?QBOT[.]zip hxxp://freelancehouse[.]net/pser/index[.]php?QBOT[.]zip hxxp://globalpratama[.]com/iexi/index[.]php?QBOT[.]zip hxxp://headlineplayroom[.]com/oam/index[.]php?QBOT[.]zip hxxp://hireskill[.]net/osos/index[.]php?QBOT[.]zip hxxp://holidaytourswitharosh[.]com/itv/index[.]php?QBOT[.]zip hxxp://hostalaptofive[.]com/isoe/index[.]php?QBOT[.]zip hxxp://hotelkristoff[.]com/ciau/index[.]php?QBOT[.]zip hxxp://hyperthyroidisminfo[.]com/smi/index[.]php?QBOT[.]zip hxxp://ijebumall[.]com/iaid/index[.]php?QBOT[.]zip hxxp://imergeadv[.]com/au/index[.]php?QBOT[.]zip hxxp://imperiojeri[.]com[.]br/osr/index[.]php?QBOT[.]zip hxxp://installworxs[.]com/ruda/index[.]php?QBOT[.]zip hxxp://intouchmobiles[.]in/ees/index[.]php?QBOT[.]zip hxxp://inveslar[.]com/es/index[.]php?QBOT[.]zip hxxp://jackgmarch[.]com/at/index[.]php?QBOT[.]zip hxxp://jimmatimes[.]com/uuqi/index[.]php?QBOT[.]zip hxxp://kagomadb[.]com/ua/index[.]php?QBOT[.]zip hxxp://kmcpokhara[.]edu[.]np/am/index[.]php?QBOT[.]zip hxxp://laboratorioexpress[.]com[.]pa/isde/index[.]php?QBOT[.]zip hxxp://latinbrands[.]cl/auau/index[.]php?QBOT[.]zip hxxp://lunchman[.]in/lt/index[.]php?QBOT[.]zip hxxp://michaelbuildings[.]com/urvr/index[.]php?QBOT[.]zip hxxp://mk20onetechnologies[.]com/ad/index[.]php?QBOT[.]zip hxxp://mystudenthelp[.]com/ecu/index[.]php?QBOT[.]zip hxxp://nobix[.]io/os/index[.]php?QBOT[.]zip hxxp://novaportal[.]novasystems[.]it/dogana/index[.]php?QBOT[.]zip hxxp://ons-3i[.]com/ai/index[.]php?QBOT[.]zip hxxp://opensolutionitinstitute[.]com/rs/index[.]php?QBOT[.]zip hxxp://orderlasquecas[.]com/index[.]php?QBOT[.]zip hxxp://paranews[.]net/lmeo/index[.]php?QBOT[.]zip hxxp://paranoidlinux[.]org/tae/index[.]php?QBOT[.]zip hxxp://pastamemes[.]com/ipqa/index[.]php?QBOT[.]zip hxxp://pianoplaymusic[.]com/sr/index[.]php?QBOT[.]zip hxxp://primeogi[.]com[.]br/cai/index[.]php?QBOT[.]zip hxxp://residenz-eifelgold[.]de/cms/index[.]php?QBOT[.]zip hxxp://riometais[.]com/ihn/index[.]php?QBOT[.]zip hxxp://rytcorporation[.]com/tq/index[.]php?QBOT[.]zip hxxp://shopexinn[.]com/msqu/index[.]php?QBOT[.]zip hxxp://shubhamjeweller[.]in/eee/index[.]php?QBOT[.]zip hxxp://sistagua[.]com[.]sv/itha/index[.]php?QBOT[.]zip hxxp://skcllab[.]com/psus/index[.]php?QBOT[.]zip hxxp://studiomartini[.]co[.]za/oua/index[.]php?QBOT[.]zip hxxp://suratrealestate[.]in/te/index[.]php?QBOT[.]zip hxxp://syncone[.]net/stmi/index[.]php?QBOT[.]zip hxxp://syromalabarcairns[.]org/pu/index[.]php?QBOT[.]zip hxxp://tarnokitenyek[.]hu/to/index[.]php?QBOT[.]zip hxxp://thebcnp[.]com/sam/index[.]php?QBOT[.]zip hxxp://truedailywinners[.]com/yti/index[.]php?QBOT[.]zip hxxp://udnikah[.]com/emio/index[.]php?QBOT[.]zip hxxp://visitkiberaexpeditions[.]com/mtt/index[.]php?QBOT[.]zip hxxp://walklankatours[.]com/trm/index[.]php?QBOT[.]zip hxxp://webminux[.]com/rieu/index[.]php?QBOT[.]zip hxxp://weimanervehicle[.]com/intm/index[.]php?QBOT[.]zip hxxp://writersscores[.]com/roue/index[.]php?QBOT[.]zip hxxp://zelvotrends[.]com/saed/index[.]php?QBOT[.]zip hxxp://zeroth[.]ai/aosp/index[.]php?QBOT[.]zip hxxps://12fifteenfoodsherbs[.]com/eruu/index[.]php?QBOT[.]zip hxxps://12h1[.]com[.]br/ou/index[.]php?QBOT[.]zip hxxps://1grandmall[.]com/iii/index[.]php?QBOT[.]zip hxxps://2capricorns[.]com/ut/index[.]php?QBOT[.]zip hxxps://30ksystem[.]com/idut/index[.]php?QBOT[.]zip hxxps://360tradeoption[.]com/dnr/index[.]php?QBOT[.]zip hxxps://3designs3d[.]com/ued/index[.]php?QBOT[.]zip hxxps://4kmedia[.]xyz/teia/index[.]php?QBOT[.]zip hxxps://4square[.]com[.]pk/atau/index[.]php?QBOT[.]zip hxxps://7starsinterglobal[.]ng/mas/index[.]php?QBOT[.]zip hxxps://99epics[.]com/tdue/index[.]php?QBOT[.]zip hxxps://aaae[.]co[.]in/el/index[.]php?QBOT[.]zip hxxps://aarmikids[.]com/mpue/index[.]php?QBOT[.]zip hxxps://ab[.]co[.]tz/mnc/index[.]php?QBOT[.]zip hxxps://a-baba[.]ir/epm/index[.]php?QBOT[.]zip hxxps://abacusshopee[.]biz/ee/index[.]php?QBOT[.]zip hxxps://abelklering[.]com[.]br/outm/index[.]php?QBOT[.]zip hxxps://abhijass[.]com/rac/index[.]php?QBOT[.]zip hxxps://abs-foundation[.]org/ur/index[.]php?QBOT[.]zip hxxps://accurateoverseas[.]com/euip/index[.]php?QBOT[.]zip hxxps://advanceheatingandcooling[.]com/em/index[.]php?QBOT[.]zip hxxps://adventuremadnessbd[.]com/usse/index[.]php?QBOT[.]zip hxxps://aeatechnics[.]com/eq/index[.]php?QBOT[.]zip hxxps://afifi[.]com[.]sa/vnva/index[.]php?QBOT[.]zip hxxps://aflaw-p[.]com/nue/index[.]php?QBOT[.]zip hxxps://agadirtour[.]com/sa/index[.]php?QBOT[.]zip hxxps://agenciahifly[.]com[.]br/ae/index[.]php?QBOT[.]zip hxxps://aggadvocacia[.]com/uxn/index[.]php?QBOT[.]zip hxxps://agjv[.]com[.]pk/eits/index[.]php?QBOT[.]zip hxxps://ahuigonzalez[.]com/rem/index[.]php?QBOT[.]zip hxxps://aiccf[.]net/niu/index[.]php?QBOT[.]zip hxxps://akke[.]am/nn/index[.]php?QBOT[.]zip hxxps://alamal-international[.]com/uu/index[.]php?QBOT[.]zip hxxps://alexandrenunes[.]ca/ep/index[.]php?QBOT[.]zip hxxps://alfarestr[.]com/erob/index[.]php?QBOT[.]zip hxxps://alfredwilloughby[.]com/da/index[.]php?QBOT[.]zip hxxps://alkareementerprises[.]com/aalp/index[.]php?QBOT[.]zip hxxps://alkokb[.]com/miun/index[.]php?QBOT[.]zip hxxps://alliedbazar[.]com/vu/index[.]php?QBOT[.]zip hxxps://alltravelsolutions[.]com/id/index[.]php?QBOT[.]zip hxxps://alomen[.]ir/snu/index[.]php?QBOT[.]zip hxxps://alphaionic[.]org/dit/index[.]php?QBOT[.]zip hxxps://altrasupportservices[.]com[.]au/eu/index[.]php?QBOT[.]zip hxxps://ambsinvestments[.]com/me/index[.]php?QBOT[.]zip hxxps://amwellness[.]org/eo/index[.]php?QBOT[.]zip hxxps://amysherri[.]xyz/eii/index[.]php?QBOT[.]zip hxxps://anderssilvi[.]xyz/oui/index[.]php?QBOT[.]zip hxxps://anubanseka[.]ac[.]th/ua/index[.]php?QBOT[.]zip hxxps://anukanttechnologies[.]com/oo/index[.]php?QBOT[.]zip hxxps://aoranmetal[.]com/ies/index[.]php?QBOT[.]zip hxxps://apkarabic[.]net/qt/index[.]php?QBOT[.]zip hxxps://apnichath[.]com/mnso/index[.]php?QBOT[.]zip hxxps://appsolstech[.]com/lere/index[.]php?QBOT[.]zip hxxps://aprendumcr[.]com/ua/index[.]php?QBOT[.]zip hxxps://apsingenieroscloud[.]es/ald/index[.]php?QBOT[.]zip hxxps://apspolytechnic[.]co[.]in/iqud/index[.]php?QBOT[.]zip hxxps://apxart[.]com/cno/index[.]php?QBOT[.]zip hxxps://arabianattestation[.]com/lm/index[.]php?QBOT[.]zip hxxps://aranbeauty[.]ir/psa/index[.]php?QBOT[.]zip hxxps://arienbusiness[.]com[.]br/oct/index[.]php?QBOT[.]zip hxxps://ars13[.]net/ups/index[.]php?QBOT[.]zip hxxps://asabdullabhoy[.]com/cied/index[.]php?QBOT[.]zip hxxps://asads[.]com[.]ng/lesu/index[.]php?QBOT[.]zip hxxps://asantejarat-razini[.]com/ep/index[.]php?QBOT[.]zip hxxps://ashleads[.]net/ii/index[.]php?QBOT[.]zip hxxps://aspsupport[.]hu/natu/index[.]php?QBOT[.]zip hxxps://asretarahisanaati[.]ir/ag/index[.]php?QBOT[.]zip hxxps://assignmentbay[.]net/sq/index[.]php?QBOT[.]zip hxxps://at20solution[.]com/ula/index[.]php?QBOT[.]zip hxxps://ataxmed[.]com[.]br/oamn/index[.]php?QBOT[.]zip hxxps://atechtools[.]com/tue/index[.]php?QBOT[.]zip hxxps://atgconsulting[.]tg/snua/index[.]php?QBOT[.]zip hxxps://atufuo[.]com/ed/index[.]php?QBOT[.]zip hxxps://atuzalstudio[.]com/uilb/index[.]php?QBOT[.]zip hxxps://audimpuestos[.]com/uaee/index[.]php?QBOT[.]zip hxxps://auratechsystems[.]com/us/index[.]php?QBOT[.]zip hxxps://ayalabar[.]com[.]mx/mdi/index[.]php?QBOT[.]zip hxxps://ayushmanayurved[.]com/nemq/index[.]php?QBOT[.]zip hxxps://b2innova[.]com/vpl/index[.]php?QBOT[.]zip hxxps://babahousekeeping[.]com/gn/index[.]php?QBOT[.]zip hxxps://bajwasahib[.]com/em/index[.]php?QBOT[.]zip hxxps://balarbuilders[.]com/see/index[.]php?QBOT[.]zip hxxps://bandamazonas[.]com[.]br/ot/index[.]php?QBOT[.]zip hxxps://banestofinance[.]com/ves/index[.]php?QBOT[.]zip hxxps://bangalorecardiology[.]com/te/index[.]php?QBOT[.]zip hxxps://banquerecov[.]com/rso/index[.]php?QBOT[.]zip hxxps://bau-decoration[.]com/inoi/index[.]php?QBOT[.]zip hxxps://bazeni-lucus[.]com/rteu/index[.]php?QBOT[.]zip hxxps://bdjobsclub[.]com/lo/index[.]php?QBOT[.]zip hxxps://bdksistemas[.]net/su/index[.]php?QBOT[.]zip hxxps://beaglekeeping[.]com/rtn/index[.]php?QBOT[.]zip hxxps://beautifulhomework[.]com/foiu/index[.]php?QBOT[.]zip hxxps://beautycosmetica[.]com/iedd/index[.]php?QBOT[.]zip hxxps://beautyproductsbd[.]com/facb/index[.]php?QBOT[.]zip hxxps://benigletechnologies[.]com/nnom/index[.]php?QBOT[.]zip hxxps://bestchemical[.]ir/aa/index[.]php?QBOT[.]zip hxxps://bhanusaa[.]com/sra/index[.]php?QBOT[.]zip hxxps://biogreentechnology[.]com/oe/index[.]php?QBOT[.]zip hxxps://bizfood[.]ir/sets/index[.]php?QBOT[.]zip hxxps://blakeslee-equipment[.]com/ut/index[.]php?QBOT[.]zip hxxps://blogra[.]ir/asr/index[.]php?QBOT[.]zip hxxps://bloompk[.]com/tuoc/index[.]php?QBOT[.]zip hxxps://bodnarjanos[.]hu/etm/index[.]php?QBOT[.]zip hxxps://bodomode[.]ir/spt/index[.]php?QBOT[.]zip hxxps://boltech[.]com[.]ng/eu/index[.]php?QBOT[.]zip hxxps://bondnessforever[.]com/nir/index[.]php?QBOT[.]zip hxxps://bookasabusiness[.]com/is/index[.]php?QBOT[.]zip hxxps://bookdirectcostarica[.]com/tu/index[.]php?QBOT[.]zip hxxps://boomber[.]co/ltt/index[.]php?QBOT[.]zip hxxps://branderduck[.]com/eaut/index[.]php?QBOT[.]zip hxxps://bravomobil[.]hu/qm/index[.]php?QBOT[.]zip hxxps://brightloaded[.]com/mo/index[.]php?QBOT[.]zip hxxps://brotherscoffee[.]net/eo/index[.]php?QBOT[.]zip hxxps://btcchampionltd[.]com/si/index[.]php?QBOT[.]zip hxxps://bundledealsdirect[.]com/im/index[.]php?QBOT[.]zip hxxps://bundledealsllc[.]com/eimv/index[.]php?QBOT[.]zip hxxps://buyigshop[.]com/ec/index[.]php?QBOT[.]zip hxxps://buyurldomain[.]com/umr/index[.]php?QBOT[.]zip hxxps://buzzministry[.]com/io/index[.]php?QBOT[.]zip hxxps://bz4xhomecharger[.]com/qqau/index[.]php?QBOT[.]zip hxxps://cafedeviande[.]com/oeo/index[.]php?QBOT[.]zip hxxps://carbuyerassociates[.]com/an/index[.]php?QBOT[.]zip hxxps://cargosprints[.]com/ia/index[.]php?QBOT[.]zip hxxps://carimagesedit[.]com/ttn/index[.]php?QBOT[.]zip hxxps://casaavendapiracicaba[.]com[.]br/oo/index[.]php?QBOT[.]zip hxxps://cashmsanii[.]com/mlui/index[.]php?QBOT[.]zip hxxps://catavento[.]imb[.]br/vpu/index[.]php?QBOT[.]zip hxxps://cbdgin[.]com/dl/index[.]php?QBOT[.]zip hxxps://ccbyrc[.]com/en/index[.]php?QBOT[.]zip hxxps://ccmschools[.]app/uot/index[.]php?QBOT[.]zip hxxps://centadesk[.]com/lisa/index[.]php?QBOT[.]zip hxxps://cerrajeriaexpres[.]cl/dora/index[.]php?QBOT[.]zip hxxps://cgitrades[.]com/ve/index[.]php?QBOT[.]zip hxxps://chanutea[.]com/omra/index[.]php?QBOT[.]zip hxxps://chbea[.]edu[.]np/ooo/index[.]php?QBOT[.]zip hxxps://chemicalacid[.]ir/srd/index[.]php?QBOT[.]zip hxxps://chemicalamterial[.]ir/eoa/index[.]php?QBOT[.]zip hxxps://chessmii[.]com/sqi/index[.]php?QBOT[.]zip hxxps://chiconoticias[.]com[.]br/pts/index[.]php?QBOT[.]zip hxxps://chitrahandicraft[.]com/tc/index[.]php?QBOT[.]zip hxxps://chronosfuneraria[.]com[.]br/intt/index[.]php?QBOT[.]zip hxxps://cityland[.]pk/itu/index[.]php?QBOT[.]zip hxxps://clasescanto[.]mx/vi/index[.]php?QBOT[.]zip hxxps://clinicacardiocare[.]com[.]br/neu/index[.]php?QBOT[.]zip hxxps://clinicalorraneiack[.]com[.]br/rn/index[.]php?QBOT[.]zip hxxps://clintontec[.]net/na/index[.]php?QBOT[.]zip hxxps://clippingimagesindia[.]com/ilqs/index[.]php?QBOT[.]zip hxxps://code3i[.]xyz/ineq/index[.]php?QBOT[.]zip hxxps://coffeefarid[.]com/lm/index[.]php?QBOT[.]zip hxxps://coisasdalu[.]coz[.]br/nn/index[.]php?QBOT[.]zip hxxps://collabcollab[.]io/uui/index[.]php?QBOT[.]zip hxxps://comercializadoraetc[.]com/toes/index[.]php?QBOT[.]zip hxxps://construindosuamarca[.]com[.]br/scrt/index[.]php?QBOT[.]zip hxxps://conveyorbeltmanufacturers[.]co[.]in/ec/index[.]php?QBOT[.]zip hxxps://cookiestudios[.]gg/rr/index[.]php?QBOT[.]zip hxxps://corker[.]biz/icce/index[.]php?QBOT[.]zip hxxps://corporativoavi[.]com[.]mx/met/index[.]php?QBOT[.]zip hxxps://cozzyapp[.]com/dsmr/index[.]php?QBOT[.]zip hxxps://criaderodeboxer[.]com/eci/index[.]php?QBOT[.]zip hxxps://crolimex[.]com/uqg/index[.]php?QBOT[.]zip hxxps://crownpetropoliscentro[.]com[.]br/on/index[.]php?QBOT[.]zip hxxps://crownsaoconrado[.]com[.]br/ial/index[.]php?QBOT[.]zip hxxps://crownsaopaulo[.]com[.]br/uet/index[.]php?QBOT[.]zip hxxps://crownvitoriavix[.]com[.]br/oe/index[.]php?QBOT[.]zip hxxps://crwil[.]com/tsav/index[.]php?QBOT[.]zip hxxps://cryptoguardx[.]com/oni/index[.]php?QBOT[.]zip hxxps://crypto--world[.]com/sima/index[.]php?QBOT[.]zip hxxps://csbkrishikathaindia[.]in/rode/index[.]php?QBOT[.]zip hxxps://csccomputereducation[.]in/ii/index[.]php?QBOT[.]zip hxxps://cscl[.]co[.]in/dl/index[.]php?QBOT[.]zip hxxps://ctdsecurity[.]com/tumc/index[.]php?QBOT[.]zip hxxps://cumillaidealcollege[.]edu[.]bd/aade/index[.]php?QBOT[.]zip hxxps://currenttechnologies[.]us/aubq/index[.]php?QBOT[.]zip hxxps://cybersafe[.]com[.]co/tit/index[.]php?QBOT[.]zip hxxps://dadorefashion[.]com/pom/index[.]php?QBOT[.]zip hxxps://daktos[.]org/amqr/index[.]php?QBOT[.]zip hxxps://dalvoneto[.]com[.]br/anet/index[.]php?QBOT[.]zip hxxps://dataplug247[.]com[.]ng/neer/index[.]php?QBOT[.]zip hxxps://davaphsriganganagar[.]com/tsu/index[.]php?QBOT[.]zip hxxps://decimalsmt[.]com/amun/index[.]php?QBOT[.]zip hxxps://defesacnh[.]com[.]br/is/index[.]php?QBOT[.]zip hxxps://degreen[.]co/ras/index[.]php?QBOT[.]zip hxxps://delexdesigns[.]co[.]ke/nsnc/index[.]php?QBOT[.]zip hxxps://delitoenqueretaro[.]com/an/index[.]php?QBOT[.]zip hxxps://deltastorellc[.]com/ei/index[.]php?QBOT[.]zip hxxps://demacol[.]com[.]br/isur/index[.]php?QBOT[.]zip hxxps://demalturasas[.]com[.]co/le/index[.]php?QBOT[.]zip hxxps://demositeforcustomers[.]com/uote/index[.]php?QBOT[.]zip hxxps://dentalsolutions[.]pk/csql/index[.]php?QBOT[.]zip hxxps://designbeegh[.]com/ptre/index[.]php?QBOT[.]zip hxxps://dev2testing[.]com/th/index[.]php?QBOT[.]zip hxxps://devpros[.]ir/mesl/index[.]php?QBOT[.]zip hxxps://dhareystudios[.]com/oi/index[.]php?QBOT[.]zip hxxps://dideparvaz[.]ir/auta/index[.]php?QBOT[.]zip hxxps://digitalblacksmiths[.]io/nprd/index[.]php?QBOT[.]zip hxxps://digittech[.]co[.]ug/medl/index[.]php?QBOT[.]zip hxxps://digizen[.]in/tn/index[.]php?QBOT[.]zip hxxps://dija-enterprises[.]com/ui/index[.]php?QBOT[.]zip hxxps://dixitcabs[.]com/ftni/index[.]php?QBOT[.]zip hxxps://donbor[.]com[.]br/lb/index[.]php?QBOT[.]zip hxxps://dopeapps[.]rw/maa/index[.]php?QBOT[.]zip hxxps://dreamcatchersjournal[.]com/iiq/index[.]php?QBOT[.]zip hxxps://drjohngarciaferrin[.]com/ingu/index[.]php?QBOT[.]zip hxxps://drogueriavalfarma[.]com/qp/index[.]php?QBOT[.]zip hxxps://drsleep[.]ae/estu/index[.]php?QBOT[.]zip hxxps://dsresearchcentre[.]com/oo/index[.]php?QBOT[.]zip hxxps://duenas-abogados[.]com/toiu/index[.]php?QBOT[.]zip hxxps://earnestfeber[.]com/ua/index[.]php?QBOT[.]zip hxxps://eccobolsas[.]com[.]br/iumq/index[.]php?QBOT[.]zip hxxps://ecocarstraders[.]co[.]za/ttae/index[.]php?QBOT[.]zip hxxps://ecolocalbrasil[.]org[.]br/oa/index[.]php?QBOT[.]zip hxxps://econogas[.]pe/ltt/index[.]php?QBOT[.]zip hxxps://edspires[.]com/ree/index[.]php?QBOT[.]zip hxxps://edufly[.]ir/tn/index[.]php?QBOT[.]zip hxxps://eduhub[.]pk/ul/index[.]php?QBOT[.]zip hxxps://efresho[.]com/toqu/index[.]php?QBOT[.]zip hxxps://egia[.]pk/ie/index[.]php?QBOT[.]zip hxxps://eidx[.]org/te/index[.]php?QBOT[.]zip hxxps://ela-education[.]co[.]uk/ic/index[.]php?QBOT[.]zip hxxps://elastechcambodia[.]com/rese/index[.]php?QBOT[.]zip hxxps://electrocus[.]com/suns/index[.]php?QBOT[.]zip hxxps://elfque[.]xyz/necd/index[.]php?QBOT[.]zip hxxps://elite-bazar[.]com/ese/index[.]php?QBOT[.]zip hxxps://elitecareercourses[.]com/inc/index[.]php?QBOT[.]zip hxxps://elitedodiagnosticoautomotivo[.]com/in/index[.]php?QBOT[.]zip hxxps://elitedsign[.]com/cnqa/index[.]php?QBOT[.]zip hxxps://elixirmune[.]com/sce/index[.]php?QBOT[.]zip hxxps://elomarkspecialisthospital[.]com/dmo/index[.]php?QBOT[.]zip hxxps://elwickdrycleaners[.]co[.]uk/cn/index[.]php?QBOT[.]zip hxxps://emekelmasmermer[.]com[.]tr/oede/index[.]php?QBOT[.]zip hxxps://emmanuelenterprisess[.]com/eeur/index[.]php?QBOT[.]zip hxxps://emoty[.]com[.]br/dsne/index[.]php?QBOT[.]zip hxxps://empirebsolutions[.]com/irnu/index[.]php?QBOT[.]zip hxxps://enaidecarvalho[.]com/ir/index[.]php?QBOT[.]zip hxxps://encore[.]com[.]bd/saam/index[.]php?QBOT[.]zip hxxps://entre00[.]com/uan/index[.]php?QBOT[.]zip hxxps://entrepreneurbookscavenger[.]com/nscn/index[.]php?QBOT[.]zip hxxps://epce[.]edu[.]pe/ucoa/index[.]php?QBOT[.]zip hxxps://epsdconsulting[.]com/rs/index[.]php?QBOT[.]zip hxxps://equitytitleandtrust[.]com/siv/index[.]php?QBOT[.]zip hxxps://eschoola[.]com[.]br/ve/index[.]php?QBOT[.]zip hxxps://especialistadosconsorcios[.]com[.]br/clus/index[.]php?QBOT[.]zip hxxps://essaybay-writers[.]com/sie/index[.]php?QBOT[.]zip hxxps://essaygig[.]com/tteu/index[.]php?QBOT[.]zip hxxps://etacs[.]com[.]au/lln/index[.]php?QBOT[.]zip hxxps://etcworld[.]org/tr/index[.]php?QBOT[.]zip hxxps://eto[.]co[.]tz/oer/index[.]php?QBOT[.]zip hxxps://euroworldcargo[.]com/qi/index[.]php?QBOT[.]zip hxxps://evcharger-locations[.]com/iuni/index[.]php?QBOT[.]zip hxxps://eventoslatone[.]com/ih/index[.]php?QBOT[.]zip hxxps://everysmallhelps[.]org/ii/index[.]php?QBOT[.]zip hxxps://exchange-mail[.]org/ers/index[.]php?QBOT[.]zip hxxps://exclusivenaija[.]com[.]ng/iin/index[.]php?QBOT[.]zip hxxps://exospherecorp[.]com/uqr/index[.]php?QBOT[.]zip hxxps://expertsaptraining[.]com/ere/index[.]php?QBOT[.]zip hxxps://eyebac[.]com/ic/index[.]php?QBOT[.]zip hxxps://eyesudan[.]com/tqi/index[.]php?QBOT[.]zip hxxps://eze-do[.]com/rrid/index[.]php?QBOT[.]zip hxxps://ezstove[.]lk/tu/index[.]php?QBOT[.]zip hxxps://f-alanzi[.]com/tt/index[.]php?QBOT[.]zip hxxps://familyfitness[.]ir/osn/index[.]php?QBOT[.]zip hxxps://familymagazine[.]ir/sqnu/index[.]php?QBOT[.]zip hxxps://fashionexpert[.]us/tp/index[.]php?QBOT[.]zip hxxps://fatirivf[.]com/msr/index[.]php?QBOT[.]zip hxxps://fbi-sos[.]org/et/index[.]php?QBOT[.]zip hxxps://fernandesdesousa[.]com[.]br/di/index[.]php?QBOT[.]zip hxxps://ferreyraabogados[.]com/sit/index[.]php?QBOT[.]zip hxxps://fgwebdesign[.]com/ite/index[.]php?QBOT[.]zip hxxps://financeloans[.]us/leii/index[.]php?QBOT[.]zip hxxps://finelinefencing[.]ca/sn/index[.]php?QBOT[.]zip hxxps://firstvirginiahomes[.]com/uu/index[.]php?QBOT[.]zip hxxps://fishappy[.]in/let/index[.]php?QBOT[.]zip hxxps://fitbitbhangra[.]com[.]au/sao/index[.]php?QBOT[.]zip hxxps://fitbodybynika[.]com/iu/index[.]php?QBOT[.]zip hxxps://fixeasy[.]ir/mmm/index[.]php?QBOT[.]zip hxxps://fkwriter[.]com/mir/index[.]php?QBOT[.]zip hxxps://flap152[.]com/emis/index[.]php?QBOT[.]zip hxxps://flytops[.]com/inxm/index[.]php?QBOT[.]zip hxxps://fmmass[.]org/ta/index[.]php?QBOT[.]zip hxxps://fogx[.]co[.]za/ai/index[.]php?QBOT[.]zip hxxps://fokenya[.]com/in/index[.]php?QBOT[.]zip hxxps://foodheed[.]com/irtu/index[.]php?QBOT[.]zip hxxps://foodtaste[.]us/aclm/index[.]php?QBOT[.]zip hxxps://footrotx[.]com/sab/index[.]php?QBOT[.]zip hxxps://fordhomeintegrationsystem[.]com/re/index[.]php?QBOT[.]zip hxxps://foroughmandaraabi[.]com/mmun/index[.]php?QBOT[.]zip hxxps://foxlife[.]lk/iuoi/index[.]php?QBOT[.]zip hxxps://fratellisolucoes[.]com[.]br/ici/index[.]php?QBOT[.]zip hxxps://freelancehouse[.]net/pser/index[.]php?QBOT[.]zip hxxps://freshlyne[.]in/cs/index[.]php?QBOT[.]zip hxxps://fridem[.]com[.]mx/tq/index[.]php?QBOT[.]zip hxxps://futureadmart[.]com/nach/index[.]php?QBOT[.]zip hxxps://futurespendmarketingsurvey[.]co[.]uk/qou/index[.]php?QBOT[.]zip hxxps://fuzionblox[.]com/lm/index[.]php?QBOT[.]zip hxxps://fxbooktrading15[.]org/uo/index[.]php?QBOT[.]zip hxxps://g2imedical[.]com[.]br/sio/index[.]php?QBOT[.]zip hxxps://g2imedical2[.]com[.]br/cvs/index[.]php?QBOT[.]zip hxxps://gabrielazugliani[.]com[.]br/qi/index[.]php?QBOT[.]zip hxxps://gardenstatebooks[.]com/lisv/index[.]php?QBOT[.]zip hxxps://gatewaybackoffice[.]com/muu/index[.]php?QBOT[.]zip hxxps://gaurstheislandsproject[.]com/eecu/index[.]php?QBOT[.]zip hxxps://gbhifm[.]com/do/index[.]php?QBOT[.]zip hxxps://gdcgroup[.]vn/ti/index[.]php?QBOT[.]zip hxxps://gempirelp[.]net/pl/index[.]php?QBOT[.]zip hxxps://generaloil[.]ir/il/index[.]php?QBOT[.]zip hxxps://genqortech[.]com/uaos/index[.]php?QBOT[.]zip hxxps://geomaticxevs[.]in/aqu/index[.]php?QBOT[.]zip hxxps://germanboard[.]org/dmo/index[.]php?QBOT[.]zip hxxps://getbestusdeal[.]com/ersr/index[.]php?QBOT[.]zip hxxps://getfoodplans[.]com/ne/index[.]php?QBOT[.]zip hxxps://getpaidcoursefree[.]com/qna/index[.]php?QBOT[.]zip hxxps://getphotoboothed[.]com[.]au/lu/index[.]php?QBOT[.]zip hxxps://gettechnologys[.]com/piv/index[.]php?QBOT[.]zip hxxps://getthatrental[.]com/cqs/index[.]php?QBOT[.]zip hxxps://ggis-eims[.]com/rsin/index[.]php?QBOT[.]zip hxxps://ggrace[.]ca/upis/index[.]php?QBOT[.]zip hxxps://ghagotiasalamiadm[.]edu[.]bd/duu/index[.]php?QBOT[.]zip hxxps://ghazaligsc[.]com/votu/index[.]php?QBOT[.]zip hxxps://giacomelloarte[.]it/itoi/index[.]php?QBOT[.]zip hxxps://giacomellostore[.]it/sr/index[.]php?QBOT[.]zip hxxps://gitf2ch[.]com/tms/index[.]php?QBOT[.]zip hxxps://givinggradesapp[.]org/ue/index[.]php?QBOT[.]zip hxxps://glamiconsalon[.]com/oix/index[.]php?QBOT[.]zip hxxps://globalexpress-delivery[.]org/imml/index[.]php?QBOT[.]zip hxxps://globalink[.]ie/atr/index[.]php?QBOT[.]zip hxxps://globalotcmart[.]co/edmn/index[.]php?QBOT[.]zip hxxps://globalpratama[.]com/iexi/index[.]php?QBOT[.]zip hxxps://globared[.]com[.]mx/inca/index[.]php?QBOT[.]zip hxxps://glowmaxs[.]com/uqn/index[.]php?QBOT[.]zip hxxps://gmcchargerinstallation[.]com/dn/index[.]php?QBOT[.]zip hxxps://gmchomecharger[.]com/uopu/index[.]php?QBOT[.]zip hxxps://gmem[.]me/tbs/index[.]php?QBOT[.]zip hxxps://gndoverseas[.]com/aus/index[.]php?QBOT[.]zip hxxps://goexpress[.]it/ia/index[.]php?QBOT[.]zip hxxps://gomukeshwara[.]com/re/index[.]php?QBOT[.]zip hxxps://gooffybox-tv[.]com/ex/index[.]php?QBOT[.]zip hxxps://govisitflamingobeach[.]com/ta/index[.]php?QBOT[.]zip hxxps://graciebarrasobradinho[.]com[.]br/imn/index[.]php?QBOT[.]zip hxxps://grademeout[.]com/sts/index[.]php?QBOT[.]zip hxxps://grafiamx[.]com/xc/index[.]php?QBOT[.]zip hxxps://grandfolk[.]co/nui/index[.]php?QBOT[.]zip hxxps://greenhomedispensary[.]us/niu/index[.]php?QBOT[.]zip hxxps://green-net[.]ir/lcba/index[.]php?QBOT[.]zip hxxps://greenwaysagrofoods[.]com/qas/index[.]php?QBOT[.]zip hxxps://groundpowergenerator[.]com/usq/index[.]php?QBOT[.]zip hxxps://grouptraveltours[.]us/isus/index[.]php?QBOT[.]zip hxxps://growee[.]com[.]au/er/index[.]php?QBOT[.]zip hxxps://growon[.]app/tr/index[.]php?QBOT[.]zip hxxps://grupoemil[.]com[.]br/qisl/index[.]php?QBOT[.]zip hxxps://grupofacilitti[.]com[.]br/cs/index[.]php?QBOT[.]zip hxxps://grupogusope[.]com/lvsi/index[.]php?QBOT[.]zip hxxps://gttlogistics[.]com[.]br/erte/index[.]php?QBOT[.]zip hxxps://gu-dang[.]com/avo/index[.]php?QBOT[.]zip hxxps://guptabuilder[.]com/ebr/index[.]php?QBOT[.]zip hxxps://gvvalcy[.]com/oql/index[.]php?QBOT[.]zip hxxps://h2ocloud[.]in/vm/index[.]php?QBOT[.]zip hxxps://haasbroeksteyn[.]co[.]za/enlo/index[.]php?QBOT[.]zip hxxps://habbaz[.]eu/ea/index[.]php?QBOT[.]zip hxxps://habibinsurance[.]com/csm/index[.]php?QBOT[.]zip hxxps://hablakhon[.]com/emd/index[.]php?QBOT[.]zip hxxps://hackgeneratoronline[.]us/mi/index[.]php?QBOT[.]zip hxxps://hadron-energy[.]com/lait/index[.]php?QBOT[.]zip hxxps://hadronsolar[.]com/oooe/index[.]php?QBOT[.]zip hxxps://haleybeautyessentials[.]com/euq/index[.]php?QBOT[.]zip hxxps://hanabeauty[.]ir/rmel/index[.]php?QBOT[.]zip hxxps://handmood[.]com/merr/index[.]php?QBOT[.]zip hxxps://handyproperty[.]com[.]ng/tnp/index[.]php?QBOT[.]zip hxxps://hangmanmetal[.]com/re/index[.]php?QBOT[.]zip hxxps://hangtotchinhhang[.]com/tp/index[.]php?QBOT[.]zip hxxps://harden-egy[.]com/ause/index[.]php?QBOT[.]zip hxxps://harleydealz[.]com/iu/index[.]php?QBOT[.]zip hxxps://harrislightingpro[.]com/er/index[.]php?QBOT[.]zip hxxps://havardessays[.]com/li/index[.]php?QBOT[.]zip hxxps://havilahtowershotels[.]com/niev/index[.]php?QBOT[.]zip hxxps://hbhengzuo[.]com/eood/index[.]php?QBOT[.]zip hxxps://hdspakistan[.]com/iist/index[.]php?QBOT[.]zip hxxps://hdstream4k[.]com/ncue/index[.]php?QBOT[.]zip hxxps://headlightrestoration[.]in/el/index[.]php?QBOT[.]zip hxxps://headsetspro[.]com/uo/index[.]php?QBOT[.]zip hxxps://healthtopics[.]us/caom/index[.]php?QBOT[.]zip hxxps://helalfoodbv[.]nl/teut/index[.]php?QBOT[.]zip hxxps://hellodoctors[.]org[.]in/av/index[.]php?QBOT[.]zip hxxps://hellohealthgroup[.]in/aei/index[.]php?QBOT[.]zip hxxps://hellomark[.]co/ti/index[.]php?QBOT[.]zip hxxps://hempearth[.]net/eqit/index[.]php?QBOT[.]zip hxxps://herczegtours[.]hu/auat/index[.]php?QBOT[.]zip hxxps://hertzappliancerepair[.]com/qhl/index[.]php?QBOT[.]zip hxxps://hetznerconsole[.]ir/ede/index[.]php?QBOT[.]zip hxxps://hfcs[.]ac[.]in/sl/index[.]php?QBOT[.]zip hxxps://hhectorslandscaping[.]com/vte/index[.]php?QBOT[.]zip hxxps://hiddenhides[.]com/asen/index[.]php?QBOT[.]zip hxxps://hifiharesh[.]com/sl/index[.]php?QBOT[.]zip hxxps://highlightdownloader[.]com/seqi/index[.]php?QBOT[.]zip hxxps://highlink[.]com[.]mx/rou/index[.]php?QBOT[.]zip hxxps://hindvacations[.]com/li/index[.]php?QBOT[.]zip hxxps://hireskill[.]net/osos/index[.]php?QBOT[.]zip hxxps://historiasmais[.]com[.]br/rnl/index[.]php?QBOT[.]zip hxxps://hitandrunbattingcages[.]com/be/index[.]php?QBOT[.]zip hxxps://hitimeflix[.]com/neta/index[.]php?QBOT[.]zip hxxps://hkconsultingbt[.]com/ml/index[.]php?QBOT[.]zip hxxps://hoafon[.]com/euat/index[.]php?QBOT[.]zip hxxps://holidaytourswitharosh[.]com/itv/index[.]php?QBOT[.]zip hxxps://hope4laos[.]org/qisa/index[.]php?QBOT[.]zip hxxps://hostalaptofive[.]com/isoe/index[.]php?QBOT[.]zip hxxps://hotelkristoff[.]com/ciau/index[.]php?QBOT[.]zip hxxps://hotrevelation[.]com/mcum/index[.]php?QBOT[.]zip hxxps://hpinvestigations[.]com/iets/index[.]php?QBOT[.]zip hxxps://hrconnect[.]app/ut/index[.]php?QBOT[.]zip hxxps://hrmtreasury[.]uk/es/index[.]php?QBOT[.]zip hxxps://hsdec[.]la/dcoa/index[.]php?QBOT[.]zip hxxps://hseqinternational[.]com[.]co/ma/index[.]php?QBOT[.]zip hxxps://hsequniversal[.]com/mu/index[.]php?QBOT[.]zip hxxps://htdesigners[.]co[.]uk/pus/index[.]php?QBOT[.]zip hxxps://htmcollections[.]com/ima/index[.]php?QBOT[.]zip hxxps://hypershop[.]pw/eri/index[.]php?QBOT[.]zip hxxps://hyperthyroidisminfo[.]com/smi/index[.]php?QBOT[.]zip hxxps://i9print-pt[.]com/ia/index[.]php?QBOT[.]zip hxxps://ibadanmall[.]com/eon/index[.]php?QBOT[.]zip hxxps://ibnekaseer[.]net/opi/index[.]php?QBOT[.]zip hxxps://ibtikar-uae[.]com/qei/index[.]php?QBOT[.]zip hxxps://icheme[.]ir/eiut/index[.]php?QBOT[.]zip hxxps://ideeh[.]com/us/index[.]php?QBOT[.]zip hxxps://iesmagjuli[.]edu[.]pe/pml/index[.]php?QBOT[.]zip hxxps://igelsolesllc[.]com/eqtu/index[.]php?QBOT[.]zip hxxps://igencymx[.]com/rde/index[.]php?QBOT[.]zip hxxps://igihango[.]rw/ttr/index[.]php?QBOT[.]zip hxxps://ignouhelpproject[.]com/aadb/index[.]php?QBOT[.]zip hxxps://igpsport[.]co/muem/index[.]php?QBOT[.]zip hxxps://igpsport[.]ec/oldl/index[.]php?QBOT[.]zip hxxps://ijbscps[.]com/ni/index[.]php?QBOT[.]zip hxxps://ijebumall[.]com/iaid/index[.]php?QBOT[.]zip hxxps://ijebumall[.]com/mou/index[.]php?QBOT[.]zip hxxps://ikapamediaeastafrica[.]com/uoaa/index[.]php?QBOT[.]zip hxxps://illusso[.]com/sq/index[.]php?QBOT[.]zip hxxps://imergeadv[.]com/au/index[.]php?QBOT[.]zip hxxps://imltdbd[.]com/en/index[.]php?QBOT[.]zip hxxps://immolist[.]co/usd/index[.]php?QBOT[.]zip hxxps://imperiojeri[.]com[.]br/osr/index[.]php?QBOT[.]zip hxxps://imtiazlaw[.]com/ii/index[.]php?QBOT[.]zip hxxps://indassociates[.]com/nu/index[.]php?QBOT[.]zip hxxps://indiafirst[.]org/itbo/index[.]php?QBOT[.]zip hxxps://indiedesign[.]biz/qn/index[.]php?QBOT[.]zip hxxps://infisure[.]co[.]uk/iuti/index[.]php?QBOT[.]zip hxxps://influence-uae[.]com/mei/index[.]php?QBOT[.]zip hxxps://influxdeals[.]com/nie/index[.]php?QBOT[.]zip hxxps://inforising[.]com/do/index[.]php?QBOT[.]zip hxxps://inmobiliariaiknow[.]cl/ql/index[.]php?QBOT[.]zip hxxps://innovaexpress[.]co/ttea/index[.]php?QBOT[.]zip hxxps://inprint01[.]com[.]br/itm/index[.]php?QBOT[.]zip hxxps://inspiretreinamentos[.]com[.]br/pisl/index[.]php?QBOT[.]zip hxxps://installworxs[.]com/ruda/index[.]php?QBOT[.]zip hxxps://institutocabrera[.]com/ma/index[.]php?QBOT[.]zip hxxps://institutocarbono[.]com/tepc/index[.]php?QBOT[.]zip hxxps://intercancer[.]com/ie/index[.]php?QBOT[.]zip hxxps://inveslar[.]com/es/index[.]php?QBOT[.]zip hxxps://iol[.]co[.]tz/ir/index[.]php?QBOT[.]zip hxxps://iper[.]in/ug/index[.]php?QBOT[.]zip hxxps://iprintly[.]com/guua/index[.]php?QBOT[.]zip hxxps://irshadgold[.]ir/asq/index[.]php?QBOT[.]zip hxxps://isdecore[.]com/dest/index[.]php?QBOT[.]zip hxxps://israallayl[.]ae/ev/index[.]php?QBOT[.]zip hxxps://istegelsin[.]net[.]tr/aa/index[.]php?QBOT[.]zip hxxps://itrtaxadvisor[.]com/mou/index[.]php?QBOT[.]zip hxxps://itrtaxfilers[.]com/elt/index[.]php?QBOT[.]zip hxxps://ittworldwide[.]com/ott/index[.]php?QBOT[.]zip hxxps://iwyou[.]it/eiu/index[.]php?QBOT[.]zip hxxps://iykestones[.]com/aleb/index[.]php?QBOT[.]zip hxxps://izoman[.]ir/ilib/index[.]php?QBOT[.]zip hxxps://jackgmarch[.]com/at/index[.]php?QBOT[.]zip hxxps://jacmazdigital[.]com/ut/index[.]php?QBOT[.]zip hxxps://jagadeshgudaru[.]com/uins/index[.]php?QBOT[.]zip hxxps://jaidadnama[.]com/baae/index[.]php?QBOT[.]zip hxxps://jajatech[.]xyz/eutt/index[.]php?QBOT[.]zip hxxps://javirgo[.]com/sv/index[.]php?QBOT[.]zip hxxps://jayedmedicalservices[.]com/adu/index[.]php?QBOT[.]zip hxxps://jcsejournals[.]org/tpe/index[.]php?QBOT[.]zip hxxps://jimmatimes[.]com/tdi/index[.]php?QBOT[.]zip hxxps://jimmatimes[.]com/uuqi/index[.]php?QBOT[.]zip hxxps://joanmejiarealestate[.]com/nn/index[.]php?QBOT[.]zip hxxps://joelosteein[.]org/eeot/index[.]php?QBOT[.]zip hxxps://joelosteein[.]org/llls/index[.]php?QBOT[.]zip hxxps://johnsenbb[.]xyz/ictn/index[.]php?QBOT[.]zip hxxps://joktacademy[.]com/amsu/index[.]php?QBOT[.]zip hxxps://joliehairstudio[.]com/le/index[.]php?QBOT[.]zip hxxps://jotplusfashion[.]com/sd/index[.]php?QBOT[.]zip hxxps://joyrivero[.]com/lbl/index[.]php?QBOT[.]zip hxxps://jvincent[.]org/ti/index[.]php?QBOT[.]zip hxxps://jy-jewel[.]com[.]tw/un/index[.]php?QBOT[.]zip hxxps://kagomadb[.]com/ua/index[.]php?QBOT[.]zip hxxps://kaizendesign[.]net/tui/index[.]php?QBOT[.]zip hxxps://karmayogaashram[.]com/tsvt/index[.]php?QBOT[.]zip hxxps://katmodconsult[.]com/raie/index[.]php?QBOT[.]zip hxxps://ketaminedrugz[.]com/eea/index[.]php?QBOT[.]zip hxxps://k-gashi[.]de/cqi/index[.]php?QBOT[.]zip hxxps://khakheeinfotech[.]com/rpu/index[.]php?QBOT[.]zip hxxps://kiakiasub[.]ng/tsus/index[.]php?QBOT[.]zip hxxps://kianakonz[.]ir/ir/index[.]php?QBOT[.]zip hxxps://kidly[.]pk/od/index[.]php?QBOT[.]zip hxxps://kidsshopbd[.]com/noar/index[.]php?QBOT[.]zip hxxps://kim-store[.]com/edu/index[.]php?QBOT[.]zip hxxps://kingimage[.]in/sset/index[.]php?QBOT[.]zip hxxps://kisarecollege[.]ac[.]tz/tae/index[.]php?QBOT[.]zip hxxps://kitchenappliancesnearme[.]com/qn/index[.]php?QBOT[.]zip hxxps://kitchenequipmentdubai[.]com/lo/index[.]php?QBOT[.]zip hxxps://kmazd[.]com/irta/index[.]php?QBOT[.]zip hxxps://kmazdesigns[.]com/es/index[.]php?QBOT[.]zip hxxps://kmcpokhara[.]edu[.]np/am/index[.]php?QBOT[.]zip hxxps://koshka[.]ir/xtre/index[.]php?QBOT[.]zip hxxps://krcinfo[.]com/au/index[.]php?QBOT[.]zip hxxps://ksc-2003[.]com/aisi/index[.]php?QBOT[.]zip hxxps://ksstudio[.]in/se/index[.]php?QBOT[.]zip hxxps://laboratorioexpress[.]com[.]pa/isde/index[.]php?QBOT[.]zip hxxps://lacapitaldelinmueble[.]com/qdoq/index[.]php?QBOT[.]zip hxxps://lacur[.]com[.]mx/aeva/index[.]php?QBOT[.]zip hxxps://lankainoratravel[.]com/ae/index[.]php?QBOT[.]zip hxxps://latinbrands[.]cl/auau/index[.]php?QBOT[.]zip hxxps://lawact[.]us/ce/index[.]php?QBOT[.]zip hxxps://lealrep[.]com[.]br/lt/index[.]php?QBOT[.]zip hxxps://leanintohappy[.]com/ab/index[.]php?QBOT[.]zip hxxps://learningmu[.]com/si/index[.]php?QBOT[.]zip hxxps://legendarytechspec[.]com/qi/index[.]php?QBOT[.]zip hxxps://legendfuntourism[.]com/nlv/index[.]php?QBOT[.]zip hxxps://lehoods[.]com/umia/index[.]php?QBOT[.]zip hxxps://lengua25[.]com/aee/index[.]php?QBOT[.]zip hxxps://lens[.]co[.]tz/tpqd/index[.]php?QBOT[.]zip hxxps://lensmedia[.]ae/mre/index[.]php?QBOT[.]zip hxxps://leskor[.]ae/pqs/index[.]php?QBOT[.]zip hxxps://lezorby[.]com/roo/index[.]php?QBOT[.]zip hxxps://libertytvstlucia[.]com/ruqc/index[.]php?QBOT[.]zip hxxps://light4life[.]us/ic/index[.]php?QBOT[.]zip hxxps://lindsays[.]net[.]au/iquq/index[.]php?QBOT[.]zip hxxps://linnpoint[.]com/icis/index[.]php?QBOT[.]zip hxxps://lionhug[.]co[.]za/uia/index[.]php?QBOT[.]zip hxxps://locbag[.]com[.]br/imu/index[.]php?QBOT[.]zip hxxps://lojaatualmoveis[.]com[.]br/laet/index[.]php?QBOT[.]zip hxxps://lordglass[.]com/ues/index[.]php?QBOT[.]zip hxxps://loyaltymc[.]net/iee/index[.]php?QBOT[.]zip hxxps://lunchman[.]in/lt/index[.]php?QBOT[.]zip hxxps://lyriqchargerinstallation[.]com/oa/index[.]php?QBOT[.]zip hxxps://maayons[.]com/tu/index[.]php?QBOT[.]zip hxxps://machadolisboa[.]com[.]br/itsq/index[.]php?QBOT[.]zip hxxps://maczealots[.]com/si/index[.]php?QBOT[.]zip hxxps://madanjurnal[.]ir/ni/index[.]php?QBOT[.]zip hxxps://maddockmarketing[.]com/cam/index[.]php?QBOT[.]zip hxxps://magnifiedtest[.]com/adns/index[.]php?QBOT[.]zip hxxps://maidanupdate[.]com/me/index[.]php?QBOT[.]zip hxxps://mail[.]nfa[.]gg/ia/index[.]php?QBOT[.]zip hxxps://majaleh-banovan[.]ir/nll/index[.]php?QBOT[.]zip hxxps://maneck[.]co[.]tz/ipau/index[.]php?QBOT[.]zip hxxps://manojchatlani[.]com/umxm/index[.]php?QBOT[.]zip hxxps://maptrace[.]tk/och/index[.]php?QBOT[.]zip hxxps://margebox[.]com/lin/index[.]php?QBOT[.]zip hxxps://markkitllc[.]com/mta/index[.]php?QBOT[.]zip hxxps://marksonhospitalltd[.]org/usce/index[.]php?QBOT[.]zip hxxps://marmadeals[.]com/me/index[.]php?QBOT[.]zip hxxps://marshian[.]com[.]au/uu/index[.]php?QBOT[.]zip hxxps://martopet[.]com/rd/index[.]php?QBOT[.]zip hxxps://masfe[.]ar/rm/index[.]php?QBOT[.]zip hxxps://masoodtextile[.]com/rm/index[.]php?QBOT[.]zip hxxps://mategauss[.]com/ide/index[.]php?QBOT[.]zip hxxps://matiganesh[.]com/aio/index[.]php?QBOT[.]zip hxxps://mationlinebazar[.]com/aptt/index[.]php?QBOT[.]zip hxxps://matirghar[.]com/iu/index[.]php?QBOT[.]zip hxxps://maxon-trade[.]jp/rl/index[.]php?QBOT[.]zip hxxps://mcu3a[.]org[.]au/sle/index[.]php?QBOT[.]zip hxxps://medcislabs[.]com/oqui/index[.]php?QBOT[.]zip hxxps://medvilleglobalhealthcenter[.]com/be/index[.]php?QBOT[.]zip hxxps://meetingboard[.]in/ate/index[.]php?QBOT[.]zip hxxps://megafix[.]co[.]in/nr/index[.]php?QBOT[.]zip hxxps://megapesa[.]com/aemh/index[.]php?QBOT[.]zip hxxps://mehedihasanimu[.]com/ol/index[.]php?QBOT[.]zip hxxps://mens[.]ge/llia/index[.]php?QBOT[.]zip hxxps://meraom[.]lt/qisa/index[.]php?QBOT[.]zip hxxps://meskeninvest[.]com/drei/index[.]php?QBOT[.]zip hxxps://meskeninvest[.]com/lt/index[.]php?QBOT[.]zip hxxps://metatecknology[.]com/rdeu/index[.]php?QBOT[.]zip hxxps://metawareglobal[.]com/siu/index[.]php?QBOT[.]zip hxxps://mettarh[.]com[.]br/qa/index[.]php?QBOT[.]zip hxxps://mezantextile[.]com/iqs/index[.]php?QBOT[.]zip hxxps://mhapy[.]com/uaeu/index[.]php?QBOT[.]zip hxxps://michaelbuildings[.]com/urvr/index[.]php?QBOT[.]zip hxxps://mihanmajale[.]ir/oa/index[.]php?QBOT[.]zip hxxps://milladiptv[.]com/cud/index[.]php?QBOT[.]zip hxxps://minhascollection[.]co[.]uk/tdn/index[.]php?QBOT[.]zip hxxps://mittalentrp[.]com/oeu/index[.]php?QBOT[.]zip hxxps://mitul[.]pro/etr/index[.]php?QBOT[.]zip hxxps://mk20onetechnologies[.]com/ad/index[.]php?QBOT[.]zip hxxps://mk20onetechnologies[.]com/dv/index[.]php?QBOT[.]zip hxxps://mkomari[.]com/ed/index[.]php?QBOT[.]zip hxxps://mmendes[.]adv[.]br/esi/index[.]php?QBOT[.]zip hxxps://mobileandinternetspecialdeals[.]com/qti/index[.]php?QBOT[.]zip hxxps://mocour[.]com/aem/index[.]php?QBOT[.]zip hxxps://modernapk[.]com/ss/index[.]php?QBOT[.]zip hxxps://monsoonjournal[.]com/ntai/index[.]php?QBOT[.]zip hxxps://mortfund[.]com/oonm/index[.]php?QBOT[.]zip hxxps://mothernatureessences[.]com/en/index[.]php?QBOT[.]zip hxxps://mrcuadrado[.]cl/om/index[.]php?QBOT[.]zip hxxps://mrlocationscout[.]com/sem/index[.]php?QBOT[.]zip hxxps://mtffashion[.]com/pel/index[.]php?QBOT[.]zip hxxps://mtpleasantsolarcoop[.]org/snu/index[.]php?QBOT[.]zip hxxps://mudanzastransla[.]com/sq/index[.]php?QBOT[.]zip hxxps://multiskillangels[.]com/lrri/index[.]php?QBOT[.]zip hxxps://mybazarbd[.]net/snm/index[.]php?QBOT[.]zip hxxps://mybundledeals[.]com/li/index[.]php?QBOT[.]zip hxxps://my-gst[.]net/mq/index[.]php?QBOT[.]zip hxxps://mystore[.]com[.]lk/qi/index[.]php?QBOT[.]zip hxxps://mystudenthelp[.]com/ecu/index[.]php?QBOT[.]zip hxxps://naijasetmp3[.]com/mt/index[.]php?QBOT[.]zip hxxps://naijhiphop[.]com[.]ng/tspl/index[.]php?QBOT[.]zip hxxps://nashama-aseer[.]sa/di/index[.]php?QBOT[.]zip hxxps://nathanbdaniel[.]com/rto/index[.]php?QBOT[.]zip hxxps://neartownghost[.]com/frie/index[.]php?QBOT[.]zip hxxps://neslihaniletisim[.]com[.]tr/ld/index[.]php?QBOT[.]zip hxxps://nettonics[.]co[.]nz/mgi/index[.]php?QBOT[.]zip hxxps://news-channel[.]ir/laa/index[.]php?QBOT[.]zip hxxps://newsflashes[.]ir/tloe/index[.]php?QBOT[.]zip hxxps://ninetynine[.]com[.]bd/ut/index[.]php?QBOT[.]zip hxxps://ninjabeasts[.]com/al/index[.]php?QBOT[.]zip hxxps://nipun[.]xyz/sn/index[.]php?QBOT[.]zip hxxps://nisaa[.]pk/ssi/index[.]php?QBOT[.]zip hxxps://nobix[.]io/os/index[.]php?QBOT[.]zip hxxps://noorleather[.]com/gn/index[.]php?QBOT[.]zip hxxps://novorioveiculos[.]com[.]br/atl/index[.]php?QBOT[.]zip hxxps://nsljuliaca[.]edu[.]pe/tr/index[.]php?QBOT[.]zip hxxps://nushratyoga[.]com/itud/index[.]php?QBOT[.]zip hxxps://nventures[.]co[.]in/da/index[.]php?QBOT[.]zip hxxps://nzeducationfair[.]com/lu/index[.]php?QBOT[.]zip hxxps://oac[.]com[.]af/viut/index[.]php?QBOT[.]zip hxxps://obhmetales[.]com/dest/index[.]php?QBOT[.]zip hxxps://obutike[.]com/scn/index[.]php?QBOT[.]zip hxxps://obutike[.]com/te/index[.]php?QBOT[.]zip hxxps://oftalmologistaveterinariodf[.]com/ts/index[.]php?QBOT[.]zip hxxps://oilavocado[.]ir/lqc/index[.]php?QBOT[.]zip hxxps://okosszallasok[.]hu/tuc/index[.]php?QBOT[.]zip hxxps://onewayschool[.]ac[.]zw/ba/index[.]php?QBOT[.]zip hxxps://online-shopping[.]pk/iaos/index[.]php?QBOT[.]zip hxxps://onncode[.]com/eabs/index[.]php?QBOT[.]zip hxxps://ons-3i[.]com/ai/index[.]php?QBOT[.]zip hxxps://opediaitinstitute[.]com/mo/index[.]php?QBOT[.]zip hxxps://opensolutionitinstitute[.]com/rs/index[.]php?QBOT[.]zip hxxps://ophicinadanet[.]com[.]br/tpo/index[.]php?QBOT[.]zip hxxps://oplexxnourish[.]com/ai/index[.]php?QBOT[.]zip hxxps://oplexxsoft[.]com/mudo/index[.]php?QBOT[.]zip hxxps://oplexxvita[.]com/aar/index[.]php?QBOT[.]zip hxxps://optical[.]co[.]tz/tets/index[.]php?QBOT[.]zip hxxps://oraplux[.]com/uu/index[.]php?QBOT[.]zip hxxps://orosdi247[.]com/ste/index[.]php?QBOT[.]zip hxxps://orquideasdelotun[.]com[.]co/es/index[.]php?QBOT[.]zip hxxps://oshnisoftware[.]com/itin/index[.]php?QBOT[.]zip hxxps://owi-mc[.]pl/se/index[.]php?QBOT[.]zip hxxps://ozaifablog[.]tk/mtra/index[.]php?QBOT[.]zip hxxps://pablopropainting[.]com/eir/index[.]php?QBOT[.]zip hxxps://pakistanwatchcenter[.]com/mqt/index[.]php?QBOT[.]zip hxxps://pameco[.]ir/uuil/index[.]php?QBOT[.]zip hxxps://panditkhojo[.]com/sun/index[.]php?QBOT[.]zip hxxps://paranews[.]net/lmeo/index[.]php?QBOT[.]zip hxxps://paranoidlinux[.]org/tae/index[.]php?QBOT[.]zip hxxps://passassignments[.]com/in/index[.]php?QBOT[.]zip hxxps://passionplanetgoa[.]com/iuuq/index[.]php?QBOT[.]zip hxxps://pastamemes[.]com/gi/index[.]php?QBOT[.]zip hxxps://pastamemes[.]com/ipqa/index[.]php?QBOT[.]zip hxxps://perfectpencil[.]in/nboo/index[.]php?QBOT[.]zip hxxps://perthlandscaper[.]com[.]au/de/index[.]php?QBOT[.]zip hxxps://pesquera-sansimone[.]com/io/index[.]php?QBOT[.]zip hxxps://phindilegwala[.]com/et/index[.]php?QBOT[.]zip hxxps://phonetotalcity[.]com/nu/index[.]php?QBOT[.]zip hxxps://pickdora[.]com/ui/index[.]php?QBOT[.]zip hxxps://pksororbags[.]com/inno/index[.]php?QBOT[.]zip hxxps://planetofreptiles[.]com/reu/index[.]php?QBOT[.]zip hxxps://policymasters[.]in/mit/index[.]php?QBOT[.]zip hxxps://poliseli[.]com/st/index[.]php?QBOT[.]zip hxxps://poolcoiners[.]ga/oi/index[.]php?QBOT[.]zip hxxps://prajaktrahotel[.]com/iei/index[.]php?QBOT[.]zip hxxps://primeogi[.]com[.]br/cai/index[.]php?QBOT[.]zip hxxps://primeogi[.]com[.]br/rei/index[.]php?QBOT[.]zip hxxps://progymcloud[.]com/lom/index[.]php?QBOT[.]zip hxxps://prolinc[.]in/ut/index[.]php?QBOT[.]zip hxxps://propertyinsurat[.]com/uqqi/index[.]php?QBOT[.]zip hxxps://propertykey[.]us/ss/index[.]php?QBOT[.]zip hxxps://psycedelicshead[.]co/loe/index[.]php?QBOT[.]zip hxxps://psychicinlakelasvegas[.]com/ie/index[.]php?QBOT[.]zip hxxps://ptiswabi[.]com/utua/index[.]php?QBOT[.]zip hxxps://pubsub[.]in/ine/index[.]php?QBOT[.]zip hxxps://pulppoapps[.]com/inc/index[.]php?QBOT[.]zip hxxps://puvnaa[.]com/uq/index[.]php?QBOT[.]zip hxxps://qicuntech[.]com/ou/index[.]php?QBOT[.]zip hxxps://qualitytribe[.]net/ume/index[.]php?QBOT[.]zip hxxps://queirozborelly[.]com[.]br/apid/index[.]php?QBOT[.]zip hxxps://quizri[.]com/stn/index[.]php?QBOT[.]zip hxxps://r9intl[.]com/xan/index[.]php?QBOT[.]zip hxxps://raazams[.]com/nmea/index[.]php?QBOT[.]zip hxxps://racelearning[.]com/eira/index[.]php?QBOT[.]zip hxxps://rahbaritpark[.]com/em/index[.]php?QBOT[.]zip hxxps://raikasite[.]ir/ien/index[.]php?QBOT[.]zip hxxps://ramatwildlife[.]org/til/index[.]php?QBOT[.]zip hxxps://rapelathomas[.]com/euo/index[.]php?QBOT[.]zip hxxps://rapidway[.]ng/tl/index[.]php?QBOT[.]zip hxxps://ravezan[.]com/pus/index[.]php?QBOT[.]zip hxxps://raytech[.]com[.]pk/iod/index[.]php?QBOT[.]zip hxxps://reabmao[.]com/ro/index[.]php?QBOT[.]zip hxxps://redcarga[.]lat/tidu/index[.]php?QBOT[.]zip hxxps://redsinlimites[.]lat/mm/index[.]php?QBOT[.]zip hxxps://refrescos[.]cl/ui/index[.]php?QBOT[.]zip hxxps://regardakediri[.]com/tur/index[.]php?QBOT[.]zip hxxps://rehanul[.]xyz/nria/index[.]php?QBOT[.]zip hxxps://reinosobranding[.]com/iael/index[.]php?QBOT[.]zip hxxps://remodelbathroomhouston[.]com/auql/index[.]php?QBOT[.]zip hxxps://rentecengineering[.]com/mci/index[.]php?QBOT[.]zip hxxps://restaurantchipalato[.]com/leta/index[.]php?QBOT[.]zip hxxps://retentiongoal[.]com/ead/index[.]php?QBOT[.]zip hxxps://retireapplication[.]com/emtr/index[.]php?QBOT[.]zip hxxps://revistatecnobit[.]com/eua/index[.]php?QBOT[.]zip hxxps://rfazlerabbi[.]com/eu/index[.]php?QBOT[.]zip hxxps://rightgatehotel[.]com/mans/index[.]php?QBOT[.]zip hxxps://riometais[.]com/ihn/index[.]php?QBOT[.]zip hxxps://riopacks[.]com/di/index[.]php?QBOT[.]zip hxxps://rizesevimliosgb[.]com/diuc/index[.]php?QBOT[.]zip hxxps://rodobrasguindastes[.]com[.]br/be/index[.]php?QBOT[.]zip hxxps://routrayassociates[.]com/us/index[.]php?QBOT[.]zip hxxps://rozlife[.]ir/uset/index[.]php?QBOT[.]zip hxxps://rupango[.]com/ti/index[.]php?QBOT[.]zip hxxps://rxcarepath[.]com/dla/index[.]php?QBOT[.]zip hxxps://rytcorporation[.]com/tq/index[.]php?QBOT[.]zip hxxps://saafirco[.]com/sop/index[.]php?QBOT[.]zip hxxps://sakkho[.]eu/bir/index[.]php?QBOT[.]zip hxxps://sakshamhospitalpune[.]com/too/index[.]php?QBOT[.]zip hxxps://salesdoc[.]evdpl[.]com/dhl/torsion/index[.]php?QBOT[.]zip hxxps://saltlampswholesale[.]co[.]uk/itso/index[.]php?QBOT[.]zip hxxps://samansalili[.]ir/id/index[.]php?QBOT[.]zip hxxps://sammis[.]co[.]ke/esem/index[.]php?QBOT[.]zip hxxps://samseqit[.]com/eost/index[.]php?QBOT[.]zip hxxps://samubps[.]edu[.]rs/index[.]php?QBOT[.]zip hxxps://sandeepdubey[.]co[.]in/ame/index[.]php?QBOT[.]zip hxxps://sandrcoaches[.]com[.]au/ssum/index[.]php?QBOT[.]zip hxxps://sandstonebookkeeping[.]com[.]au/xe/index[.]php?QBOT[.]zip hxxps://sankalpsahodaya[.]com/tet/index[.]php?QBOT[.]zip hxxps://santaritasjc[.]org[.]br/sal/index[.]php?QBOT[.]zip hxxps://santospub[.]com[.]br/esp/index[.]php?QBOT[.]zip hxxps://saudesomnis[.]com[.]br/dtia/index[.]php?QBOT[.]zip hxxps://school-masters[.]com/aeq/index[.]php?QBOT[.]zip hxxps://scmapp[.]com/md/index[.]php?QBOT[.]zip hxxps://score90plus[.]com/ih/index[.]php?QBOT[.]zip hxxps://seacoastyachtcharters[.]com/rne/index[.]php?QBOT[.]zip hxxps://sefient[.]com/etdr/index[.]php?QBOT[.]zip hxxps://segkof[.]com/qoi/index[.]php?QBOT[.]zip hxxps://seheobd[.]org/usqt/index[.]php?QBOT[.]zip hxxps://semircon[.]net/resp/index[.]php?QBOT[.]zip hxxps://sepialogistic[.]com/om/index[.]php?QBOT[.]zip hxxps://serima[.]com[.]mx/ne/index[.]php?QBOT[.]zip hxxps://setbit[.]icu/pa/index[.]php?QBOT[.]zip hxxps://sewagex[.]com/att/index[.]php?QBOT[.]zip hxxps://sghsc[.]in/tqen/index[.]php?QBOT[.]zip hxxps://shalumusic[.]co[.]in/iopr/index[.]php?QBOT[.]zip hxxps://sheuncrestbespoke[.]com/eai/index[.]php?QBOT[.]zip hxxps://shop-bambinis[.]com/uai/index[.]php?QBOT[.]zip hxxps://shopexhealth[.]com/no/index[.]php?QBOT[.]zip hxxps://shopexinn[.]com/msqu/index[.]php?QBOT[.]zip hxxps://shopexpet[.]com/ud/index[.]php?QBOT[.]zip hxxps://shubhamjeweller[.]in/eee/index[.]php?QBOT[.]zip hxxps://signalfood[.]ir/vl/index[.]php?QBOT[.]zip hxxps://silverinfra[.]com/rci/index[.]php?QBOT[.]zip hxxps://sirenasworld[.]com/auis/index[.]php?QBOT[.]zip hxxps://sistemaciatlus[.]com[.]br/ge/index[.]php?QBOT[.]zip hxxps://skcllab[.]com/psus/index[.]php?QBOT[.]zip hxxps://skcllab[.]com/rs/index[.]php?QBOT[.]zip hxxps://skolconsult[.]com/auru/index[.]php?QBOT[.]zip hxxps://slgti[.]com[.]br/ucu/index[.]php?QBOT[.]zip hxxps://slimmingstudiouae[.]com/aa/index[.]php?QBOT[.]zip hxxps://smartcodegroup[.]com/oplr/index[.]php?QBOT[.]zip hxxps://smartdesign[.]rw/ate/index[.]php?QBOT[.]zip hxxps://smarttarget[.]qa/itsa/index[.]php?QBOT[.]zip hxxps://smarttechoverseas[.]com/us/index[.]php?QBOT[.]zip hxxps://snpstationery[.]com/ofa/index[.]php?QBOT[.]zip hxxps://soccerstreams24[.]com/eln/index[.]php?QBOT[.]zip hxxps://sochousindia[.]org/uaal/index[.]php?QBOT[.]zip hxxps://sofwandigital[.]com/fuor/index[.]php?QBOT[.]zip hxxps://sohamyogaschool[.]org/oti/index[.]php?QBOT[.]zip hxxps://soisexpress[.]com/enui/index[.]php?QBOT[.]zip hxxps://solista[.]in/oaic/index[.]php?QBOT[.]zip hxxps://solistonecommercial[.]com/mab/index[.]php?QBOT[.]zip hxxps://somaarquitetura[.]com[.]br/lst/index[.]php?QBOT[.]zip hxxps://sonusalesandservice[.]com/at/index[.]php?QBOT[.]zip hxxps://spacelogic[.]com[.]au/piba/index[.]php?QBOT[.]zip hxxps://spadelcastillo[.]com/urn/index[.]php?QBOT[.]zip hxxps://spectronqatar[.]com/iar/index[.]php?QBOT[.]zip hxxps://spitmaan[.]com/lo/index[.]php?QBOT[.]zip hxxps://sreebanbee-innovation[.]com/hev/index[.]php?QBOT[.]zip hxxps://ssshomedelivery[.]in/tmr/index[.]php?QBOT[.]zip hxxps://standupbiz[.]com/tmua/index[.]php?QBOT[.]zip hxxps://starcatalogs[.]com/tit/index[.]php?QBOT[.]zip hxxps://statcom[.]biz/msei/index[.]php?QBOT[.]zip hxxps://steinhaus[.]hu/lil/index[.]php?QBOT[.]zip hxxps://stevedestinations[.]com/li/index[.]php?QBOT[.]zip hxxps://sthumble[.]com/vlq/index[.]php?QBOT[.]zip hxxps://studiojovins[.]com/uus/index[.]php?QBOT[.]zip hxxps://stuplus[.]ir/um/index[.]php?QBOT[.]zip hxxps://subagroup[.]in/oe/index[.]php?QBOT[.]zip hxxps://sultania[.]com[.]pk/fii/index[.]php?QBOT[.]zip hxxps://sunilmerchandising[.]com/eil/index[.]php?QBOT[.]zip hxxps://sunshineschoolnagda[.]com/mngi/index[.]php?QBOT[.]zip hxxps://supplyessay[.]com/ol/index[.]php?QBOT[.]zip hxxps://suratrealestate[.]in/te/index[.]php?QBOT[.]zip hxxps://susuzlu[.]com/sfa/index[.]php?QBOT[.]zip hxxps://suthreshah[.]com/el/index[.]php?QBOT[.]zip hxxps://svpmk66[.]com/tnvi/index[.]php?QBOT[.]zip hxxps://swisst10[.]com/ee/index[.]php?QBOT[.]zip hxxps://switchconference[.]org/oile/index[.]php?QBOT[.]zip hxxps://syncone[.]net/stmi/index[.]php?QBOT[.]zip hxxps://synexglobalservices[.]com/ute/index[.]php?QBOT[.]zip hxxps://synops[.]ir/ols/index[.]php?QBOT[.]zip hxxps://syromalabarcairns[.]org/gnt/index[.]php?QBOT[.]zip hxxps://syromalabarcairns[.]org/pu/index[.]php?QBOT[.]zip hxxps://system8a[.]com/st/index[.]php?QBOT[.]zip hxxps://tadkaspot[.]ca/la/index[.]php?QBOT[.]zip hxxps://taglineinfotech[.]co[.]uk/du/index[.]php?QBOT[.]zip hxxps://tandooriboys[.]ca/etae/index[.]php?QBOT[.]zip hxxps://tarnokitenyek[.]hu/to/index[.]php?QBOT[.]zip hxxps://tarsonsint[.]com/utia/index[.]php?QBOT[.]zip hxxps://tasadores-peru[.]com/lc/index[.]php?QBOT[.]zip hxxps://tassilitours[.]com/suc/index[.]php?QBOT[.]zip hxxps://tawzeaf[.]com/anu/index[.]php?QBOT[.]zip hxxps://taxsenselimited[.]com/snt/index[.]php?QBOT[.]zip hxxps://taxsenseltd[.]com/nte/index[.]php?QBOT[.]zip hxxps://tckindia[.]com/bpt/index[.]php?QBOT[.]zip hxxps://tebohomafodi[.]co[.]za/att/index[.]php?QBOT[.]zip hxxps://techmarl[.]com/rtia/index[.]php?QBOT[.]zip hxxps://techtools[.]com[.]bd/it/index[.]php?QBOT[.]zip hxxps://templeobike[.]com/tdt/index[.]php?QBOT[.]zip hxxps://testyno[.]ir/uqi/index[.]php?QBOT[.]zip hxxps://thaniasantos[.]com[.]br/vev/index[.]php?QBOT[.]zip hxxps://theassistedlivingbusiness[.]com/ao/index[.]php?QBOT[.]zip hxxps://theberrycapital[.]com/mouq/index[.]php?QBOT[.]zip hxxps://thejapanesecar[.]com/bl/index[.]php?QBOT[.]zip hxxps://themeaningstore[.]com/sp/index[.]php?QBOT[.]zip hxxps://themomskitchen[.]co[.]in/tg/index[.]php?QBOT[.]zip hxxps://theresponsibleindian[.]org/euu/index[.]php?QBOT[.]zip hxxps://thestorefront[.]pk/nus/index[.]php?QBOT[.]zip hxxps://thrtransportes[.]com[.]mx/ea/index[.]php?QBOT[.]zip hxxps://tidyfish[.]co/mg/index[.]php?QBOT[.]zip hxxps://todaymusik[.]com/slbi/index[.]php?QBOT[.]zip hxxps://toplinescargo[.]com/teiv/index[.]php?QBOT[.]zip hxxps://topschoolgrades[.]com/loa/index[.]php?QBOT[.]zip hxxps://torr3sholdings[.]com/ui/index[.]php?QBOT[.]zip hxxps://totalmaderaperu[.]com/ee/index[.]php?QBOT[.]zip hxxps://tradecircuit[.]net/mcr/index[.]php?QBOT[.]zip hxxps://travelprograms[.]net/enb/index[.]php?QBOT[.]zip hxxps://trhilha[.]com[.]br/utav/index[.]php?QBOT[.]zip hxxps://triadevisual[.]com[.]br/ni/index[.]php?QBOT[.]zip hxxps://trishivchinese[.]com/tro/index[.]php?QBOT[.]zip hxxps://truckznbagzz[.]com/dl/index[.]php?QBOT[.]zip hxxps://trybecity[.]com/aeru/index[.]php?QBOT[.]zip hxxps://tufelllc[.]com/deos/index[.]php?QBOT[.]zip hxxps://tulipriveria[.]com/imx/index[.]php?QBOT[.]zip hxxps://turalexpress[.]com/qi/index[.]php?QBOT[.]zip hxxps://turbospinenergia[.]com/eoa/index[.]php?QBOT[.]zip hxxps://tvprodukcija[.]com/dd/index[.]php?QBOT[.]zip hxxps://twitchstreamoverlays[.]com/shp/index[.]php?QBOT[.]zip hxxps://uckglobal[.]com[.]ng/di/index[.]php?QBOT[.]zip hxxps://udnikah[.]com/emio/index[.]php?QBOT[.]zip hxxps://ukvicertification[.]com/am/index[.]php?QBOT[.]zip hxxps://ultimatetenderhelp[.]org/isi/index[.]php?QBOT[.]zip hxxps://ultravisionengg[.]com/aitd/index[.]php?QBOT[.]zip hxxps://ultravisionengg[.]com/tt/index[.]php?QBOT[.]zip hxxps://unbricksolution[.]com/rtvo/index[.]php?QBOT[.]zip hxxps://unicamente[.]cl/di/index[.]php?QBOT[.]zip hxxps://unicornland[.]in/eiu/index[.]php?QBOT[.]zip hxxps://unviajeinolvidable[.]com[.]ar/mel/index[.]php?QBOT[.]zip hxxps://uprl[.]edu[.]mx/tore/index[.]php?QBOT[.]zip hxxps://usposts[.]xyz/est/index[.]php?QBOT[.]zip hxxps://ust[.]edu[.]ye/aa/index[.]php?QBOT[.]zip hxxps://utc[.]edu[.]bd/eqdi/index[.]php?QBOT[.]zip hxxps://utnc[.]edu[.]mx/uvgm/index[.]php?QBOT[.]zip hxxps://uttorergodhuli[.]com/tie/index[.]php?QBOT[.]zip hxxps://vacancybulletin[.]com/ans/index[.]php?QBOT[.]zip hxxps://vacationrentalscostarica[.]com/ue/index[.]php?QBOT[.]zip hxxps://vapetehran1[.]com/ir/index[.]php?QBOT[.]zip hxxps://vca[.]com[.]ve/gm/index[.]php?QBOT[.]zip hxxps://vecseguranca[.]com[.]br/co/index[.]php?QBOT[.]zip hxxps://versatilo[.]org/ri/index[.]php?QBOT[.]zip hxxps://vibesnationent[.]co[.]uk/ids/index[.]php?QBOT[.]zip hxxps://villarrealmuebles[.]com[.]mx/dent/index[.]php?QBOT[.]zip hxxps://viramagazine[.]ir/iio/index[.]php?QBOT[.]zip hxxps://virrd[.]org/uite/index[.]php?QBOT[.]zip hxxps://visas-france[.]co[.]uk/ie/index[.]php?QBOT[.]zip hxxps://visitflamingo[.]com/ltst/index[.]php?QBOT[.]zip hxxps://visitkiberaexpeditions[.]com/mtt/index[.]php?QBOT[.]zip hxxps://volcaneuae[.]com/ui/index[.]php?QBOT[.]zip hxxps://voltlogisticsco[.]com/muu/index[.]php?QBOT[.]zip hxxps://volvohomecharging[.]com/ees/index[.]php?QBOT[.]zip hxxps://wakhrasoft[.]com/ui/index[.]php?QBOT[.]zip hxxps://wata2i9[.]com/po/index[.]php?QBOT[.]zip hxxps://weadfitness[.]com/at/index[.]php?QBOT[.]zip hxxps://web-atls[.]pro/ur/index[.]php?QBOT[.]zip hxxps://webminux[.]com/rieu/index[.]php?QBOT[.]zip hxxps://websitedesignzilla[.]com/eta/index[.]php?QBOT[.]zip hxxps://weddingevents[.]us/au/index[.]php?QBOT[.]zip hxxps://weimanervehicle[.]com/intm/index[.]php?QBOT[.]zip hxxps://west-food[.]com/agmn/index[.]php?QBOT[.]zip hxxps://whitefalconug[.]com/ei/index[.]php?QBOT[.]zip hxxps://windowsdriverupdate[.]com/am/index[.]php?QBOT[.]zip hxxps://winelections[.]xyz/moe/index[.]php?QBOT[.]zip hxxps://woofa[.]ir/nq/index[.]php?QBOT[.]zip hxxps://woundbac[.]com/uc/index[.]php?QBOT[.]zip hxxps://wrapnfloor[.]com/ci/index[.]php?QBOT[.]zip hxxps://writersscores[.]com/roue/index[.]php?QBOT[.]zip hxxps://www[.]dspn-ku[.]com/dspn/index[.]php?QBOT[.]zip hxxps://www[.]elroma[.]com[.]br/pt/index[.]php?QBOT[.]zip hxxps://www[.]paradisetechsoft[.]com/qme/index[.]php?QBOT[.]zip hxxps://wy-technology[.]com/neei/index[.]php?QBOT[.]zip hxxps://xgarage[.]om/ua/index[.]php?QBOT[.]zip hxxps://xpertnifty[.]in/aal/index[.]php?QBOT[.]zip hxxps://xunghe[.]com[.]vn/ia/index[.]php?QBOT[.]zip hxxps://yajasvafoundation[.]org/mst/index[.]php?QBOT[.]zip hxxps://yatind[.]com/dl/index[.]php?QBOT[.]zip hxxps://yayalensmedia[.]co[.]ke/dee/index[.]php?QBOT[.]zip hxxps://ydsaustralia[.]org/asui/index[.]php?QBOT[.]zip hxxps://yildirimsoftware[.]com/butu/index[.]php?QBOT[.]zip hxxps://yolandaguimares[.]com[.]br/es/index[.]php?QBOT[.]zip hxxps://zamarket[.]co[.]za/olm/index[.]php?QBOT[.]zip hxxps://zarethpremium[.]com/rd/index[.]php?QBOT[.]zip hxxps://zelvotrends[.]com/saed/index[.]php?QBOT[.]zip hxxps://zenitdent[.]com/ceum/index[.]php?QBOT[.]zip hxxps://zeppinracing[.]com/tu/index[.]php?QBOT[.]zip hxxps://zlk-garments[.]com/dto/index[.]php?QBOT[.]zip hxxps://zwindia[.]com/elt/index[.]php?QBOT[.]zip |
QakBot |
| URL | hxxp://45[.]153[.]240[.]247/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/freebl3[.]dll hxxp://45[.]153[.]240[.]247/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/mozglue[.]dll hxxp://45[.]153[.]240[.]247/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/msvcp140[.]dll hxxp://45[.]153[.]240[.]247/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/nss3[.]dll hxxp://45[.]153[.]240[.]247/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3[.]dll hxxp://45[.]153[.]240[.]247/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/sqlite3[.]dll hxxp://45[.]153[.]240[.]247/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/vcruntime140[.]dll |
RecordBreaker |
| URL | hxxp://hrfrance[.]net/lfjsdk3[.]exe hxxp://hrfrance[.]net/s2lub[.]exe |
RedLine Stealer |
| URL | hxxp://208[.]67[.]105[.]179/petercodyzx[.]exe | Snake Keylogger |
| URL | hxxp://www[.]nmghxsm[.]com/mp3studios_92[.]exe | Socelars |
