# Copyright (c) 2014-2018 Miroslav Stampar (@stamparm)
# See the file 'LICENSE' for copying permission

phish-education.apwg.org
csd.link
frog.wix.ru

# Reference: https://twitter.com/malwrhunterteam/status/1031899551542591490

avataarhornefashion.com
chinaspacplus.com

# Reference: https://twitter.com/malwrhunterteam/status/1031901896234033153

ytvertkn.tk

# Reference: https://twitter.com/ps66uk/status/1029836943419424769

merianmola.com

# Reference: https://twitter.com/ps66uk/status/1032284023559737346

premierstl.com/level3-network/

# Reference: https://twitter.com/ps66uk/status/1032311495827312640

centralmissouriwhitetails.com
gtu382gs.f8e2assh3.2018ssl.acritas-energy.com

# Reference: https://twitter.com/malwrhunterteam/status/1032543718623125504

receiptinvoice-format.com
mrofficepanel.receiptinvoice-format.com

# Reference: https://twitter.com/PhishingAi/status/1032693998702321664

http://145.249.105.19/

# Reference: https://twitter.com/PhishingAi/status/1031613997445832704

setupoffice365.us

# Reference: https://twitter.com/PhishingAi/status/1030556963619266560

suppappl.xyz

# Reference: https://twitter.com/PhishingAi/status/1030524788337516546

bestbuyca.store
orangtelecom.com

# Reference: https://twitter.com/PhishingAi/status/1030197896644157440

ucfgroups.com.hk

# Reference: https://twitter.com/PhishingAi/status/1030193487524769792

000keca.wcomhost.com/PB/

# Reference: https://twitter.com/illegalFawn/status/1032938239802466304

agentrate.com
agenziadelleentrate.com
agenziadelleentrate.info
agenziadelleentrate.it
agenziadelleentrate.net
agenziadelleentrate.org
agenziaent-online.info
agenziaentrate.com
agenzia-entrate.com
agenziaentrate.info
agenzia-entrate.it
agenziaentrate.org
agenzia-entrate.org
agenziaentrateriscossione.com
agenziaentrate-riscossione.com
agenziaentrateriscossione.it
agenziaentrateriscossione.org
area-agenzia-en.info
area-agenziaonline.info

# Reference: https://twitter.com/packet_Wire/status/1032651837231509505

officeurl.bid
storage.googleapis.com/onedrive-rooses-520654945/index.html

# Reference: https://twitter.com/PhishingAi/status/1033407600644288512

www.nigeria.gov.ng.gov-ng.com

# Reference: https://twitter.com/ps66uk/status/1033343170233466881

ghastuffuck.usa.cc

# Reference: https://twitter.com/ps66uk/status/1033752345761533953

matanajwa.tk

# Reference: https://twitter.com/n0p1shing/status/1033740650309722112

acc-review-fb-qsappvvred.mirabdolhay.com

# Reference: https://twitter.com/PhishingAi/status/1034526174695706625

scoita.com.smieidre.com

# Reference: https://twitter.com/PhishingAi/status/1034526174695706625
# Reference: https://paste.ee/p/xRcvU

aaslsew.com
aasowo.com
aaswid.com
aawlwo.com
adieude.com
aideid.com
aisdei.com
ajdeda.com
ajsssd.com
akdeuu.com
akiswji.com
akkdei.com
allwesw.com
alswoqo.com
alxuie.com
aodiefue.com
aswdaw.com
aswwls.com
awoswjd.com
awsdsi.com
doweid.com
dumps.team
dumps.top
ideihd.com
iwioaode.com
kaideii.com
ladjwiw.com
ladoae.com
laideudj.com
laideuis.com
laidwo.com
laiefur.com
laldeii.com
laodeuh.com
ldkfjeu.com
lkskdei.com
llaocribn.com
llaoeiw.com
llforis.com
llsodei.com
llsoeo.com
lsoiris.com
lsqwo.com
maisieu.com
mamdiei.com
mmsufe.com
newupdate.ac
pwoide.com
pwsdki.com
rrsfls.com
secuaasw.com
secursc.com
slfdoefje.com
sllsdieu.com
slsdeo.com
smieidre.com
ssalow.com
sshtos.com
sslaieo.com
sslfoe.com
sslwidwe.com
sslwodei.com
ssslade.com
systside.com
vesifer.com

# Reference: https://twitter.com/malwrhunterteam/status/1034440633291812866

smtp-verification.umbralaboza.com

# Reference: https://twitter.com/ps66uk/status/1034485857586229251

amaze.flu.cc

# Reference: https://twitter.com/nullcookies/status/1035230782799925253

somi.or.ke/ebet/

# Reference: https://www.symantec.com/blogs/threat-intelligence/wmic-download-malware

renivaxx01.gettrails.com

# Reference: https://twitter.com/nullcookies/status/1035310167817170947

de-agb-token23jei84dh8.com

# Reference: https://twitter.com/PhishingAi/status/1035509357633359873

att-network.us

# Reference: https://twitter.com/PhishingAi/status/1035521760089632768

sandagervej.xyz

# Reference: https://twitter.com/PhishingAi/status/1035527942837694464

dkcbvkwcadtgapn.usa.cc

# Reference: https://twitter.com/PhishingAi/status/1035523770851590144

lango.ga

# Reference: https://twitter.com/PhishingAi/status/1035527937909383169

modoocop.us

# Reference: https://twitter.com/PhishingAi/status/1035531571728539648

et-mobility.ref23175.constructionyvanbrazeau.com

# Reference: https://twitter.com/kobebryamV2/status/1035116216573149184

cycleformsf.in

# Reference: https://twitter.com/kobebryamV2/status/1035485219015536640
# Reference: https://twitter.com/illegalFawn/status/1035623955724427264

webstarterz.com

# Reference: https://twitter.com/ViriBack/status/1031142390864564225

cheriot-co.com 
dross-eng.com
www.deltafood-ae.com

# Reference: https://twitter.com/PhishingAi/status/1037158782415994880

3e.cl

# Reference: https://twitter.com/PhishingAi/status/1037798237103521793

soporteid.us

# Reference: https://twitter.com/ps66uk/status/1037837183271485440

counciltrade.usa.cc
kobagroup.co.id
wdloginhelmet.usa.cc

# Reference: https://twitter.com/yvesago/status/1038001929232691201

hbntrd-online.com

# Reference: https://twitter.com/nullcookies/status/1038197605300416512
# Reference: https://twitter.com/nullcookies/status/1038200958252187649

fudpros.com

# Reference: https://twitter.com/demonslay335/status/1038434153602195458

almizepalplyu01.ga

# Reference: https://pastebin.com/4pDsDuxn

basjamanwar.com

# Reference: https://twitter.com/nullcookies/status/1038526408346267648

rangmaulachad.com

# Reference: https://twitter.com/nullcookies/status/1038529374721593349

lokhabamsatra.com

# Reference: https://twitter.com/nullcookies/status/1038537816416956425

lamborkolapo.com

# Reference: https://twitter.com/nullcookies/status/1038548578539593728

karmaishramda.com

# Reference: https://twitter.com/nullcookies/status/1038573496492851202

acxese.esy.es
www.deade.esy.es

# Reference: https://twitter.com/smica83/status/1038909875143811077

strengthscombined.com

# Reference: https://twitter.com/PhishingAi/status/1037341353024221184

http://181.174.166.170
http://91.209.70.8
89d09dwwd-billing.com
billing-f0w98ew20.com
d9vfs9dfv-billing.com
login.netflix-admin.com
login.netflix-control.com
netflix-exp.com

# Reference: https://twitter.com/PhishingAi/status/1037167256138989569
# Reference: https://paste.ee/p/z6Xng

citycloudbd.com/pot/Share/share
ctsluganda.org
figwit.co.uk/SEIREN/Office/Share/share
gayatriea.com
joaquinpianguita.com
kazurimanager.com
mutuprop.com
neernikunj.com/rss/cgi_bin/Share/share
riveratorresyasociados.com
rotarykampalasseseislands.org/nig/sharpoint/share
sunbridge.co.ug/ADMIN/ch/share/
sunbridge.co.ug/hot/ch/share/
sunbridge.co.ug/sars/ch/share
sycjamsa.com
wisdomhomeloans.com.au
www.intechsecurity.com.au
www.intest.com.ve/flexmation_/Share/share
www.sumipancarabobo.com.ve
www.webdesigns.net.au/dustvalue/Share/share/index.php

# Reference: https://twitter.com/PhishingAi/status/1037176371435302912

my-outlook.top

# Reference: https://twitter.com/PhishingAi/status/1039578343476101120

http://195.201.243.232
health-gov-za.org

# Reference: https://twitter.com/dave_daves/status/1039473062842908672

http://46.21.147.250
idealista.it-immobile-15018431-affitto-case.i435490031.eu

# Reference: https://twitter.com/jamestreichle/status/1039311144282927104

http://200.192.246.82:8081/index.php?r=verify
huit.re/loginpage

# Reference: https://twitter.com/nullcookies/status/1039699799790911489

www.ce-beaute.fr/ckfinder/

# Reference: https://twitter.com/malwrhunterteam/status/1039828221599133696
# Reference: https://www.virustotal.com/#/ip-address/132.148.221.39

http://132.148.221.39
abbeyfagan.com/D/Drive-OneDrive
abbeyfagan.com/ll/OneDrive-Secured-Microsoft
abbeyfagan.com/Secured/Secured-OneDrive
accidentattorneyfernandina.com/Drive/OneDrive-Microsoft
accidentattorneymiddleburg.com/maintl/microsoft/OneDrive
accidentattorneyorangepark.com/Drive/Secured-MicrosoftOneDrive
accidentattorneystaugustine.com/Drive-1/lOneDrivel
accidentattorneystaugustine.com/Drive/Microsoft-OneDrive-Cloud
accidentlawyerfernandina.com
accidentlawyermiddleburg.com/Drive/OneDrive
accidentlawyerorangepark.com/Drive/OneDrive-Could
beachcondoinstaugustine.com/newsletter.php
bradfordcountyattorney.com
bradfordcountyattorney.com/Secured-Adobe-Storage
clayconferencecenter.com/Drive-1/lOneDrivel
claycountyaccidentlawyer.com
claycountyaccidentlawyer.com/Drive/OneDrive-Could
claycountyinjuryattorney.com
claycountyinjuryattorney.com/Drive/OneDrive-Could
daytonabeachautomobileaccidentlawyers.com/Drive/OneDrive-Could
daytonasocialsecuritylawyer.com
daytonasocialsecuritylawyer.com/Drive-1/lOneDrivel
daytonasocialsecuritylawyer.com/Drive/OneDrive
disneyworldaccidentlawyers.com
disneyworldaccidentlawyers.com/Drive/OneDrive-Could
domainhen.com
domainhen.com/admincp/Drive/Secured-MicrosoftOneDrive
fernandinacaraccidentlawyer.com
fernandinacaraccidentlawyer.com/Drive/Auth-Secured-OneDrive
fernandinadogbitelawyer.com
fernandinadogbitelawyer.com/Drive/OneDrive-Could
fernandinamalpracticelawyers.com
fernandinamalpracticelawyers.com/drive/onedrive-cloud
fernandinamedicalmalpracticelawyer.com/ll/OneDrive-Could
fernandinamotorcycleaccidentlawyer.com
fernandinamotorcycleaccidentlawyer.com/Drive/OneDrive-Could
firstchoicelawyer.com
firstchoicelawyer.com/Drive-1/lOneDrivel
firstchoicelawyer.com/Drive/OneDrive-Could
firstcoastcaraccidentlawyers.com
firstcoastcaraccidentlawyers.com/bootstrap/Secured/OneDrive
firstcoastcaraccidentlawyers.com/Drive-1/lOneDrivel
firstcoastcaraccidentlawyers.com/Drive/OneDrive-Could
floridacocounsels.com
floridacocounsels.com/Drive-1/lOneDrivel
floridacocounsels.com/Drive/OneDrive-Could
floridacocounsels.com/templates/Drive/OneDrive
floridajobaccidentlawyers.com/
floridajobaccidentlawyers.com/Drive-1/lOneDrivel
floridajobaccidentlawyers.com/Drive/OneDrive-Could
keystoneheightslawyer.com/anwer.php
mail.accidentattorneyorangepark.com/Drive/Secured-MicrosoftOneDrive
mail.domainhen.com/admincp/Drive/Secured-MicrosoftOneDrive
skyvalleyvacationrentals.com/wp-includes/microsoft/OneDrive

# Reference: https://twitter.com/packet_Wire/status/1039923717474803713

www.ericleftriverton.com/wp-admin/maint/whmp/absa-online/login.jsp

# Reference: https://twitter.com/packet_Wire/status/1039922852965875712

club-windows7.gb.net

# Reference: https://twitter.com/packet_Wire/status/1039922324072529926

boltmobilesolutions.com/flexed/oneddrive

# Reference: https://twitter.com/packet_Wire/status/1039877976542916608

wiratha.maranatha.edu/Festival/2018/

# Reference: https://twitter.com/nullcookies/status/1039694348617756672

skuool.co.education

# Reference: https://twitter.com/packet_Wire/status/1039625682605756418

rkimf.org

# Reference: https://twitter.com/packet_Wire/status/1039624736689586182

tucge.com/.well-known/404/ 

# Reference: https://twitter.com/nullcookies/status/1040032150576418817

com-security.co/instagram

# Reference: https://twitter.com/nullcookies/status/1040055342128746496
# Reference: https://pastebin.com/fm7qkZfw

abnamro-security.com
applsecu-ver.com
canada-gouv1.com
ee-verify.com
ingappupdate.com
inloggen-abnamro.com
inloggen-mijning.com
inloggen-rabobank.com
login-abnamro.com
login-ing.com
login-rabobank.com
mobile-alert-scotia.com
mobile-scotia-web.com
mobile-scotiabank.com
mobilescotiaonline.com
newupdubbel.com
rabobank-security.com
scotia-bank-alerts.com
scotiabank-jm.com
scotiabankalerts-trinidad.com
scotiamobilesite.com
secudubbelbeveilig.com
securelogin-abnamro.com
securelogin-ing.com
securelogin-rabobank.com
security-ing.comC
securitycentre-hsbc.com
ukhsbc-security-online.com

# Reference: https://twitter.com/PhishingAi/status/1040276712133681158

bireyselsube-garanti-kampanyalari.xyz

# Reference: https://twitter.com/PhishingAi/status/1040285581199245313

helps.support
aedksj6.beget.tech
raedksj6.beget.tech

# Reference: https://twitter.com/dave_daves/status/1040141068682100736

accessonline-account.com

# Reference: https://twitter.com/nullcookies/status/1041327939122618369

naimal.tk

# Reference: https://twitter.com/nullcookies/status/1041320863734407168

driss.cf
driss.tk

# Reference: https://twitter.com/ekiledjian/status/1041662799783645184

sh.qihongzhanshi.com/twitter_

# Reference: https://twitter.com/ps66uk/status/1041693378826719233

pdf.investintech.com
go2l.ink

# Reference: https://twitter.com/smica83/status/1041580806228140032

192.163.212.241/auth/direct/otp/index.php

# Reference: https://twitter.com/Techhelplistcom/status/1041550957916680195

alovers.usa.cc
amazed.usa.cc
drivings.nut.cc
eedes.usa.cc
gels.flu.cc
roses.nut.cc
shares.nut.cc
sweets.nut.cc
swimmings.flu.cc

# Reference: https://twitter.com/smica83/status/1041546237579812864

takshidfam.ir/libraries/cms/view/uas/login

# Reference: https://twitter.com/ps66uk/status/1041669591884328962

bsacompany.ir/vc/

# Reference: https://twitter.com/smica83/status/1041658334099779584

crescenthomeorphan.org/gallery/7/postmastereng/postmaster/a/


# Reference: https://twitter.com/PhishingAi/status/1042109776224583680

216.252.225.35.bc.googleusercontent.com
halkbank-paraf-kazan.com
kuveyturk-mobilsube-giris.com
mobil-tr-halkbank.com
tr-mobil-halkduyuru.com
www-garantibonus.com
www-garanti.com
www-garantiduyuru.com
www-garanti-isube.com
www-garantiisube.com
www-garantimobil.com
www-garantibankasi.com
www-isube-garanti.com
www-vakifbank.com
www-vakfbank.com
ziraatcepten.com

# Reference: https://twitter.com/packet_Wire/status/1041794334163693569

antoniovalladolid.mx

# Reference: https://twitter.com/nullcookies/status/1042198229172068354

nsp-moscow.ru

# Reference: https://twitter.com/PhishingAi/status/1042166041973993472

biurwe.edu.digital
bncrir.edu.digital
bvxcie.edu.digital
bvxcifr.edu.digital
bvxciour.edu.digital
bvxciuoer.edu.digital
bvxcouwe.edu.digital
bvxcru.edu.digital
bvxctuoci.edu.digital
bvxcuir.edu.digital
bvxcuire.edu.digital
bvxcweruiqc.edu.digital
bxcviour.edu.digital
bxcvroip.edu.digital
bxcvuir.edu.digital
bxcvuiweoq.edu.digital
bxuir.edu.digital
bziou.edu.digital
cvzowei.edu.digital
cxioubvc.edu.digital
czioe.edu.digital
ewqyucox.edu.digital
gfdi4u.edu.digital
nbcv9rue.edu.digital
ncvuioerw.edu.digital
qwscvxc.edu.digital
uiogf.edu.digital
vcxio.edu.digital
vcxziweuo.edu.digital
vcxzuior.edu.digital
vczxuiwe.edu.digital
vxciour.edu.digital
vxcoipe.edu.digital
vxcopire.edu.digital
vxcuioer.edu.digital
vzxcieo.edu.digital
xcvieop.edu.digital
xcvouire.edu.digital
xcvweuior.edu.digital
zcxuioer.edu.digital
zxcioeuw.edu.digital

# Reference: https://twitter.com/PhishingAi/status/1042156425273782273

bcvpro.yao.cl
cvope.us.to
cvor.yao.cl
cvxiww.ro.lt
vcioe.us.to

# Reference: https://twitter.com/packet_Wire/status/1042521358650011648

http://67.227.199.20/~kemamc/wzve.php
add-me-sc.com

# Reference: https://twitter.com/nullcookies/status/1042537633958658048

dope.org/9x/9x/

# Reference: https://citizenlab.ca/2018/01/spying-on-a-budget-inside-a-phishing-operation-with-targets-in-the-tibetan-community/

account-gooogle.info
accounts-google.cc
accounts-mailbox.space
dalailama.space
drive-accounts-goog1e.cf
drive-accounts-google.ga
drive-google.cf
drive-google.me
drive-google.ml
drive-mail.info
drive-mail-google.cf
email-netvigator.info
epochtimes.space
gmail-profile.com
google-secure.gq
google-sign.tk
httpsaccounts-google.cf
httpsdrive-google.net
httpsdrive-google.space
login-live.us
mail-attachment-usercontent.space
mail-defend.space
mail-defense.space
mail-defense.tk
mail-epochtimes.space
mail-extend.space
mail-gooog1e.info
mail-modular.space
myaccounts-google.online
mydrive-google.asia
mydrive-google.online
postmailsecret.com
webmail-dalailama.com
webmail-dalailama.space
wengiguowengui.space
yahoo-protect.com

# Reference: https://twitter.com/PhishingAi/status/1042768334780071936

dconline.org/quotation/eim/login.php
dconline.org/wp-content/upgrade/office_voy/

# Reference: https://twitter.com/PhishingAi/status/1042427878426599424

download.myaccount-cloud.com

# Reference: https://twitter.com/PhishingAi/status/1042269752402616320

apple.com-clean-macbook.live

# Reference: https://twitter.com/g4g5j41n/status/1043336457409032192

kylelierman.com

# Reference: https://twitter.com/kobebryamV2/status/1043262337900322818

supportamazonserviceauntoreply.com

# Reference: https://citizenlab.ca/2017/02/nilephish-report/

account-google.serveftp.com
activate-google.servehttp.com
aramex-shipping.servehttp.com
device-activation.servehttp.com
docs-mails.servehttp.com
dropboxnotification.servehttp.com
dropbox-service.serveftp.com
dropbox-sign.servehttp.com
dropboxsupport.servehttp.com
dropbox-verfy.servehttp.com
fedex-mail.servehttp.com
fedex-notification.servehttp.com
fedex-shipping.servehttp.com
fedex-sign.servehttp.com
fedex-s.servehttp.com
googledriver-sign.ddns.net
googledrive-sign.servehttp.com
google-maps.servehttp.com
googlemaps.servehttp.com
googlesecure-serv.servehttp.com
googlesignin.servehttp.com
googleverify-signin.servehttp.com
mailgooglesign.servehttp.com
moi-gov.serveftp.com
myaccount.servehttp.com
notification-team.servehttp.com
quota-notification.servehttp.com
restricted-videos.servehttp.com
secure-alert.servehttp.com
secure-team.servehttp.com
security-myaccount.servehttp.com
securityteam-notify.servehttp.com
verification-acc.servehttp.com
verification-team.servehttp.com
watchyoutube.servehttp.com

# Reference: https://twitter.com/MaelSecurity/status/1043025067452461056

dhl24.online
dpdprzesylka.online

# Reference: https://twitter.com/packet_Wire/status/1043246653233356801

afatolk.no

# Reference: https://twitter.com/kobebryamV2/status/1043275262060834818
# Reference: https://ghostbin.com/paste/n2osb

100000munkahely.hu/wp-admin/images/offile/file/invoice/biggyoff
abllandscapes.com.au/wp-admin/drive/contactform.php
accompagnergresp.org/wp-admin/network/file
agrokac.com.br/wp-admin/plug-in/index.php
alfisilver.com/wp-admin/alibaba/login.alibaba.com.php
allensbacherzentrum.com/wp-admin/maint/KeyBank/h390fiwjfiuwef/auth
allstripped.com.au/wp-admin/linkedin.com/auth/success.html
altivexfoundry.com/wp-admin/googlesharedoc/googledrivenew/index.html
amadeus.inf.br/wp-admin/user/files/
analyticalinstrumentsmanufacturer.com/wp-admin/bvx/ffb
ascenten.net/wp-admin/relay-2088/help
avalomix.com/wp-admin/includes/theme/error.php
bicycleshop.biz/wp-admin/css/.excel/index.php
bilirmermer.com/wp-admin/includes/viewdoc
biodegradablerus.com/wp-admin/user/confirmation-account-id309141/apple/Home/
bioresonantiehaarlem.eu/wp-admin/rsr
blackwarellc.com/wp-admin/includes/Databox/GD
blackwarellc.com/wp-admin/includes/imgdata/GD
busywithwork.com/wp-admin/js/nice/AOL/aol.htm
busywithwork.com/wp-admin/js/wp-content/verify/live.com/index.html
cafeenattente.org/wp-admin/menhat
canusatools.com/wp-admin/privacy.html
centraldrugs.net/wp-admin/js/mo/login.php
chottosf.com/wp-admin/here/Re-ValidateYourMailbox.htm
chottosf.com/wp-admin/here/Re-ValidateYourMailbox.htm
ciftlikhekimi.com/wp-admin/js/widgets/one
ciftlikhekimi.com/wp-admin/js/widgets/one/
claassistencia.com.br/wp-admin/includes/drnewh
clevercrowcreative.com/wp-admin/network/docs
cmdlin3.com/wp-admin/web
couleelife.church/wp-admin/js/index.php
crearcomunicaciones.net/wp-admin/mailbox
creditmoment.com/wp-admin/css/CONFIRMATION/onedrive_file/xb
desthein.com/wp-admin/css/office.php
dezvoltarecariera.ro/wp-admin/css/colors/blue/aol
dezvoltarecariera.ro/wp-admin/css/colors/blue/aol/
diamondmc.com/wp-admin/network/files
divyaravi.com/wp-admin/maint/index.html
donnarogersimagery.com/wp-admin/includes/login.alibaba.com
dota2liga.com/wp-admin/images/Alibaba.com/Login.htm
dota2liga.com/wp-admin/images/Alibaba.com/Login.htm
duboseartanddesign.com/wp-admin/filefolder/file
duboseartanddesign.com/wp-admin/filefolder/file
duplor.midiata.com.br/wp-admin/trade/update/upgrade/verify/emails/admin/Engish/index.php
eatplayhate.com/wp-admin/js/webmail
emilynewfieldconsulting.com/wp-admin/js/ofd/yesexcl/newexcel.php
envirocheckaustralia.com.au/wp-admin/includes/index.php
eostechnologies.net/wp-admin/network/boxMrenewal.php
erinnhargisphotography.com/wp-admin/box/home
executoralba.ro/wp-admin/maint/ito/
fashionphotographycourse.com/wp-admin/css/wp-admin.php
fontanadesign.com.au/wp-admin/users.php
forryscountrystore.com/wp-admin/network/att.yahoo.com/login.htm
fortcochininn.com/wp-admin/
fortifiedelectrics.com.au/wp-admin/images/online/promo/new/service
globalleadershipmentoringuniversity.com/wp-admin/js/account/update-your-paypal/info/billing.php
gohealthy.com.co/wp-admin/css/Gsuites123/data/postmessageRelay.html
gohealthy.com.co/wp-admin/css/Gsuites123/google/verification.htm
gorodmasterov.su/wp-admin/network/signin/customer_center/customer-IDPP00C241/myaccount/signin/
granhotelcusimachupicchu.com/wp-admin/css/colors/sunrise
handipadel.com/wp-admin/
hearingcarepk.com/wp-admin/pdf/securedoc.html
heerlijkheidwolphaartsdijk.nl/wp-admin/t
honorshaven.com/wp-admin/accessvalidate/
hotelboinabrasa.com.br/wp-admin/ds00.htm
ifsandbox.com/wp-admin/network/cfo/index.php
inscribesignage.com/wp-admin/js
integracionvisual.cl/wp-admin/includes/.menxnx/schwab.com.rmn4OSZhbXA.7c2VsP.TMzNTU/home/login.php
interfaxprensa.com/wp-admin/
isuk.org.tr/wp-admin/includes/gd.htm
jeffreybcam.net/wp-admin/new/administrator_restore.htm
jillmsommers.com/wp-admin/maint/GD1-1/GD/
katecaudillo.com/wp-admin/network/logon.htm
katecaudillo.com/wp-admin/user/logon.htm
kate.illstudios.com/wp-admin/network/window/windows
kikilovell.com/wp-admin/css/colors/update/hehe
kostow.pl/wp-admin/img/
laradiocultural.co/wp-admin/cll/DropBoxPhoto/index.php
laurakate.net/wp-admin/js/pdf2/
laurellakehouse.com/wp-admin/mwells/welcome/wellsfargo/account/lindex.html
lautshark.id/wp-admin/network/page
lgfars.ir/wp-admin/user/nD
lightsoverlouisville.com/wp-admin/user/tee/res/log.html
llbfarm.com/wp-admin/user/verify/
localbizmag.com/wp-admin/js/dpbx/index.php
lppm.stikesmegarezky.ac.id/wp-admin/includes/class-wp-manager.php
mecauto.org/wp-admin/css/colors/light/_loge.php
mobilemobileorlando.com/wp-admin/alibaba/login.alibaba.com.php
mrecontabilidade.pt/wp-admin/maint/b5/
myinvisiblecity.com/wp-admin/sites/
nohairdont.care/wp-admin/includes/upload/view/index.html
nourishedhealthcoaching.com/wp-admin/includes/me/1/
nourishedhealthcoaching.com/wp-admin/includes/me/1/LoginVerification.php
oacompany.co/wp-admin/includes/login/websc.php
pacificbands.org/wp-admin/js/Microsoft/passwordError.php
panaderialourdespr.com/wp-admin/network/css/in/Bank/of%20/America/verify/login/New/
pandavillage.org/wp-admin/googledoc/
panliang.net/wp-admin/data/index.htm
paragonmeetings.com/wp-admin/network/adobe/Ado/index.php
pareshindustries.in/wp-admin/gtex/
paulallenconnection.com/wp-admin/maint/moueax/
persiaad.com/wp-admin/maint/bofamin/bankofamerica.sign/secured/login.php
petrilloandpetrillo.com/wp-admin/includes/new/
pfssonline.com/wp-admin/doce/doce/a/
phototalk.biz/wp-admin/network/doc/Docs_File/real1.php
pianomoscow.ru.hator.neolocation.net/wp-admin/linkedup/ayo1/ayo1/ayo1
pinoycook.info/wp-admin/network/USAA-2017/Contact.htm
plasticmonkey.com/wp-admin/network/verify.php
powerwashtrailerdepot.com/wp-admin/js/Apl/
promptengineeringworks.com/wp-admin/js/ct/countdown/index.php
psykologidialog.dk/wp-admin/up.php
ptik.unnes.ac.id/wp-admin/admin
pwfurnishings.com/wp-admin/alibaba/alibaba
qualchemaz.com/wp-admin/es/index.php
reikibigbear.com/wp-admin/securedmessage
retailkidetail.com/wp-admin/includes/adobe1/Validation/login.php
retromus.ru/wp-admin/js/nest/others
robodyx.com/wp-admin/css/06bf/WelcomeScreen.html
roperoinfinito.com/wp-admin/images/adb/
rossbrownleewalker.com/wp-admin/index.php
sadaehalmin.com/wp-admin/maint/menu./pdf_new
sahabatsuksesbersama.com/wp-admin/includes/access
sahabatsuksesbersama.com/wp-admin/includes/dudu/alibaba/Login.htm
samedaydeliverytexas.com/wp-admin/includes/adobe.html
sandiegovendingmachine.com/wp-admin/cs/domain/Login.php
sanjaygidwani.com/wp-admin/doc-view/docuo/google/
saptutorial.net/wp-admin/user/2018/dropbox
sgdecor.vn/wp-admin/user/bod/cod/114/chines/chines
shannonebeling.com/wp-admin/wellsfargo/
skyfix.us/wp-admin/maint/DoCuSignN/DoCuSigN/index.php
slatercorp.co.za/wp-admin/user/oops.html
smallgrouptourstoparis.com/wp-admin/office/office/index.htm
smknsatumataram.sch.id/wp-admin/includes/Ijoba/araba/igba/adobe/Home/
snjtradelink.com/wp-admin/file
snselectappraisalmanagement.com/wp-admin/css/Dropbox.UA/index.php
southernstreamlive.com/wp-admin/site/payment-slip/advice/french/view/index.php
stepuptechsite.com/wp-admin/maint/online/
teamfactory.co.za/wp-admin/maint/dhl2/dhl.htm
technofridge.com/wp-admin/network/pdf-doc1/PDF/index.php
thebikestig.com.au/wp-admin/includes/paypal/customer_center/
thelulusband.com/wp-admin/css/colors/coffee/dropbox/
timetoeatclean.com/wp-admin/user/doc/doc/
tokopribumi.com/wp-admin/includes/csa/china/index.php
traynedbandes.com/wp-admin/killer/verification.php
undhr.pl/wp-admin/user/match.htm
united-automobile.com/wp-admin/user/alibaba/
universitylanguageschool.com/wp-admin/images/index.php
unusconsultoria.com.br/wp-admin/js/
vebiromania.ro/wp-admin/network/
victorycuts.com/wp-admin/nD/index.php
vocazioni.iveroma.org/wp-admin/Faxserver7056783/Microsoftauto2018/Microsoft/
xxxjack.com/wp-admin/includes/pd/adobecloud/
yasmins.co.il/wp-admin/js/FELA.HTML
yeniik.com.tr/wp-admin/includes/login.alibaba.com
yeniik.com.tr/wp-admin/js/login.alibaba.com
yesilkahvecayi.com/wp-admin/js/a/login/
zzkadra-kwbbelchatow.com.pl/wp-admin/images/591994ccc7991bc820a8/YAHOO/cameo.php


# Reference: https://citizenlab.ca/2015/08/iran_two_factor_phishing/

account-user.com
bluehostsupport.com
logins-verify.com
login-users.com
qooqlemail.com
service-logins.com
services-mails.com
signin-users.com
signin-verify.com
signs-service.com

# Reference: https://twitter.com/g4g5j41n/status/1043704689311735809

c-dept.com
e-refunds.interac-server1.com

# Reference: https://twitter.com/urlscanio/status/1043933192930119680

account-verifysupport.com

# Reference: https://twitter.com/MaelSecurity/status/1044182251444023296

existing-members-gateway-login.com

# Reference: https://twitter.com/MaelSecurity/status/1044464779094618112

microsoft-security-07vb.tk

# Reference: https://twitter.com/MaelSecurity/status/1044225554461982720

secureelogin.pl

# Referece: https://twitter.com/nullcookies/status/1037871108735811584

terinazroonkka.com

# Reference: https://twitter.com/nullcookies/status/1037867879792869377

wacipurkaylo.com

# Reference: https://twitter.com/PhishingAi/status/1044935252748259328

lestarisilam.id/fox/

# Reference: https://twitter.com/nullcookies/status/1045132776129929218

uiri.go.ug

# Reference: https://twitter.com/MaelSecurity/status/1045337705759035392

verification-of-credentials-online-amricanexpress.com-verify.nextiswithstandusa.com

# Reference: https://twitter.com/PhishingAi/status/1029445322433384448

docomo-services.com

# Reference: https://twitter.com/smica83/status/1045587050932695040

telenor.hu.web.control2018.config.jutebagsindia.com

# Reference: https://twitter.com/malwrhunterteam/status/1044493557023854592

bcft.aero/ID/PayPal/Help/

# Reference: https://twitter.com/smica83/status/1045565335540310017

ezran.my/videopage/wp-includes/index.php

# Reference: https://twitter.com/smica83/status/1045169212363354113

hcflp.co/etc/2/login.php

# Reference: https://twitter.com/nullcookies/status/1045829419112312832

eh58.co/main.php

# Reference: https://twitter.com/illegalFawn/status/1046706380005101569

myenipaga.com/nueve_rimbo/

# Reference: https://twitter.com/illegalFawn/status/1046706380005101569

myeni.com.gridhosted.co.uk/-/
simanio.com/rimbo_paga/

# Reference: https://twitter.com/illegalFawn/status/1046737345570099200

76ds.ru/site/
mat-nabytkova-dvirka.cz/site/tims08

# Reference: https://twitter.com/packet_Wire/status/1046912118761623552

maulanaazadcollege.in/templates/web.htm

# Reference: https://twitter.com/smica83/status/1046998676890107905

ir-seminar.ir/lc

# Reference: https://twitter.com/packet_Wire/status/1046911194550951936

feoland.ru/wp-admin/maint/nexus/index.php

# Reference: https://twitter.com/smica83/status/1047154397078323201

ucimt.edu.bd/wp-content/update-required/

# Reference: https://twitter.com/packet_Wire/status/1046911597736841220

www.saycheese.it/.tmb/.xx.htm

# Reference: https://twitter.com/YouMayBeHacked/status/1046785910006853632 

tr22n11a.aset.psu.edu

# Reference: https://twitter.com/illegalFawn/status/1047123095272734726

validazionepostitaliane.info/login.html

# Reference: https://twitter.com/packet_Wire/status/1047541039874170882

jowpainliniment.com/wordpress/wp-content/uploads/2018/10/web.htm

# Reference: https://twitter.com/WifiRumHam/status/1047509450427445249

worldattachments.net/images/

# Reference: https://twitter.com/ANeilan/status/1047422405109579778

icloud.com.reportapple.us

# Reference: https://twitter.com/ns_alarms/status/1047441164868014080

isbankasifirsatlar.com

# Reference: https://twitter.com/urlscanio/status/1047486923223252992

login.blockchaiń.com

# Reference: https://twitter.com/ns_alarms/status/1047439955277086721

vakifbankasi-hediyegb.com

# Reference: https://twitter.com/nullcookies/status/1047636599322935296

hostcofeewebsitesign.000webhostapp.com

# Reference: https://twitter.com/nullcookies/status/1047643130135306242

outlookwebss.myfreesites.net

# Reference: https://twitter.com/bad_packets/status/1047608500451336193

eastpennmanufacturing.work

# Reference: https://twitter.com/nullcookies/status/1047655353326944256

bp-con.com/bbuacontinentalperuenlinea

# Reference: https://twitter.com/Dashowl/status/1047564713213812737

seller-olux-service-online.com

# Reference: https://twitter.com/Dashowl/status/1047578793026760706

topcloudconsultingserviceproviders.com
topcloudmigrationserviceproviders.com
topgooglecloudconsultants.com

# Reference: https://twitter.com/Dashowl/status/1047566616312139779

ydokyellow-online.com/login/

# Reference: https://twitter.com/Dashowl/status/1047560896225140736

spotifyduee.com/login
spotiffyy.com

# Reference: https://twitter.com/Dashowl/status/1047148575996678144

santandran.com/login

# Reference: https://twitter.com/Dashowl/status/1045296970129178626

adkefcs-online.com/OneDrive/
adkefcs-online.com/pdf/

# Reference: https://twitter.com/Dashowl/status/1045296232988659714

8nancystre.gq/.b/b/
conf1rm11id-online.com/.b/

# Reference: https://twitter.com/olihough86/status/1047841131105587206

aldiaov2018.000webhostapp.com

# Reference: https://twitter.com/neonprimetime/status/1047306547532054529

trude-riedel.de

# Reference: https://twitter.com/securitydoggo/status/1045377685629931522

czdesign.sharepoint.com

# Reference: https://twitter.com/securitydoggo/status/1045374758701985792

parachutewallet.com

# Reference: https://twitter.com/securitydoggo/status/1045342925209702407

de.paypal.com.ios-version.com

# Reference: https://twitter.com/securitydoggo/status/1045373382496260096

thewayoflifeservice.com

# Reference: https://twitter.com/smica83/status/1047898049505370116

a0238665.xsph.ru/home/

# Reference: https://twitter.com/Dashowl/status/1047927237016793089

app-1503172539.000webhostapp.com/online/access.php
royalbankofcanada.online

# Reference: https://twitter.com/Dashowl/status/1047924040026001409

noipppl-online.com/db/

# Reference: https://twitter.com/Dashowl/status/1047923205044928517

soportesuber.com
soportesubers.com
soporteuberdriver.com
ubersoportelima.com
uber-sp.com

# Reference: https://twitter.com/WifiRumHam/status/1047964577655349251

clickmetertracking.com/dkbm

# Reference: https://twitter.com/Techhelplistcom/status/1047953492319592453

mayhewcourtemanche.info
service-almut-metz.com

# Reference: https://twitter.com/smica83/status/1048126343773343746

stone-haism.com/budah/preauth/prelogon/display/authetication/logon/login.htm

# Reference: https://twitter.com/JaromirHorejsi/status/1048143802941263872

ciadasdeliciasjoinville.com.br/wp-admin/includes/

# Reference: https://twitter.com/Dashowl/status/1048254087681265664

www-mercadolivre.com

# Reference: https://twitter.com/Dashowl/status/1048254893549608960

tr-qnbfinansbankwebsubesi.com

# Reference: https://www.virustotal.com/#/ip-address/85.17.26.65

adobed.aba.ae
appservicesdata.aba.ae
bankofamericasecured.aba.ae
chasebankonline.aba.ae
confirm-pay.us
facebox.aba.ae
faxebok.aba.ae
instakip.aba.ae
litatamayosoriano.aba.ae
mpp-secure.aba.ae
online-bnking-unicredit-bulbnk.aba.ae
online-bulbank-unicredit-v.aba.ae
paynpal.zz.com.ve
paypai-account-verify.aba.ae
paypal.aba.ae
pdfdoc.aba.ae
poypol-resolve.aba.ae
poypol-supp.aba.ae
ppalcheckinfo.aba.ae
ppl-verify.aba.ae
ragink.aba.ae
service-account-confirmation.aba.ae
supporter.aba.ae
supportest.aba.ae
supportsecure.aba.ae

# Reference: https://twitter.com/Dashowl/status/1048255143001694208

e-trvakifbankonlineislemler.com

# Reference: https://twitter.com/Dashowl/status/1048254551181156352

universouolcobranca.com/mes10/atualize/pg/informa/index4.html

# Reference: https://twitter.com/ANeilan/status/1048724341473652736

applid-accountalert.redirectme.net

# Reference: https://twitter.com/smica83/status/1049217647102107650

pvchosechina.com/kb/display/prelogon/preauth/authetication/logon/login.htm

# Reference: https://twitter.com/illegalFawn/status/1049246820977795072

mail.tim.it.accountupdate.verification.whakataneafc.co.nz

# Reference: https://twitter.com/dave_daves/status/1049202754965712896

zmta.trt1.jus.br.accountupdate.verification.whakataneafc.co.nz

# Reference: https://twitter.com/bad_packets/status/1049427438164271104
# Reference: https://pastebin.com/raw/dwwXUKqw

meythapvettal.com
myetnarvellat.com
xn--meherwallet-998e27d.com
xn--myeerwallet-ml8el7a.com
xn--myeherwalet-ns8exy.com
xn--myehewallet-v48ejh.com
xn--myeterwalet-cm8eoi.com
xn--myeterwallt-nl8ey3e.com
xn--myetewalle-if2e2xvg.com
xn--myetherwale-os8e5y.com
xn--myetherwale-os8e7x.com
xn--myetherwalit-ovb.com
xn--myetherwlle-jb9e0y.com
xn--myethewaet-9k2ea87b.com
xn--myethewallt-w48ew7b.com
xn--myethrwalet-ns8e73d.com
xn--myterwallet-ml8eq3e.com
xn--mytherwalle-jb9ey9a.com
xn--mythewallet-3qb3158g.com
xn--yetherwalle-iw8ezt.com

# Reference: https://twitter.com/DynamicAnalysis/status/1049372423647363073

colsanpablo.com/components/com_wrapper/views/wrapper/tmpl/99jrj476dhf/boaupdatenow.php
ingenierosenlaweb.com/taller.hardwareysoftware/resfiles/i0oimages/required_details_100518/

# Reference: https://twitter.com/packet_Wire/status/1049408357688336389

joulupuu.net/wp-admin/network/gdsf/late-code/index.php

# Reference: https://twitter.com/packet_Wire/status/1049406837668409344

xccccc.flazio.com/home

# Reference: https://twitter.com/packet_Wire/status/1049405730284101632

norknac.com/languages/en-GB/includes

# Reference: https://twitter.com/malwrhunterteam/status/1049695245154308098

alfredbusinessltd.flu.cc/auto/auto/auto/

# Reference: https://twitter.com/DynamicAnalysis/status/1049785332105965568

www6.rbc.com.webapp.ukv0.signin.logon.xhtml.ruta-altiplano.com/.well-known/.www6/rbc.com/webapp/ukv0/signin/logon.xhtml/index.php

# Reference: https://twitter.com/smica83/status/1050032627380576257

beyazyorum.com/activate/Account/index.php

# Reference: https://twitter.com/smica83/status/1050031099441803265

konaskorner.com/achive/doc/pphp/sever/

# Reference: https://twitter.com/mgiovamo/status/1050395033113960450

fortegroup.it/wp-admin/includes/-/aruba/
novetv.com/wp-admin/css/colors/ocean/.../

# Reference: https://twitter.com/smica83/status/1050312193059766272

js26732.com
realfine.com.cn

# Reference: https://twitter.com/smica83/status/1050324867613188096

fernandavm.com/wp-includes/js/acc/Manage/

# Reference: https://twitter.com/Dashowl/status/1050410415035965442

int7l-online.com/luno/luno_email-update.php

# Reference: https://twitter.com/sS55752750/status/1050401196140322816

en.citibkc.com

# Reference: https://twitter.com/Dashowl/status/1050423467940765696

qlndz-online.com/ourtime/ourtime/

# Reference: https://twitter.com/PhishingAi/status/1050438660829544448

patrayachts.com

# Reference: https://twitter.com/soccia555/status/1050652833098285056

archangeldiary.com/wp-admin/js/widgets/-/FastWeb/FastWeb/
axso.com/img/prettyPhoto/-

# Reference: https://twitter.com/PhishingAi/status/1050742510308323328

rubyforen.de/HaddenAssociates/onedri/one/
seoforsocialmedia.org/sjhs/chase/

# Reference: https://twitter.com/PhishingAi/status/1050491111989436416

hectorluengo.cl/wp-includes/images/crystaI/

# Reference: https://twitter.com/0xFrost/status/1050662419356217344

secure.bancoposta.sicurezza.poste.it.novatexllc.com/tes/19c74b3773c4f851e6736cb3d497f5d9/pos/foo-autenticazione.php

# Reference: https://twitter.com/PhishingAi/status/1050776364066910209

165.227.137.246/en/en/zzz/

# Reference: https://twitter.com/PhishingAi/status/1050750689511526400

situstaruhanbolasbobet.com

# Reference: https://twitter.com/PhishingAi/status/1050803887358193664

myetheruimwallet.com

# Reference: https://twitter.com/PhishingAi/status/1050802046587129856

jeremyhatcher.co/ndxzstate/onlinefree/kunden/tonline/oauth2/auth12a1.html

# Reference: https://twitter.com/Dashowl/status/1050811225322471424

uber-promocodes.com/codigo-promocional-uber/

# Reference: https://twitter.com/Dashowl/status/1050811069042741249

cliente-uber.com

# Reference: https://twitter.com/Dashowl/status/1050814076144836614

carrefour-serivcio.info

# Reference: https://twitter.com/Dashowl/status/1050813548207755264

portale-online-web-sicurezza.com/aggiorna/

# Reference: https://twitter.com/PhishingAi/status/1050914663687380992

nofeechinesetvbox.com/sso.tamus/Logon.html
nofeechinesetvbox.com/web/cas.nau/service.html

# Reference: https://twitter.com/nullcookies/status/1050892178040545280

junkurilaka.org

# Reference: https://www.cyren.com/blog/articles/iceland-police-phishing-attack-targets-bank-credentials

rannsoknar.logreglan.is/rannsoknir/skyrslutokur/malsgogn/

# Reference: https://twitter.com/taku888infinity/status/1051087808696279042

nttdocomo-detects.com

# Reference: https://twitter.com/IpNigh/status/1051076906781724672

sportennis.co.il/folder/dropbox/

# Reference: https://www.cyren.com/blog/articles/cryptocurrency-exchange-targeted-with-fake-phishing-site-3022

curlew2365.getlark.hosting/xcavdvdsvfassfsf/

# Reference: https://www.cyren.com/blog/articles/warning-uk-tax-refund-phishing-scam-identified

macchiagroup.com.au/Wednesday
marindasdancing.com/Wednesday
ocean-graphics.com.au/monday
rosemarosszeky.com/saturday
www.leesons.com.au/alterome
www.lmische.com.au/screen

# Reference: https://twitter.com/PhishingAi/status/1051109713176219654

housingfinancecommission.com/secured/

# Reference: https://twitter.com/threatbee/status/1051109691827339265
# Reference: http://threatbee.blogspot.com/2018/10/phishing-indicator-of-compromise-list_79.html

account.activeted.com
apps-paypal.com-service-config.info
banking.commerzbank.de-vorgangsnummer-jym6t2vn.top
donnaatacado.com.br
ebay.kazahstan.eu
interbank.dineroexperto.pe
invistaconstrutora.com.br
lararachel.com
microsoft-official-error1004.xyz
microsoft-warning92.xyz
paypal.com.information-accountssuspended.flu.cc
scotiabank-peru.dineroexperto.pe
shirts.wrapgirlmarketing.com
usbankonlinelogin.com
wellsfargouk.com
www.bkaplan.com
www.tahsenk.com

# Reference: https://www.cyren.com/blog/articles/stealing-tax-refunds-soaring-worldwide

lucyhanselman.nl//PBdJrEyd/MEPS/affinonline.com/
lucyhanselman.nl//PBdJrEyd/MEPS/agronet/i
lucyhanselman.nl//PBdJrEyd/MEPS/allianceonline.com.my/
lucyhanselman.nl//PBdJrEyd/MEPS/ambank/
lucyhanselman.nl//PBdJrEyd/MEPS/bislam/
lucyhanselman.nl//PBdJrEyd/MEPS/cimb/
lucyhanselman.nl//PBdJrEyd/MEPS/citibank.com.my/
lucyhanselman.nl//PBdJrEyd/MEPS/hlbconnect/
lucyhanselman.nl//PBdJrEyd/MEPS/i-muamalat.com.my/
lucyhanselman.nl//PBdJrEyd/MEPS/irakyat.com.my/
lucyhanselman.nl//PBdJrEyd/MEPS/kfh.com.my/
lucyhanselman.nl//PBdJrEyd/MEPS/mbb/
lucyhanselman.nl/PBdJrEyd/MEPS/ocbcmysecure/
lucyhanselman.nl//PBdJrEyd/MEPS/pbeonline/
lucyhanselman.nl//PBdJrEyd/MEPS/rhb.com.my/
lucyhanselman.nl//PBdJrEyd/MEPS/scb/
lucyhanselman.nl//PBdJrEyd/MEPS/uob/
mathieugagnon.ca/wp-content/uploads/70afec4c3870416e8cfbd6e16464aa2f/

# Reference: https://twitter.com/PhishingAi/status/1051144014546649088

178.128.255.114

# Reference: https://twitter.com/nullcookies/status/1051321548634804226

ghrelokamkaj.com/junaidjamsh.com/
junaidjamsh.com

# Reference: https://twitter.com/nullcookies/status/1051323126880133122

wetransfer0984e4883v003uplaod63cgi00.alrosapjsc.com/wtf/index.php

# Reference: https://phishstats.info:8443/public/dashboard/3bd497a3-9d59-441a-a4e8-6b7544312257

uniasia.net/login.bankofamerica/

# Reference: https://phishstats.info:8443/public/dashboard/3bd497a3-9d59-441a-a4e8-6b7544312257 (Last 50 Phishing detections (unique hostnames)

128.199.212.11/banks/National/
91.226.209.250/FinalStep.php
adminapps.healthscientificmedicals.com/login.php/
ageyecare.com/wps/bankofameerica.com/
apsresecure.000webhostapp.com/
asprevisi.000webhostapp.com/
bankofamerica-com-login-in-sign.com/wow/sign.in/
capcapiz.ezwebdesignandseo.com/wp-content/uploads/2011/xc/rcc.safari/index.php/
cc-deuxlays.fr/img/
chineseflreworks.com/
cinehome.in/fir/v3/bankofamerica-confirm-your-email.php/
coalcity.gq/outlook/
comcastxfinitybutty.000webhostapp.com/last.comcast/last.comcast/home/
ctrs2018.com/cibc/
feuillelandscapes.com/wp-content/plugins/antidetect_pluginn/bofa/ID/home/
fidoappli.com/Bank/CIBC/CIBC/billing2.php/
fidowirelesspay.com/I/I/banks/ATB/
firstcitizens-cm.org/firstcitizens/confirm.php
glinti.com/wp-includes/images/ofiice_2018/ofiice/office/office365.php/
idarlkomloo.com/
imphal.ezwebdesignandseo.com/hotel/rss.mont/index.php/
instaroofrepair.gb.net/dvddd/wellsuserpass/User/
itaoferencimentos.com/cadastro/
kionplus.com/comsx/
kosm-els3dni.club/tst/banks/National/
landouqudereye.com/login/cibc1/confirm.php/
leadings.cf/security/update/login.php/
mdiweb.net/ar/
muratutlu010.esy.es/
myetherwallet-rix.space/
oeuhfg96.beget.tech/agsms/
planfk.org/
sclak.pl/wp-includes/fonts/db/dropbox/proposal/loginverification.php/
scortps.000webhostapp.com/
securemaintenance.london/wp-content/plugins/antidetect_plugin/shap/back/bofa/ID/home/confirm.php/
security.tvarkosnamai.lt/inc/myaccount/signin/
service-czlita.com/b/
staminiferous-adapt.000webhostapp.com/date/auth/acct/login/verification/home/
steryl.pt/customer_center/customer-IDPP00C595/myaccount/signin/
stirringthefaith.com/docu/office.php/
support-team.tryfcomet.com/verify.html/
thisengarentacar.lk/multimedia/.wellknown/.hitaccess/chaze2018new/onset/details.html
upject.pro/auth/
villasboracay.myboracayisland.com/wp-includes/images/wlw/bccd/crc.hent/index.php/
vrbjxxubqzdxkab.nut.cc/.outh/www/page/verification/online/
wcuc.com.my/ye/verify/
xfinit-y20ensw9e3hensoa3niwnw3i.000webhostapp.com/wp-includes/profile/
ydwqax-online.com/ydwqax-bin/Windowslive/Live/Live/Update/login2.php
zaira.my/tmp/phd/match/

# Reference: https://twitter.com/nullcookies/status/1051520141136154624

maltbhirehgyabs.com

# Reference: https://twitter.com/nullcookies/status/1051640738478473217

coolcoolers.com.au

# Reference: https://twitter.com/malwrhunterteam/status/1051831814111813634

autismsociety-nc.org.zibind.gq/employeesurvey/

# Reference: https://twitter.com/malwrhunterteam/status/1051806729464373248

donkittyperignon.com

# Reference: https://twitter.com/WifiRumHam/status/1051863484860981248

theparkatariano.com/wp-content/upgrade/Office365-K/Microsoftdocs/

# Reference: https://twitter.com/smica83/status/1052189908763176960

marygrim.com/eba/english

# Reference: https://twitter.com/smica83/status/1052437732503547904

chess-play.space/anvi/not/lock/index.php

# Reference: https://twitter.com/Dashowl/status/1052436294876520448

filmsnthings.com/PAYPAIGATEWAYPROCESSING_UserAccount/sign-in.php

# Reference: https://twitter.com/JaromirHorejsi/status/1052158447876222976

myconsulting.co.id

# Reference: https://twitter.com/nullcookies/status/1052355899422052352

oldies.esy.es

# Reference: https://twitter.com/illegalFawn/status/1052505456265060353

sadesign.ch/wp-content/cache/tre
zindko.net

# Reference: https://twitter.com/smica83/status/1052532352826658816

peccomunenettunoromait.co.nf

# Reference: https://twitter.com/Dashowl/status/1052414388420976640

ajdeqx-online.com/chase/home/

# Reference: https://twitter.com/nullcookies/status/1052379191059079168

ampatss.com/sabina/files/korea/korean/

# Reference: https://twitter.com/ANeilan/status/1052393574501941248

myproject.mydrive.google.comdrivemy-drive.hautzenhof.at/new/

# Reference: https://twitter.com/smica83/status/1052560763079012353

newphaseelectrical.co.uk/language/en-GB/05102215420552s0s5c02sc2d5cd20vd5v02f3/66e3f9b697bd60e23c4edf31afb94636/Up-dating.php
oaklandmarinas.com/wp-content/images/125h01004507r.php

# Reference: https://twitter.com/Dashowl/status/1052425543617060865

security-uber.com

# Reference: https://twitter.com/Dashowl/status/1052426461527887873

nicver-online.com

# Reference: https://twitter.com/matte_lodi/status/1052845639481090048

DVeHOu0i.cosmotorplus.co.th/.ii/
webmail-aruba.pierrepratt.com/logincheck

# Reference: https://twitter.com/smica83/status/1052880713870204929

dealpapa.in/mkbb/display/prelogon/authetication/preauth/logon/login.htm

# Reference: https://twitter.com/Techhelplistcom/status/1052924917535117314

banco-itau-cl-wps-portal.gq

# Reference: https://twitter.com/D3LabIT/status/1053218185892298752

unicreditprivateattivazione.online
unicreditprivateassistenza.online
unicreditprivateservizio.online
unicreditprivateattivita.online
unicreditbankingprivate.online
unicreditprivateattivazione.shop
unicreditprivateassistenza.shop
unicreditprivateservizio.shop
unicreditprivateattivita.shop
unicreditprivatebanking.shop
unicreditbankingprivate.shop

# Reference: https://twitter.com/illegalFawn/status/1053200622365933568

service-cenxi.org

# Reference: https://twitter.com/illegalFawn/status/1053254460292644864

mcdonalds.com-chollo.top
mcdonalds.com-free.top
mcdonalds.corn-coupon.win
mcdonalds.corn-dinero.top

# Reference: https://twitter.com/Techhelplistcom/status/1053145803051671552

cloudexl.us
hipris.club
olidboy.club
tinakou.club

# Reference: https://twitter.com/smeriot/status/1053204734193135616
# Reference: https://pastebin.com/82kCy35M

0q81ssrthircibpjb38.pw
13rzau0id9yv7qx7vmx.pw
5etg3kxmixgldsxsgpe.pw
7b2dutb7v9414fnhp6c.pw
850ooepolsiq4kqopme.pw
brub2fwd90d8mvapxnl.pw
c0zehbt8nwgoc5cnf30.pw
cyk6ofmunl54r6wk0kt.pw
dimvrx60rdnz6chlwke.pw
eprr9qy290ebepksmkb.pw
erkygtycom4f3ya4wiq.pw
f8y3p5ee6dlqr79635z.pw
fuge9iocto89ck6zb0v.pw
h6jpdknzvyca6jg30xt.pw
h898je2htddai83xcr7.pw
kd37hbojgoevoclozwf.pw
l2liiu8ydzmdf01hicr.pw
lipqvwxcsc4uhmj6tmv.pw
omc6u2n10h8naqr0aph.pw
pmc5kqlxlblx0egtc72.pw
td2nbzjmgo6snenjzpr.pw
uqvk8ftuw5it8dsglcz.pw
xmvnlgki9a99g5kbgue.pw
zqczfn2nnmuesh8htyg.pw
zxptvyodj95dwcgklbw.pw

# Reference: https://twitter.com/Techhelplistcom/status/1053141487406514176

eeaous.com
hamlaks.com
nbaslk.com
yaoskam.com

# Reference: https://twitter.com/Techhelplistcom/status/1053054566957285382
# Reference: https://pastebin.com/raw/v7XN8dZS

alfredbusinessltd.flu.cc
chinatradings.igg.biz
citytrading.usa.cc
crowdrobotics.usa.cc
empiretrading.usa.cc
expertholdingspvt.igg.biz
expresstrademark.usa.cc
floridatrading.usa.cc
garageonline.nut.cc
istrading.usa.cc
marketplacestar.igg.biz
polixincare.xyz
productstrading.usa.cc
realevents.flu.cc
tradeexperts.usa.cc
tradingfirst.usa.cc
tradingpvt.igg.biz
trestersprings.usa.cc
vibla.igg.biz

# Reference: https://twitter.com/ns_alarms/status/1052919369255276544

akbankdirekt70yil.com
