Full rework of IoC repo to facilitate future work and keep things simpler.

Timeframes where never really 100% reliable anyways. 
Additionally its easier to remove double entries.

AsyncRAT/asyncrat_c2s_2023_09_25.txt

@@ -1,98 +0,0 @@
-37.120.208.36:49746
-81.161.229.73:8808
-124.248.66.140:4449
-42.51.40.184:6606
-agentttt.ac.ug
-agentpurple.ac.ug
-donelpacino.ddns.net
-list-slow.gl.at.ply.gg
-trx05.duckdns.org
-de2.localto.net
-ewoiutz9dt9bzo89tz.com
-saefigozower.fun
-non.accesscam.org
-140.82.121.3:28050
-124.248.66.139:4449
-ROCK19870-48166.portmap.io
-13.82.134.169:6606
-13.82.134.169:7707
-13.82.134.169:8808
-13.82.134.169:5555
-13.82.134.169:48166
-webwhatsapp.cc
-185.140.53.71:5622
-sdfubuzoeoeiv.top
-185.81.157.153:55
-45.95.168.116:1337
-45.95.168.116:1338
-45.95.168.116:1339
-45.95.168.116:1334
-45.95.168.116:1335
-45.95.168.116:1333
-81.161.229.73:7707
-tr2.localto.net
-134.255.254.224:7707
-140.82.121.3:23778
-42.51.40.184:8808
-140.143.167.227:3214
-65.21.177.234:6606
-popo01.mywire.org
-genjustu.hopto.org
-45.35.158.173:6606
-45.35.158.173:7707
-45.35.158.173:8808
-123.99.200.175:4449
-37.120.208.36:2703
-62.234.35.139:5631
-185.81.157.153:100
-74.133.86.50:80
-140.82.121.3:8080
-62.234.33.152:3502
-esteesparahoy.duckdns.org
-5.104.84.227:4449
-IROEXJDS.WORK.GD
-new.payeermine.com
-new.investimer.name
-185.17.0.246:4449
-bestsuccess.ddns.net
-telachapesu.com
-erorr2.webhop.net
-103.38.236.46:4449
-74.133.86.50:4449
-81.161.229.73:6606
-185.221.67.3:4449
-198.44.165.77:6605
-101.42.137.105:3593
-103.108.66.216:9905
-222.211.73.251:4848
-mika201.duckdns.org
-4.151.131.10:1010
-123.99.200.153:4449
-nbnf43456httpshost.online
-103.42.31.180:9904
-seuriouhvhusr.cn
-ohgowhsnv.duckdns.org
-147.189.169.11:8848
-198.44.184.40:4449
-42.51.40.184:7707
-riewoti.work.gd
-49.232.230.111:6630
-135.181.226.133:49287
-172.241.29.21:7707
-wpe.mysynology.net
-chongmei33.publicvm.com
-dongreg202020.duckdns.org
-rahim321.duckdns.org
-37.120.208.36:49714
-154.53.45.95:4449
-actualizaciondedatosgrupoaval.net
-101.34.3.12:8848
-capitalizerutc.com
-193.161.193.99:31507
-103.42.31.134:9901
-viper34.servebbs.net
-178.33.222.241:49746
-124.248.66.144:4449
-extra-hack.ddns.net
-65.21.177.234:7707
-slim1.thruhere.net

AsyncRAT/asyncrat_c2s_2023_10_15.txt

@@ -1,134 +0,0 @@
-1.120.227.126:4449
-103.149.201.161:6106
-103.233.253.8:8801
-103.82.38.49:4449
-104.168.24.201:2345
-121.62.23.38:5555
-124.248.66.136:4449
-124.248.66.143:4449
-124.248.66.148:4449
-124.248.66.154:4449
-129.226.175.203:7771
-12tainss1s.xyz
-138.199.21.208:4449
-147.185.221.16:47793
-147.185.221.16:57444
-154.221.25.208:8848
-16.170.222.231:13044
-167.71.56.116:22863
-172.111.138.100:4447
-172.234.16.71:4444
-172.234.16.71:6606
-172.234.16.71:7707
-172.234.16.71:8808
-18.118.199.163:80
-185.169.180.143:1604
-185.169.180.209:1604
-185.196.9.95:8080
-185.221.67.19:18883
-185.221.67.19:4449
-185.225.73.105:7707
-185.225.73.105:7896
-185.225.73.105:8675
-193.26.115.167:6606
-193.26.115.167:7707
-193.26.115.167:8808
-194.180.49.190:9254
-198.37.108.208:5555
-198.44.165.35:6602
-198.44.165.35:8802
-198.44.165.77:6105
-199.36.223.62:52364
-199.36.223.62:8848
-20.199.64.106:8848
-20.201.123.99:30120
-202.146.218.35:8848
-208.64.33.62:4449
-209.145.56.0:57
-24.254.118.248:4449
-4.151.131.10:2404
-4.229.227.81:8080
-4.229.227.81:8081
-45.138.16.87:998
-46.1.103.69:2341
-46.1.103.69:4263
-46.1.103.69:7355
-46.1.103.69:9371
-474ba67bdb289c6263b36dfd8.xyz
-51.103.217.70:6677
-51.103.217.70:8585
-65.21.8.16:4449
-74.208.105.80:2005
-74.208.105.80:7777
-79.134.225.113:9346
-89.23.100.93:4449
-89.23.97.12:4449
-91.103.252.215:4449
-91.107.228.216:4449
-aaarr43.duckdns.org
-agentttt.ac.ug
-agentpurple.ac.ug
-amm.mine.nu
-asdvua78v8ed4t6fhvha.cn
-asfyvisoeogtca3.fun
-bendicionesoctubre.ddnsguru.com
-best-recycling.gl.at.ply.gg
-bloxstrap.theworkpc.com
-bollon8.kozow.com
-dcemprendimiento.duckdns.org
-dkteamfix.webhop.net
-donelpacino.ddns.net
-dool.ddns.net
-dox2022.homeip.net
-drippmedsot.mywire.org
-Envio2023asy.bumbleshrimp.com
-erouhisugvizi4.cn
-exrobotos.duckdns.org
-extra-hack.ddns.net
-floptuytonroyem.sytes.net
-foodie.ooguy.com
-forlatinamerica.bumbleshrimp.com
-hmza.con-ip.com
-IROEXJDS.WORK.GD
-itskmc.run.place
-jauan2023.kozow.com
-jobsearchtest.com
-knowledge-variance.gl.at.ply.gg
-l11ol12s.sells-it.net
-lesson.webredirect.org
-lila152512.duckdns.org
-lol1112s.sells-it.net
-loveisthegreatest.ddnsfree.com
-microwsfp5555.ddns.net
-mika201.duckdns.org
-mloptuytonroyem.sytes.net
-modyforeditor.loseyourip.com
-nbnf43456httpshost.online
-new.payeermine.com
-new.investimer.name
-new22.vpndns.net
-newjakodns.con-ip.com
-nsairoet.kozow.com
-ohgowhsnv.duckdns.org
-osostata.com
-pacman.dontexist.org
-popo01.mywire.org
-qpurrybeatmecamtest.ddns.net
-riewoti.work.gd
-rxrr.duckdns.org
-saofidubixo4r.top
-sdfubuzoeoeiv.top
-sdhvvy7vbysuxnvjdr6gtd64.com
-sen3tors.linkpc.net
-seuriouhvhusr.cn
-shady-mo.duckdns.org
-taaymhost.ddns.net
-viper34.servebbs.net
-w3llstore.work.gd
-webazssc.sytes.net
-webazsswebc.sytes.net
-webwdircetcc.sytes.net
-webwsetcc.sytes.net
-windowsignn.theworkpc.com
-xwormejor12.duckdns.org
-YAPER.dynuddns.net

AsyncRAT/asyncrat_c2s_2023_11_21.txt

@@ -1,204 +0,0 @@
-1.err.line.pm
-103.155.82.74:5000
-103.186.215.91:3390
-103.186.215.91:4449
-103.193.188.13:8080
-103.193.188.13:8848
-103.207.165.25:4449
-104.129.27.19:6606
-104.129.27.19:7707
-104.129.27.19:8808
-106.53.119.74:8848
-109.205.214.146:8848
-111.173.80.91:8848
-111.173.80.92:8848
-111.173.89.39:8848
-111.229.116.176:8848
-121.62.23.71:8848
-123.99.200.134:2351
-123.99.200.157:2450
-123.99.200.157:2991
-123.99.200.175:4595
-123.99.200.184:2139
-123.99.200.184:2650
-123.99.200.188:4449
-123.99.200.191:4449
-124.156.160.52:8848
-124.221.43.13:5222
-124.221.43.13:8848
-124.248.69.70:8848
-124.248.69.71:8848
-125.64.108.85:4449
-134.122.133.177:4449
-136.243.111.71:77
-136.243.151.123:1234
-142.202.188.173:9953
-143.92.32.18:4449
-143.92.35.85:4449
-147.185.221.16:49190
-147.185.221.17:20761
-147.185.221.17:22684
-147.185.221.17:2276
-147.185.221.17:3767
-147.185.221.17:6606
-147.185.221.17:7707
-147.185.221.17:8264
-147.185.221.17:8808
-154.12.87.251:8301
-154.12.87.251:9601
-154.39.250.229:4449
-154.39.250.52:4449
-154.39.251.210:4449
-154.39.254.105:4449
-154.39.255.191:4449
-154.91.229.111:4449
-154.91.229.36:4449
-154.91.230.208:4449
-154.91.230.50:4449
-156.224.27.197:4449
-156.251.19.50:4449
-159.69.85.54:4449
-163.172.165.144:8080
-167.71.56.116:22942
-171.22.28.214:4404
-176.129.191.64:5123
-18.192.93.86:14444
-182.43.76.21:7788
-185.157.162.241:1302
-185.196.9.95:8008
-185.216.71.238:7708
-185.216.71.238:8008
-185.216.71.238:9909
-185.239.87.136:4449
-185.81.157.103:1111
-185.81.157.19:3310
-185.81.157.19:3314
-185.94.29.178:4477
-188.148.105.135:3113
-193.161.193.99:41254
-195.85.205.150:1337
-198.13.34.134:4449
-198.44.185.105:4449
-198.44.186.245:4449
-198.44.187.42:4449
-2.56.245.187:3232
-20.211.121.138:4449
-202.63.172.63:8848
-206.119.117.179:4449
-206.123.140.95:3232
-206.233.132.232:8848
-206.233.240.31:4449
-3.64.4.198:15224
-3.64.4.198:4824
-31.214.243.202:8848
-38.181.35.233:4449
-38.181.35.91:4449
-38.55.197.206:4449
-42.51.39.90:4449
-43.248.186.20:8848
-43.251.16.74:5342
-44.193.61.216:4449
-45.125.46.201:57469
-45.141.215.230:4449
-45.145.224.40:4449
-45.145.229.151:8803
-45.145.229.151:9603
-45.145.230.68:4449
-45.152.66.153:8807
-45.152.66.165:8808
-45.152.66.165:9608
-45.84.199.34:7000
-474ba67bdb289c6263b36dfd8.xyz
-52.186.179.225:1337
-62.234.175.104:80
-62.234.175.104:9000
-68.10.7.227:5620
-72.11.142.131:8808
-77.91.124.111:5552
-81.11.198.38:4449
-82.165.213.242:7771
-82.64.54.249:3232
-82.65.203.216:443
-87.248.157.179:1604
-91.134.150.159:4449
-91.92.241.17:4449
-a0880508.xsph.ru
-agent-thumbnail.gl.at.ply.gg
-aniuus.linkpc.net
-basgoingbrewca.serveirc.com
-best-recycling.gl.at.ply.gg
-bold-bush-09147.pktriot.net
-bollon8.kozow.com
-browse-classic.gl.at.ply.gg
-cn-bj1-kvlqs4ee.frp.cool
-coffee.ddns.me
-country-wellness.gl.at.ply.gg
-dkteamfix.webhop.net
-dlitryuzoneu.sytes.net
-doradp.gleeze.com
-download.adaklab.ir
-ecuadorasyn.duckdns.org
-enviofinal.kozow.com
-erorr2.webhop.net
-erouhisugvizi4.cn
-exrobotos.duckdns.org
-extra-hack.ddns.net
-fat7ola07.ddns.net
-fee-harmful.gl.at.ply.gg
-fhfgjghkgh.ddns.net
-flitryuzoneu.zapto.org
-floptuytonroyem.sytes.net
-foodie.ooguy.com
-frostycheats-30646.portmap.host
-getting-roommate.gl.at.ply.gg
-gnbeatscagig.sytes.net
-gtitryuzoneorji.zapto.org
-hdr.theworkpc.com
-hexrxr.duckdns.org
-hostynjrat222.hopto.org
-ibat21.duckdns.org
-iced.ddns.net
-IROEXJDS.WORK.GD
-jamiekarvans.duckdns.org
-jauan2023.kozow.com
-jobsearchtest.com
-knowledge-variance.gl.at.ply.gg
-lila152512.duckdns.org
-loribard.ddnsfree.com
-loveisthegreatest.ddnsfree.com
-luci2023.kozow.com
-mingrelian.duckdns.org
-mloptuytonroyem.sytes.net
-modyforeditor.loseyourip.com
-mxrecordsipcordsss.ddns.net
-nanoinformcor1.duckdns.org
-national-pension.gl.at.ply.gg
-nationalteams11.publicvm.com
-noescorrecto2023.kozow.com
-ns1usaupload.myphotos.cc
-nsairoet.kozow.com
-ohgowhsnv.duckdns.org
-pacman.dyndns.org
-pasgoingcrewmoviand.3utilities.com
-pibirat.ddns.net
-popo01.mywire.org
-pythondsh4.loseyourip.com
-reply.gl.at.ply.gg
-riewoti.work.gd
-saofidubixo4r.top
-sen3tors.linkpc.net
-taaymhost.ddns.net
-telachapesu.com
-test56654.myddns.me
-tndeatcamside.sytes.net
-trackmoney.dynuddns.net
-varo12l.duckdns.org
-viper34.servebbs.net
-w3llstore.mywire.org
-win009.theworkpc.com
-windowsddns.duckdns.org
-wins23octok.duckdns.org
-wpe.mysynology.net
-xcrew1990.kozow.com
-xdatarfree.ddns.net
-zhangfeng123.eu.org

Azorult/azorult_all.txt

@@ -610,7 +610,6 @@ https://eksodus.id/ghytoja/PL341/index.php
 http://marcher.had.su/az/offback.php
 http://imanon666.pserver.ru/PL341/index.php
 http://dota.website/elikapeka2/index.php
-http://cdnnnngoogle.com/fjgj84s.php
 http://46.249.38.134/index.php
 http://ossom.bit/index.php
 http://moneymoney.temp.swtest.ru/index.php
@@ -1349,7 +1348,6 @@ http://4mstblue.com/gate.php
 http://109.248.150.151/roth/index.php
 http://5.161.82.171/index.php
 http://wupx.ml/prexid/index.php
-http:/jerome_jerome_que_grande_sos_.com/test/index.php
 http://154.85.36.209/index.php
 http://pt.wildsdesigns.com/PL341/index.php
 http://45.145.185.26/onxs$&/index.php
@@ -1875,3 +1873,50 @@ http://j892370.myjino.ru/83169.php
 http://91.243.81.14/a/obe.php
 http://ichgh.com/mk/index.php
 http://tralapum.tk/aye/index.php
+http://cdnnnngoogle.com/fjgj84s.php
+http://pois.in:8010/_az/
+http://serviceadminwebmailboxupgrace.biz.wf/index.php
+http://dw4b.shop/DL432/index.php
+http://37.72.175.157:8080/chi/index.php
+http://josebrazuca-44072.portmap.host:44072/index.php
+http://74.201.28.62:4444/index.php
+http://bcl1.shop/BL821/index.php
+http://185.28.39.18:7777/asiamandarin.buzz/deval/index.php
+http://0x21.in:8000/_az/
+http://185.28.39.17:7777/asiamandarin.buzz/deval/index.php
+http://149.56.173.78:8080/break/
+http://209.61.195.213:8080/cass/index.php
+http://209.61.195.213:8080/naz/index.php
+http://work.wrklantc.in:9050/_az/
+http://up908.viewdns.net:8034/87778/index.php
+http://104.152.185.198:8080/calm/index.php
+http://178.216.50.18:8080/007/index.php
+http://dbxo.shop/PL341/index.php
+http://104.171.121.51:8080/cool/index.php
+http://ruiw.shop/RL341/index.php
+http://ruiw.shop/ML341/index.php
+http://51.15.208.114/3EF47870-330C-447F-822F-7397E2DA4ED6/index.php
+http://drivers573.byethost17.com/index.php
+http://dbxo.shop/DBL341/index.php
+http://185.29.10.12/2023/Panel/index.php
+http://buuuzar.ru/index.php
+http://185.79.156.18/gka/index.php
+http://b1lea.shop/B1341/index.php
+http://b2i1.shop/B2341/index.php
+http://45.95.147.64/austino/index.php
+https://diaymako.com/index.php
+http://hoswell.shop/RUT341/index.php
+http://94.156.65.101/cleanlogo/index.php
+http://i42325.hostru2.fornex.org/index.php
+http://cafirepacks.com/pub/fon/index.php
+http://m9re1.shop/M9341/index.php
+https://5desconcertais.sa.com/cn/nem/index.php
+http://gigaload.info/1210776429.php
+http://bruxara.com/index.php
+http://sm.jrworcester.org/index.php
+http://globalcitydelivery.com/azo/index.php
+http://casiworksplcs.xyz/index.php
+http://mhlc.shop/MC341/index.php
+http://2.56.215.211/index.php
+http://xcelonline.000webhostapp.com/index.php
+http://javiermar2.temp.swtest.ru/index.php

Azorult/azorult_c2s_09_02_2024.txt

@@ -1,15 +0,0 @@
-http://185.79.156.18/gka/index.php
-http://b1lea.shop/B1341/index.php
-http://b2i1.shop/B2341/index.php
-http://45.95.147.64/austino/index.php
-https://diaymako.com/index.php
-http://hoswell.shop/RUT341/index.php
-http://94.156.65.101/cleanlogo/index.php
-http://i42325.hostru2.fornex.org/index.php
-http://cafirepacks.com/pub/fon/index.php
-http://m9re1.shop/M9341/index.php
-https://5desconcertais.sa.com/cn/nem/index.php
-http://gigaload.info/1210776429.php
-http://bruxara.com/index.php
-http://sm.jrworcester.org/index.php
-http://globalcitydelivery.com/azo/index.php

Azorult/azorult_c2s_2023_10_16.txt

@@ -1,20 +0,0 @@
-http://pois.in:8010/_az/
-http://serviceadminwebmailboxupgrace.biz.wf/index.php
-http://dw4b.shop/DL432/index.php
-http://37.72.175.157:8080/chi/index.php
-http://josebrazuca-44072.portmap.host:44072/index.php
-http://74.201.28.62:4444/index.php
-http://bcl1.shop/BL821/index.php
-http://185.28.39.18:7777/asiamandarin.buzz/deval/index.php
-http://0x21.in:8000/_az/
-http://185.28.39.17:7777/asiamandarin.buzz/deval/index.php
-http://149.56.173.78:8080/break/
-http://209.61.195.213:8080/cass/index.php
-http://209.61.195.213:8080/naz/index.php
-http://work.wrklantc.in:9050/_az/
-http://up908.viewdns.net:8034/87778/index.php
-http://104.152.185.198:8080/calm/index.php
-http://178.216.50.18:8080/007/index.php
-http://dbxo.shop/PL341/index.php
-http://104.171.121.51:8080/cool/index.php
-http://ruiw.shop/RL341/index.php

Azorult/azorult_c2s_2023_11_06.txt

@@ -1,5 +0,0 @@
-http://dbxo.shop/DBL341/index.php
-http://51.15.208.114/3EF47870-330C-447F-822F-7397E2DA4ED6/index.php
-http://drivers573.byethost17.com/index.php
-http://ruiw.shop/ML341/index.php
-http://buuuzar.ru/index.php

Azorult/azorult_c2s_2023_11_24.txt

@@ -1,6 +0,0 @@
-http://ruiw.shop/ML341/index.php
-http://51.15.208.114/3EF47870-330C-447F-822F-7397E2DA4ED6/index.php
-http://drivers573.byethost17.com/index.php
-http://dbxo.shop/DBL341/index.php
-http://185.29.10.12/2023/Panel/index.php
-http://buuuzar.ru/index.php

BitRat/bitrat_all.txt

@@ -97,7 +97,6 @@ ezispice.duckdns.org:8950
 kosueo.theworkpc.com:2053
 policy-generating.at.ply.gg:48719
 noimagebit.duckdns.org:2040
-82.129.66.137:2222
 2.56.59.239:7355
 publiquilla.linkpc.net:9097
 u868328.nvpn.to:5881
@@ -437,3 +436,113 @@ gfeqqgeag.duckdns.org:1880
 toopdyno2.duckdns.org:55140
 rfrehdfbss.duckdns.org:1880
 fghhjuyg.duckdns.org:1882
+185.225.75.68:3569
+reyhrwwet4y.duckdns.org 
+qwerty
+homesafe1000.duckdns.org
+179.43.142.55:1995
+bitnow7005.duckdns.org
+adata.hopto.org
+185.31.111.198:25001
+185.157.162.241:1302
+20.194.35.6:7904
+103.153.182.247:6161
+212.192.246.250:4480
+194.5.98.46:1180
+109.70.236.80:53166
+65.21.3.192:1234
+173.44.50.140:4550
+8.208.27.150:4550
+37.0.11.212:4444
+37.0.10.19:5678
+202.182.106.243:12341
+47.75.99.242:1234
+87.98.177.182:3131
+79.134.225.90:4898
+88.99.219.185:4041
+79.134.225.73:19099
+95.252.122.216:1900
+27.124.20.145:8082
+103.153.182.89:1234
+204.77.8.221:5506
+185.244.36.230:1240
+162.33.178.83:6969
+142.44.145.208:6060
+45.137.22.58:1780
+148.251.67.180:5505
+23.105.131.237:1734
+179.43.141.103:1234
+111.90.158.139:1234
+89.248.173.187:5506
+103.89.91.38:3390
+51.89.205.208:5506
+45.153.241.244:5506
+194.33.45.3:4898
+37.0.11.183:4444
+185.157.161.248:1975
+139.28.219.47:64576
+185.157.160.147:1975
+185.140.53.55:5506
+185.244.36.230:1236
+45.133.1.179:442
+94.237.49.140:2222
+185.215.113.102:1234
+185.157.161.53:97
+5.253.84.122:4898
+212.192.241.41:6841
+139.28.219.45:443
+178.20.40.235:5555
+145.249.106.195:7355
+serviceop091.ddns.net
+imen.ddns.net
+eewe.ddns.net
+19008198.ddns.net
+yatzufn.ddns.net
+hailisbetter.ddns.net
+felixgodis.ddns.net
+pvstub.ddns.net
+carreor.ddns.net
+atdf.ddns.net
+godcheatfn.ddns.net
+pradeepprabhu705.ddns.net
+dreamz.duckdns.org
+encrypted-channel.duckdns.org
+888myrat.duckdns.org
+dontreachme.duckdns.org
+paintedkitty.duckdns.org
+serese.duckdns.org
+0b1.duckdns.org
+omeno.duckdns.org
+bitratfanboy2-45086.portmap.io
+nig.jalenscoonwog.info
+hopyboss.com
+bitrtdollars.itsaol.com
+xpert.dyndns.biz
+mianoffice221.kozow.com
+cs50.publicvm.com
+vonix.hopto.org
+jairoandresotalvarorend.linkpc.net
+vslt.info
+resereved.nerdpol.ovh
+postal-23.ioomoo.xyz
+dopeonlineforwarding.xyz
+serverclient.sytes.net
+firewall.publicvm.com
+mfocuz.com
+dns16-microsoft-health.com
+onlyforbit.blogdns.net
+jocker02.linkpc.net
+best.supportredirect.net
+gotti.ddnsgeek.com
+eter102.dvrlists.com
+elevenpaths.cc
+bitrat.nsupdate.info
+hureseyd.top
+amazonservices.onthewifi.com
+cm3thejmzhlxpvowsv2dk4ybpovmoaqal7o7gqirhgvj24l4ww7w7zid.onion
+bkc56e3jgy5zlfq7ialxyppztuh4dgranlyauupid4uc2ze5hg2cshqd.onion
+nwgj3ux4huyfgbrwj5i2uwbxdu2ddd33eqrpq44dwooaoqo4ntmpc6qd.onion
+obqdy2u226qjiavs42z4z6zgcf6tefsoxaqzjvohmoy7kafdwgqgjkqd.onion
+lvyowbbwycqoqwjmpmnpfyhzdcvxthuuabmcsocjamvzfgwzdat5wwid.onion
+vbd3hiruwgcquiwrhpvaxann2ieo3tw3iznqlrp2z6mqyaonh4rswjqd.onion
+7sbl4dpbubwjjghdquwg47fyq7rookd4bgm2ypm2kjzkivd7tomvczqd.onion

BitRat/bitrat_c2s_09_02_2024.txt

@@ -1,71 +0,0 @@
-0b1.duckdns.org
-103.153.182.89:1234
-109.70.236.80:53166
-139.28.219.45:443
-139.28.219.47:64576
-142.44.145.208:6060
-145.249.106.195:7355
-148.251.67.180:5505
-162.33.178.83:6969
-173.44.50.140:4550
-178.20.40.235:5555
-179.43.141.103:1234
-185.157.160.147:1975
-185.157.161.248:1975
-185.157.161.53:97
-185.215.113.102:1234
-194.33.45.3:4898
-20.194.35.6:7904
-204.77.8.221:5506
-212.192.241.41:6841
-212.192.246.250:4480
-23.105.131.237:1734
-37.0.10.19:5678
-37.0.11.183:4444
-37.0.11.212:4444
-45.137.22.58:1780
-45.153.241.244:5506
-47.75.99.242:1234
-5.253.84.122:4898
-79.134.225.73:19099
-79.134.225.90:4898
-8.208.27.150:4550
-89.248.173.187:5506
-94.237.49.140:2222
-atdf.ddns.net
-best.supportredirect.net
-bitrat.nsupdate.info
-bitrtdollars.itsaol.com
-bkc56e3jgy5zlfq7ialxyppztuh4dgranlyauupid4uc2ze5hg2cshqd.onion
-cm3thejmzhlxpvowsv2dk4ybpovmoaqal7o7gqirhgvj24l4ww7w7zid.onion
-cs50.publicvm.com
-dns16-microsoft-health.com
-dontreachme.duckdns.org
-dopeonlineforwarding.xyz
-dreamz.duckdns.org
-eewe.ddns.net
-elevenpaths.cc
-encrypted-channel.duckdns.org
-eter102.dvrlists.com
-firewall.publicvm.com
-gotti.ddnsgeek.com
-hopyboss.com
-hureseyd.top
-imen.ddns.net
-jairoandresotalvarorend.linkpc.net
-jairoandresotalvarorend.linkpc.net
-jocker02.linkpc.net
-mfocuz.com
-mianoffice221.kozow.com
-nwgj3ux4huyfgbrwj5i2uwbxdu2ddd33eqrpq44dwooaoqo4ntmpc6qd.onion
-obqdy2u226qjiavs42z4z6zgcf6tefsoxaqzjvohmoy7kafdwgqgjkqd.onion
-omeno.duckdns.org
-paintedkitty.duckdns.org
-postal-23.ioomoo.xyz
-pradeepprabhu705.ddns.net
-resereved.nerdpol.ovh
-serese.duckdns.org
-serviceop091.ddns.net
-serviceop091.ddns.net
-vslt.info
-xpert.dyndns.biz

BitRat/bitrat_c2s_2023_09_25.txt

@@ -1,4 +0,0 @@
-185.225.75.68:3569
-reyhrwwet4y.duckdns.org 
-qwerty
-homesafe1000.duckdns.org

BitRat/bitrat_c2s_2023_10_15.txt

@@ -1,3 +0,0 @@
-179.43.142.55:1995
-reyhrwwet4y.duckdns.org 
-bitnow7005.duckdns.org

BitRat/bitrat_c2s_2023_11_06.txt

@@ -1,2 +0,0 @@
-reyhrwwet4y.duckdns.org 
-adata.hopto.org

CyberGate/cybergate_all.txt

@@ -10,6 +10,7 @@
 0kx.duckdns.org
 0wn3r.sytes.net
 0wned1337.no-ip.info
+1.3.3.12:80
 100love.no-ip.info
 109.120.155.101:27015
 109.169.40.133:43594
@@ -191,6 +192,7 @@
 27junio2011.no-ip.org
 28r.no-ip.info
 2fight50.no-ip.biz
+2ip.ru
 2pac.zapto.org
 2pacvsbiggie.no-ip.info
 30hack300.zapto.org
@@ -604,6 +606,7 @@ afterparty.no-ip.biz
 aganaking.no-ip.info
 agent.myftp.biz
 agent.serveftp.com
+agent.serveftp.com 
 agent.servehttp.com
 agentmaxserver.no-ip.biz
 agnieszkabus.zapto.org
@@ -661,6 +664,7 @@ al-tomihy.no-ip.biz
 al5eaaal.no-ip.biz
 al7oo0oot.sytes.net
 alabady.no-ip.biz
+alabady.no-ip.biz 
 aland22.no-ip.org
 alaneeq.zapto.org
 albasha123.no-ip.biz
@@ -690,6 +694,7 @@ algoker2.no-ip.info
 ali0.no-ip.org
 ali010201.no-ip.biz
 ali205.no-ip.biz
+ali_9987654321.hopto.org
 aliaaalaaali.no-ip.biz
 alialwani.no-ip.org
 aliawais.no-ip.biz
@@ -700,7 +705,6 @@ aliencz.ddns.net
 alienware123.duckdns.org
 aline.myvnc.com
 alishah1.no-ip.biz
-ali_9987654321.hopto.org
 aljmahoo.no-ip.biz
 Alkaser144.no-ip.biz
 Alkatrazx.no-ip.org
@@ -738,6 +742,7 @@ alza7f.no-ip.biz
 alzahar77.no-ip.biz
 amacamhensem.no-ip.org
 amadouw21.no-ip.biz
+amadouw21.no-ip.biz 
 amalaman.no-ip.org
 amankharbanda.no-ip.biz
 ambasadorek.no-ip.biz
@@ -1096,6 +1101,7 @@ bluewolf2.zapto.org
 bluffer.no-ip.info
 bmwm311.no-ip.info
 bncinvadiu.no-ip.org
+bnortiux.com
 boaxy.no-ip.biz
 bob22.no-ip.biz
 bobojump.no-ip.biz
@@ -1277,10 +1283,12 @@ cekmeol.zapto.org
 cell10.no-ip.info
 celraloko.no-ip.org
 celsodns.no-ip.org
+celsodns.no-ip.org 
 celsodns.zapto.org
 cengyedek.no-ip.org
 cerberus147.no-ip.biz
 cerrah.homedns.org
+cftmon.exe
 cgcmdhf.no-ip.biz
 cgrat.no-ip.biz
 ch.no-ip.biz
@@ -1323,6 +1331,7 @@ choripan.zapto.org
 chotilnw.no-ip.biz
 chourib.zapto.org
 chow.sytes.net
+chow.sytes.net 
 chrome.servemp3.com
 chrome9.no-ip.biz
 chu-ki.no-ip.org
@@ -1368,6 +1377,7 @@ colateral.no-ip.org
 coldkiller.no-ip.biz
 colega12.zapto.org
 coletti.no-ip.biz
+colombiahack.sytes.net
 colorusa.no-ip.org
 colorzinhousa.no-ip.org
 combatarmas.no-ip.org
@@ -1380,6 +1390,7 @@ commandocentral.no-ip.biz
 compartilhar.no-ip.org
 comptessaie.no-ip.org
 computer1.myftp.biz
+computer1.myftp.biz 
 conections2012.no-ip.org
 conhecidos.dyndns.org
 conhost.servehttp.com
@@ -1733,6 +1744,7 @@ digitmaniac.no-ip.org
 digor12.no-ip.biz
 diiimaria.zapto.org
 dimilong.zapto.org
+Diminuindo ping... Pressione OK
 dimkinfunnypics.zapto.org
 dingdong.no-ip.biz
 dinoss.no-ip.org
@@ -1896,6 +1908,7 @@ elyess-fenni.no-ip.info
 eman9020.no-ip.biz
 emhacker2014.no-ip.biz
 emine.no-ip.org
+emine.no-ip.org 
 eminem1.no-ip.org
 emperor-hack.no-ip.biz
 emperors1995.zapto.org
@@ -2007,6 +2020,7 @@ fadyfofo.no-ip.biz
 faffa.no-ip.org
 fahdtest.no-ip.biz
 fahodi.no-ip.biz
+failsafe.zapto.org
 faisal.zapto.org
 faisal404.no-ip.biz
 fake1993.dyndns.org
@@ -2244,6 +2258,7 @@ girl2woman.no-ip.biz
 gittua.zapto.org
 givemeda.no-ip.biz
 gizmofreak.no-ip.org
+gizmofreak.no-ip.org 
 gl.no-ip.org
 glass-best.zapto.org
 glauco69.no-ip.org
@@ -2380,7 +2395,7 @@ hacker-psm.zapto.org
 hacker-xman.no-ip.biz
 hacker0078.no-ip.biz
 hacker012088.no-ip.biz
-hacker09.no-ip.info
+hacker09.no-ip.info r
 hacker15a.zapto.org
 hacker1994.no-ip.biz
 hacker2010.sytes.net
@@ -2440,6 +2455,8 @@ hackiador06matheus.no-ip.org
 hackid3.no-ip.biz
 hackiir.no-ip.biz
 hacking-gp.no-ip.info
+hacking2020.no-ip,org 
+hacking2020.no-ip.org
 hacking2020.no-ip.org 
 hacking86.no-ip.biz
 hackingmachine666.ddns.net
@@ -2831,6 +2848,7 @@ jamme.no-ip.biz
 jamzawe.zapto.org
 janbaba.no-ip.org
 janvip.no-ip.org
+janvip.no-ip.org 
 jaratali.no-ip.biz
 jarjeer.no-ip.biz
 jasonsmith545.duckdns.org
@@ -3093,6 +3111,7 @@ kinkiboy.no-ip.biz
 kinky82.zapto.org
 kirayoo.no-ip.biz
 kirliisler001.no-ip.biz
+kirliisler001.no-ip.biz 
 kirliisler01.no-ip.org
 kirschbom.no-ip.org
 kiskislt.no-ip.biz
@@ -3401,6 +3420,7 @@ maklymoh1.no-ip.biz
 makman.no-ip.biz
 makouk.no-ip.biz
 maksoudm.ddns.net
+malboro.no-ip.
 malboro.servecounterstrike.com
 malikluka.zapto.org
 malikmuna.no-ip.org
@@ -3408,6 +3428,7 @@ mallboro.zapto.org
 malteftw.no-ip.biz
 mamamia.zapto.org
 mami06.no-ip.biz
+mami06.no-ip.biz 
 managermagic.no-ip.org
 maname123.stuff-4-sale.org
 mancheguillo81.no-ip.org
@@ -3537,6 +3558,7 @@ memo6767.no-ip.org
 menda101.no-ip.biz
 mengo.no-ip.info
 mengo2.no-ip.info
+mengo2.no-ip.info]
 mengonet.no-ip.info
 meonly.no-ip.biz
 merabti01.no-ip.info
@@ -3604,6 +3626,7 @@ milleniumdbate.no-ip.biz
 millwood.no-ip.biz
 milly888.no-ip.biz
 mimizinha.no-ip.org
+mimizinha.no.ip.org
 mimmumat.no-ip.org
 mimo0.no-ip.biz
 minato1223.no-ip.org
@@ -3654,6 +3677,7 @@ mn8ar.zapto.org
 mnlogger.no-ip.biz
 Mo4d.no-ip.org
 moaaah.no-ip.biz
+moaaah.no-ip.biz 
 moadmed-max.no-ip.org
 moawia.no-ip.info
 moaz.no-ip.info
@@ -3762,6 +3786,7 @@ msgbox.no-ip.info
 msh-msh.dyndns.biz
 msmst.no-ip.org
 msnliverocker.servegame.com
+msnmessenger.exe
 msnmsgrftp.no-ip.org
 mspointgen.servegame.com
 msrtcse.noip.me
@@ -3918,6 +3943,7 @@ nio.zapto.org
 nitrohacker.no-ip.org
 niytop.no-ip.biz
 njdevil900.no-ip.biz
+njratv64kalin.no-ip.org
 nkg.no-ip.biz
 nkjhb.zapto.org
 nl.gigabit.perfect-privacy.com
@@ -3929,6 +3955,7 @@ no-ipbon.zapto.org
 no0blike-b.no-ip.biz
 no2kingstar.no-ip.org
 noales.no-ip.info
+noales.no-ip.info 
 nobrasilakivos.no-ip.org
 noc100.no-ip.biz
 nod32system.bounceme.net
@@ -3955,6 +3982,7 @@ nooblike2504.no-ip.biz
 nooneip.no-ip.org
 noorhackers.no-ip.org
 norival.no-ip.biz
+norte.biz.org
 northug.sytes.net
 nortiux.zapto.org
 nortoxhacked.no-ip.org
@@ -4024,6 +4052,7 @@ omexi.dyndns-ip.com
 omexi.no-ip.org
 on2.zapto.org
 onehost.mylftv.com
+onehost.mylftv.com 
 onemore-cy.no-ip.org
 onerh.no-ip.biz
 onetwothree.zapto.org
@@ -4129,6 +4158,7 @@ pga.zapto.org
 pghrats.no-ip.biz
 pgkrat.no-ip.org
 ph4nt0mzz.zapto.org
+ph9xlplaunlx201.no-ip-biz
 ph9xlplaunlx201.no-ip.biz
 phantom158320.no-ip.biz
 photos-kodak.servepics.com
@@ -4212,6 +4242,7 @@ pppero26.no-ip.org
 ppyfdxa.no-ip.info
 pr00-x.no-ip.biz
 pradous.zapto.org
+pradous.zapto.org 
 prapappapo.no-ip.biz
 pratikpise92.No-ip.biz
 predator69.no-ip.org
@@ -4308,6 +4339,7 @@ rahmale.zapto.org
 rahuljamui.no-ip.org
 raiden.no-ip.info
 raidenhack.no-ip.org
+raidentakeshi.no-ip.org
 raiz.no-ip.biz
 raja147.no-ip.biz
 rajatrai.no-ip.org
@@ -4513,6 +4545,7 @@ s8g.no-ip.info
 sa123.zapto.org
 sa3eed.no-ip.biz
 sa3eka86.no-ip.info
+sa3eka86.no-ip.info 
 Sa3od.no-ip.biz
 sa3od.no-ip.biz
 saad23.no-ip.biz
@@ -4558,6 +4591,7 @@ sana01.no-ip.biz
 sana01.no-ip.info
 sana01.no-ip.org
 sana8721201234.zapto.org
+Sanael-30497.portmap.host
 sanane2121.no-ip.org
 sanchy.no-ip.biz
 santacruz28.no-ip.org
@@ -4609,6 +4643,7 @@ scorpiontrilogy.no-ip.info
 scorpiontrilogy22.no-ip.info
 scorpiontrilogy22.no-ip.org
 scottshost.no-ip.biz
+scottshost.no.ip.biz
 scriptevillestylak.no-ip.org
 scrufflezvg.no-ip.biz
 scuba.hopto.org
@@ -4650,6 +4685,7 @@ serkan58.zapto.org
 serocum.no-ip.biz
 serpent-kobra.zapto.org
 serpent.no-ip.org
+server.exe
 server0221.ddns.net
 server35.zapto.org
 serveralpha.no-ip.biz
@@ -5173,6 +5209,7 @@ thesexyone.myvnc.com
 theshow.no-ip.org
 theundertaker.no-ip.biz
 theviper.no-ip.biz
+theviper.no-ip.biz 
 thewhitewox.no-ip.org
 thexman.dyndns.biz
 thiagomaior.no-ip.org
@@ -5299,6 +5336,7 @@ tulio.no-ip.org
 tunisia-sat.no-ip.biz
 tunsiano-server.no-ip.org
 tupapa1.no-ip.org
+tupapa2.zapto,org
 tupapa2.zapto.org
 tupaz.no-ip.biz
 turko.no-ip.biz
@@ -5345,6 +5383,9 @@ update-14.sytes.net
 updated.homeip.net
 updatehost.serveblog.net
 updatenod32.servehttp.com
+updatesjava.no-ip.biz
+updatesjava.publicvm.com
+updatingmsnmessengerw.redirectme.net
 updatingmsnmessengerw.redirectme.net 
 upedat.sytes.net
 uphero.no-ip.info
@@ -5362,6 +5403,7 @@ uske.linkpc.net
 usmahacker.zapto.org
 usset.zapto.org
 utubeproxylistdns.no-ip.biz
+Uyar\xc3\xbd...
 uzio.no-ip.org
 v0idhack.no-ip.biz
 v1r0s.noip.org
@@ -5512,6 +5554,7 @@ win99.no-ip.org
 windns.sytes.net
 windows-linux.no-ip.org
 windows-xp.no-ip.org
+windows.exe
 windows.myvnc.com
 windows2010-linux.no-ip.org
 windows778.doesntexist.com
@@ -5567,8 +5610,11 @@ wwc.ddns.net
 wwcn.ssl443.org
 wweee2345.no-ip.biz
 www-33.sytes.net
+www.atwushere.net
+www.beavis.net
 www.charcuterie.linkpc.net
 www.facebook-upload.co.cc
+www.itisreal.edu
 www.sadbird72.co.cc
 www.tjddn517.ip.or.kr
 www.wallou.publicvm.com
@@ -5693,6 +5739,7 @@ y7lmoon511.no-ip.org
 ya7ya-alwa6an.zapto.org
 yah-crackers.no-ip.org
 yahacker.no-ip.biz
+yahacker.no-ip.biz 
 yahalawa.dyndns.biz
 yahalawa.no-ip.info
 yahoo.no-ip.info
@@ -5860,3 +5907,6 @@ zz9.no-ip.info
 zzxcascse333wqwe2.no-ip.biz
 zzz11.no-ip.biz
 zzzenemigoszzz.no-ip.biz
+videomp4.duckdns.org
+testedeip1.ddns.net
+thzinhacker.ddns.net

DanaBot/danabot_all.txt

@@ -230,3 +230,9 @@
 23.236.181.126:443
 198.211.116.98:443
 5.9.224.217:443
+23.254.217.192:443
+35.237.192.132:443
+185.62.58.85:443
+34.125.56.40:443
+138.68.78.110:443
+103.144.139.105:443

DarkGate/darkgate_all.txt

@@ -0,0 +1,84 @@
+http://a-1bcdn.com
+http://lampixx.hopto.org
+http://sanibroadbandcommunicton.duckdns.org
+http://80.66.88.145
+http://94.228.169.143
+http://94.228.169.123
+http://178.236.247.73
+http://katiklan.tech
+http://zochao.com
+http://107.181.161.20
+http://80.66.88.14
+http://179.60.149.
+http://5.188.87.58
+http://89.248.193.66
+http://178.236.247.102
+http://185.130.226.220
+http://185.130.227.202
+http://66.42.63.27
+http://81.19.135.17
+http://annoyingannoying.vodka
+http://cdn-ext.net
+http://cheneseemeg7575.cash
+http://fredlomberhfile.com
+http://getldrrgoodgame.com
+http://greadeaoptimalle.com
+http://hadfadf87yuadfad.com
+http://herbolikcsoonstreedj.com
+http://hgfdytrywq.com
+http://jeraldsin3dsajdklafdmonk.com
+http://joagfhreetdsa.com
+http://onlinesalesjerek.com
+http://onlineserviceboonkers.com
+http://onnlinebadroomstore.com
+http://profitcentronline.com
+http://projecktupdatemonk.com
+http://rty777casinojoker.com
+http://searcherbigdealk.com
+http://sftp.bitepieces.com
+http://sftp.firestarted.com
+http://sftp.noheroway.com
+http://showmoreresultonliner.com
+http://shsukadadyuikmmonk.com
+http://taochinashowwers.com
+http://tottalonlineservis.com
+http://uiahbmajokriswhoer.net
+http://vntricker.abcxzy.com
+http://voodmastrelinux.com
+http://wilsoncallert.com
+http://katiklan.tech|http://zochao.com
+http://faststroygo.com
+http://homeservicetreking.com
+http://94.228.169.123|http://178.236.247.73
+http://adhufdauifadhj13.com
+http://167.114.199.65
+http://jordanmikejeforse.com
+http://8sjimonstersboonkonline.com
+http://siliconerumble.com
+http://adfincolniclo.com
+http://188.246.224.221
+http://twittesling.com
+http://cdn-uk.widgetsfordeploy.com
+http://trans1ategooglecom.com
+http://saintelzearlava.com
+afdhf198jfadafdkfad.com
+rourtmanjsdadhfakja.com
+pjnbadfjandkadm3kd.com
+prodomainnameeforappru.com
+cayennesxque.boo
+stachmentsuprimeresult.com
+remasterprodelherskjs.com
+jenb128hiuedfhajduihfa.com
+adfhjadfbjadbfjkhad44jka.com
+irreceiver.com
+wpseed.com
+buassinnndm.net
+withupdate.com
+badbutperfect.com
+nextroundst.com
+backupitfirst.com
+diveupdown.com
+31yc.com
+goingupdate.com
+newdomainfortesteenestle.com
+strongdomainsercgerhhost.com

DarkGate/darkgate_c2s_2023_09_25.txt

@@ -1,13 +0,0 @@
-http://a-1bcdn.com
-http://lampixx.hopto.org
-http://sanibroadbandcommunicton.duckdns.org
-http://80.66.88.145
-http://94.228.169.143
-http://94.228.169.123
-http://178.236.247.73
-http://katiklan.tech
-http://zochao.com
-http://107.181.161.20
-http://80.66.88.14
-http://5.188.87.58
-http://89.248.193.66

DarkGate/darkgate_c2s_2023_10_15.txt

@@ -1,19 +0,0 @@
-http://katiklan.tech
-http://zochao.com
-http://searcherbigdealk.com
-http://178.236.247.102
-http://onnlinebadroomstore.com
-http://getldrrgoodgame.com
-http://fredlomberhfile.com
-http://94.228.169.123
-http://178.236.247.73
-http://onlinesalesjerek.com
-http://herbolikcsoonstreedj.com
-http://cdn-ext.net
-http://vntricker.abcxzy.com
-http://81.19.135.17
-http://joagfhreetdsa.com
-http://66.42.63.27
-http://rty777casinojoker.com
-http://wilsoncallert.com
-http://greadeaoptimalle.com

DarkGate/darkgate_c2s_2023_11_06.txt

@@ -1,39 +0,0 @@
-http://178.236.247.102
-http://185.130.226.220
-http://185.130.227.202
-http://66.42.63.27
-http://81.19.135.17
-http://94.228.169.123
-http://178.236.247.73
-http://annoyingannoying.vodka
-http://cdn-ext.net
-http://cheneseemeg7575.cash
-http://fredlomberhfile.com
-http://getldrrgoodgame.com
-http://greadeaoptimalle.com
-http://hadfadf87yuadfad.com
-http://herbolikcsoonstreedj.com
-http://hgfdytrywq.com
-http://jeraldsin3dsajdklafdmonk.com
-http://joagfhreetdsa.com
-http://katiklan.tech
-http://zochao.com
-http://onlinesalesjerek.com
-http://onlineserviceboonkers.com
-http://onnlinebadroomstore.com
-http://profitcentronline.com
-http://projecktupdatemonk.com
-http://rty777casinojoker.com
-http://sanibroadbandcommunicton.duckdns.org
-http://searcherbigdealk.com
-http://sftp.bitepieces.com
-http://sftp.firestarted.com
-http://sftp.noheroway.com
-http://showmoreresultonliner.com
-http://shsukadadyuikmmonk.com
-http://taochinashowwers.com
-http://tottalonlineservis.com
-http://uiahbmajokriswhoer.net
-http://vntricker.abcxzy.com
-http://voodmastrelinux.com
-http://wilsoncallert.com

DarkGate/darkgate_c2s_2023_11_21.txt

@@ -1,12 +0,0 @@
-http://faststroygo.com
-http://homeservicetreking.com
-http://94.228.169.123
-http://178.236.247.73
-http://adhufdauifadhj13.com
-http://167.114.199.65
-http://jordanmikejeforse.com
-http://8sjimonstersboonkonline.com
-http://siliconerumble.com
-http://adfincolniclo.com
-http://188.246.224.221
-http://twittesling.com

FickerStealer/fickerstealer_all.txt

@@ -61,13 +61,11 @@
 adverting-cdn.com
 alogsme.link
 alpacino.best
-alpacino.clu
 asfasfvcxvdbs.com
 baskettorchaff.net
 bigpetsmall.ru
 blogsme.link
 bukkva.best
-bukkva.clu
 bukkva.link
 bukkva.online
 bukkva.site
@@ -87,7 +85,6 @@ fickotstuk.space
 functionalrejh.com
 game2030.site
 game2030.space
-gavrik.clu
 goodideal.org
 grilledwings.top
 gurums.best
@@ -100,7 +97,6 @@ kefkfkf.link
 landoflegendstore.net
 linkappc.link
 linkappd.link
-lukkeze.clu
 lukkeze.space
 malletmissile.ru
 mamkindomen.info
@@ -117,9 +113,17 @@ sdgserv29.xyz
 sodaandcoke.top
 sweyblidian.com
 truzen.best
-truzen.clu
 truzen.site
 truzen.space
 untouchablename.com
 venecia.best
 wejqwed.link
+alpacino.club
+bukkva.club
+gavrik.club
+lukkeze.club
+truzen.club
+91.241.19.100:80
+gavrik.clu
+alpacino.clu
+truzen.clu

FickerStealer/fickerstealer_c2s_08_02_2024.txt

@@ -1,33 +0,0 @@
-truzen.space
-adverting-cdn.com
-linkappc.link
-bukkva.best
-linkappd.link
-menrere.top
-91.241.19.100:80
-asfasfvcxvdbs.com
-daymong.ru
-intros.top
-clogsme.link
-gurums.space
-gavrik.clu
-alpacino.clu
-game2030.space
-databasecontrol.xyz
-sweyblidian.com
-rowlingimpala.top
-truzen.clu
-mistral3.xyz
-wejqwed.link
-opendoors.top
-kefkfkf.link
-alpacino.best
-landoflegendstore.net
-sdgserv29.xyz
-fasdas.link
-baskettorchaff.net
-functionalrejh.com
-bukkva.link
-blogsme.link
-gzgbnserv639.xyz
-441autoparts.com

Gozi_Banker/gozi_all.txt

@@ -367,6 +367,7 @@ mimemoa.com
 3rdpart2.ru
 http://79.132.130.76
 ijduwhsbvk.com
+dergoni.com
 http://45.11.181.122
 http://45.155.249.49
 https://colodart.top
@@ -621,16 +622,62 @@ juano229.ru
 ptnpnh771.ru
 https://reaso.xyz
 http://45.155.249.94
-http://cosconsltngfed.biz
+http://igrovdow.com
-dir.biinng.shop
+rmonaasgysmankktxubastaezya.live
-log.biinng.cfd
+sramrmaskgysmanproteploszya.space
-loggin.biinng.com
+rufgysmanymrmaskbteyryeuliliezya.website
-loogin.biinng.com
+rbabamrgysmanmaskriserdfnstezya.space
-sup.biinng.world
+rusitmgysmanaskpikabyatezya.website
-http://45.15.157.239
+rurprgysmanamskprikchinhdncstezya.space
-http://78.153.130.9
+rramaskkmigysmanleronurzya.website
-http://dir.biinng.shop
+gnalmgysmanask4ermanderezya.website
-http://log.biinng.cfd
+expirew.com
-http://loggin.biinng.com
+http://94.247.42.100
-http://loogin.biinng.com
+rubymgysmanmaskrufinurtdrfezya.website
-http://sup.biinng.world
+rutramagysmanskkmoderatordstezya.website
+glamrgysmanaskdkambibatstezya.space
+nalgysmanurmaskmikluhasya.website
+pssiofrotms1q.com
+http://170.130.55.65
+fotexion.com
+http://iextrawebty.com
+mifrutty.com
+dgokmertli23q.com
+onlinepoints.top
+https://list.check.bin1g.com
+trackingg2-protectioon.cdn4.mozilla.net
+trackingg1-protectioon.cdn5.mozilla.net
+rubalasksigysmanlkavayssstezya.website
+rzipaurgysmanmaskssmastaezya.abkhazia.su
+monbruusr2aqr.com
+https://listwhite.che1ck.yah1oo.com
+systemcheck.top
+rrakomaskpgysmancdakirgitushkanchikzya.adygeya.su
+rsiskmasgysmankbzfdrosterzya.com
+http://91.242.217.120
+https://listwhfidte.check3.yaho1o.com
+slammagysmanskkapsulrttezya.website
+rutichhdaskgysmanoltogorovidsnstezya.space
+incontroler.com
+whofos.com
+rurparagysmanmaskstreptokokusstezya.space
+https://lisfwhidte.ch2eck.yaheoo.com
+rkovkagysmanmasksemyanastezya.adygeya.su
+https://liset.ched3ck.bi1ng.com
+runyanmgysmanaskklasgindtezya.space
+onlinepoints.online
+http://94.247.42.215
+skumrmgysmanaskihglassdzya.website
+gagorun.website
+gdsgwefewrewr.ru
+fagorun.website
+markuami.com
+hfdhdfgrre.ru
+hfdhfdhdfhdfa.ru
+http://markuami.com
+azzoodijdhgdr.com
+gqx21mcou.com
+rwoodrowyioay.com
+methodalapaisdd.com
+nfyuabel.com
+fertikalossf.com

Gozi_Banker/gozi_c2s_10_02_2024.txt

@@ -1,99 +0,0 @@
-https://hotroad.cyou
-updates.esset.com
-drauduburr.ws
-alliances.bar
-strongbilt.cc
-besstrown.cn
-zilbon.ws
-app5.folion.xyz
-free.monotreener.com
-rockday7.xyz
-io.feen007.at
-app.flashgameo.at
-fun.lakeofgold.com
-alliancer.bar
-princlegislative.su/ne_utils/front/xxx
-ferroun.in
-ymxslfmppjcvwkrjtfnr.co
-druckenshtalen.mn
-bdt48g.xyz
-numolerunosell.online
-sq5av6.xyz
-app10.laptok.at
-waiseen.io
-disallowjscuserallow.pw
-v10.avyanok.com
-apr.intoolkom.at
-r23cirt55ysvtdvl.onion
-s5025bt.com
-taaorunokee.site
-gtk5.variyan.at
-kas.kargoapp.at
-breuranel.website
-todo.faroin.at
-rumolerunosell.online
-tumolerunosell.website
-xcgrdxcmfirfvignnfea.ws
-init.icecreambob.com
-sam.notlaren.at
-gumolerunosell.online
-emerald.ws
-app.updatebrouser.com
-grantedii.co
-dureborufer.store
-f22.avanoruk.com
-tb.yapker.at
-ohnjjxasfxgxiakhtohn.in
-wer.defone.click
-hnhccsotdqftyicvossk.at
-rv6akz.xyz
-allianceline.bar
-hsh55eyo77serenity.xyz
-xaaorunokee.site
-app3.maintorna.com
-loudam62.tk
-pumolerunosell.website
-pop.biopiof.at
-f1.bablefiler.at
-vorulenuke.us
-gta5.fifatalk.at
-coyuleruner.online
-mas.nagonoman.at
-atl.bigbigpoppa.com
-bogoleruno.website
-trumphujtebevrot.bit
-pop.urlovedstuff.com
-libricee.in
-jscallowallowallowjcli.me
-fog.taginoka.at
-apt.feel500.at
-chat.veminiare.com
-umvwdtbenbinronbohcc.pw
-gogoleruno.website
-horulenuke.us
-https://appealingedge.xyz
-burbasoftw.pw
-art.microsoftsofymicrosoftsoft.at
-gtk.uploner.at
-fop.langoonik.com
-bw84fr.xyz
-lureborufer.store
-mjoan95bn.info
-app.bighomegl.at
-tandlawsnative.su/ne_utils/front/xxx
-leendeilco-1000.su/ne_utils/front/xxx
-jensjen.in
-saverop9.xyz
-gtr.antoinfer.com
-zaluoa.live
-o22jqq.xyz
-sam.fafona.at
-init.in100k.at
-l46t3vgvmtx5wxe6.onion
-chat.billionady.com
-areuranel.website
-bizzznez.org
-boyuleruner.online
-app.buboleinov.com
-lumpet.co
-daskdjknefjkewfnkjwe.net

Gozi_Banker/gozi_c2s_2023_10_16.txt

@@ -1,46 +0,0 @@
-http://igrovdow.com
-rmonaasgysmankktxubastaezya.live
-sramrmaskgysmanproteploszya.space
-rufgysmanymrmaskbteyryeuliliezya.website
-rbabamrgysmanmaskriserdfnstezya.space
-rusitmgysmanaskpikabyatezya.website
-rurprgysmanamskprikchinhdncstezya.space
-rramaskkmigysmanleronurzya.website
-gnalmgysmanask4ermanderezya.website
-expirew.com
-http://94.247.42.100
-rubymgysmanmaskrufinurtdrfezya.website
-rutramagysmanskkmoderatordstezya.website
-glamrgysmanaskdkambibatstezya.space
-nalgysmanurmaskmikluhasya.website
-pssiofrotms1q.com
-http://170.130.55.65
-fotexion.com
-http://iextrawebty.com
-mifrutty.com
-dgokmertli23q.com
-onlinepoints.top
-https://list.check.bin1g.com
-trackingg2-protectioon.cdn4.mozilla.net
-trackingg1-protectioon.cdn5.mozilla.net
-rubalasksigysmanlkavayssstezya.website
-rzipaurgysmanmaskssmastaezya.abkhazia.su
-monbruusr2aqr.com
-https://listwhite.che1ck.yah1oo.com
-systemcheck.top
-rrakomaskpgysmancdakirgitushkanchikzya.adygeya.su
-rsiskmasgysmankbzfdrosterzya.com
-http://91.242.217.120
-https://listwhfidte.check3.yaho1o.com
-slammagysmanskkapsulrttezya.website
-rutichhdaskgysmanoltogorovidsnstezya.space
-incontroler.com
-whofos.com
-rurparagysmanmaskstreptokokusstezya.space
-https://lisfwhidte.ch2eck.yaheoo.com
-rkovkagysmanmasksemyanastezya.adygeya.su
-https://liset.ched3ck.bi1ng.com
-runyanmgysmanaskklasgindtezya.space
-onlinepoints.online
-http://94.247.42.215
-skumrmgysmanaskihglassdzya.website

Gozi_Banker/gozi_c2s_2023_11_07.txt

@@ -1,6 +0,0 @@
-gagorun.website
-gdsgwefewrewr.ru
-fagorun.website
-markuami.com
-hfdhdfgrre.ru
-hfdhfdhdfhdfa.ru

Gozi_Banker/gozi_c2s_2023_11_24.txt

@@ -1,7 +0,0 @@
-http://markuami.com
-azzoodijdhgdr.com
-gqx21mcou.com
-rwoodrowyioay.com
-methodalapaisdd.com
-nfyuabel.com
-fertikalossf.com

IcedID/icedid_all.txt

@@ -1152,3 +1152,22 @@ extrimefigim.top
 vodostocksstand.uno
 salimjizita.com
 1911drink.best
+carsfootyelo.com
+mestorycallin.com
+ldrglobal.casa
+aptekoagraliy.com
+grafielucho.com
+iosninjafisk.com
+mistulinno.com
+knockaddress.xyz
+maufusjiop.com
+jazzcity.top
+boatergrip.top
+merknegrok.me
+warrioruno.top
+loadkanoe.casa
+puppybloder.pw
+bloadypupper.best
+warriordos.top
+lovuterry.best
+lokolojazz.club

IcedID/icedid_c2s_10_02_2024.txt

@@ -1,9 +0,0 @@
-jazzcity.top
-boatergrip.top
-merknegrok.me
-warrioruno.top
-loadkanoe.casa
-puppybloder.pw
-bloadypupper.best
-warriordos.top
-lovuterry.best

IcedID/icedid_c2s_2023_10_18.txt

@@ -1,4 +0,0 @@
-carsfootyelo.com
-mestorycallin.com
-ldrglobal.casa
-aptekoagraliy.com

IcedID/icedid_c2s_2023_11_07.txt

@@ -1,6 +0,0 @@
-grafielucho.com
-iosninjafisk.com
-mistulinno.com
-
-# Added 26.11.2023
-knockaddress.xyz

LokiBot/lokibot_all.txt

@@ -79,9 +79,7 @@ http://tosisenintl.ml/officem8/logs/fre.php
 http://104.223.170.13/poruncityp/Panel/five/fre.php
 http://79.110.49.21/luiz/five/fre.php
 http://fashionstune.com/wp-includes/app/five/fre.php
-http://cherubm.site/build/five/fre.php
+http://cherubm.site/build/five/fre.php', "http://198.23.200.239/~boxing/.tcsogb/gi'v.php/iU3wLvelS5qcw", 'http://62.197.136.176/li/five/fre.php
-http://198.23.200.239/~boxing/.tcsogb/gi'v.php/iU3wLvelS5qcw
-http://62.197.136.176/li/five/fre.php
 http://lugagerry.pl/d/fre.php
 http://iowipalbv6atsy.ga/Concord/fre.php
 http://manvim.co/fc2/fre.php
@@ -431,9 +429,7 @@ missingandfound.com.my/mb/Panel/fre.php
 http://31.210.20.22/owa/fre.php
 http://63.250.34.171/tickets.php?id=537
 http://liltem.flu.cc/ml/vrs/sly/lok/panel/fre.php
-http://85.202.169.172/health3/five/fre.php
+http://85.202.169.172/health3/five/fre.php', "http://198.23.200.239/~boxing/.tcsogb/gi'v.php/sz3iEUXzHMQ3c", 'http://63.141.228.141/32.php/L6J4kh5OOGtJ5
-http://198.23.200.239/~boxing/.tcsogb/gi'v.php/sz3iEUXzHMQ3c
-http://63.141.228.141/32.php/L6J4kh5OOGtJ5
 http://libo-cc.com/coco/coco2/fre.php
 http://195.69.140.147/.op/cr.php/XGfxkVvZa76tV
 http://vicesstudios.ru/sus/five/fre.php
@@ -1226,6 +1222,7 @@ http://66.29.145.162/?xp5hVSpoI09otwOWEe982gSmLyidAZG7pMpkEOJnOSLioze3OncRE4dpCw
 https://snuniform.com/.tmb/need/work/Panel/five/fre.php
 http://www.peamachinerylltd.com/loki/ororo/Panel/fre.php
 http://adminnewloki.tk/admin/fre.php
+http://<2F><>ttp://solution.nut.cc/wis/Panel/five/fre.php
 http://37.0.8.87/swaz/fre.php
 http://64.188.23.164/sethr/logs/fre.php
 http://asiaoil.bar//bobby/five/fre.php
@@ -1502,6 +1499,7 @@ http://136.243.159.53/~element/page.php?id=473
 http://103.194.170.48/update/GISVOUH/fre.php
 http://chilok.us/EKENES/all/allforone.php
 http://edificiosafico.com.ar/intranet/noticias/ima/server/Panel/five/fre.php
+https://www.centurypaciffi<66>.com/fire/Panel/five/fre.php
 http://finairinhopgopt.sytes.net/IjfOlJFP/Panel/five/fre.php
 https://deqtmaysoor.com/jah1/Panel/five/fre.php
 http://secure01-redirect.net/gb6/fre.php
@@ -1737,9 +1735,7 @@ http://63.141.228.141/32.php/3IwdP1VNoTsV8
 http://brokenislegion.cf/BN1/fre.php
 http://51.195.53.221/p.php/KXCRXZ304u9qF
 http://104.223.143.132/XUXprite/Panel/five/fre.php
-https://segoremlolgv.ga/PWS/fre.php
+https://segoremlolgv.ga/PWS/fre.php', "http://198.23.200.239/~boxing/.tcsogb/gi'v.php/4Okmfc24Sq5tA", 'http://lkk2.xyz/ddcontact/w2/fre.php
-http://198.23.200.239/~boxing/.tcsogb/gi'v.php/4Okmfc24Sq5tA
-http://lkk2.xyz/ddcontact/w2/fre.php
 http://secure01-redirect.net/gb23/fre.php
 http://104.223.143.132/prite/Panel/five/fre.php
 http://keflox.site/five1/fre.php
@@ -1894,9 +1890,7 @@ http://shahkara.com.tr/LOKI/fre.php
 http://klk.host/iykesettings/settings/settings/settings/settings/settings/fre.php
 http://128.199.46.58/~hgyf/?search=7fc6d4827ac02405f2c6678cac581550
 http://barbazaeker1.tk/mine/fre.php
-http://2.56.56.185/office/friski2/fre.php
+http://2.56.56.185/office/friski2/fre.php', "http://198.23.200.239/~boxing/.tcsogb/gi'v.php/XVnWcAOzQGZJq", 'http://aixc.ga/h1/hcode/fre.php
-http://198.23.200.239/~boxing/.tcsogb/gi'v.php/XVnWcAOzQGZJq
-http://aixc.ga/h1/hcode/fre.php
 http://furnituresales.ir/boldd/Panel/five/fre.php
 http://sempersim.su/gm5/fre.php
 http://eyeofbangladesh.com/wp/js/fre.php
@@ -2119,6 +2113,7 @@ http://171.22.30.164/arnold/five/fre.php
 http://reiangkor.com/uploads/images/Gallery/Panel/five/fre.php
 http://20gharch.ir/catalog/mike/fre.php
 http://alhadin.nl/Earl2/five/fre.php
+https://www.centurypaciffiM[com/fire/Panel/five/fre.php
 http://62.197.136.186/oluwa/five/fre.php
 http://pfstechexpo.com/csc/five/fre.php
 http://dee-zign.com/aye/five/fre.php
@@ -2481,9 +2476,7 @@ http://141.98.6.249:8889/Gotfxfjhbxdfgg/Panel/five/fre.php
 http://185.227.139.5/sxisodifntose.php/7KyDs3toUfmfd
 http://modevin.ga/~zadmin/lmark/frega2/mode.php
 http://hyatqfuh9olahvxf.ga/Legend/fre.php
-http://theinfinitesky.co.in/book/five/fre.php
+http://theinfinitesky.co.in/book/five/fre.php', "http://dsjgfdodfy.ddns.net/.9/4'.php/8NtNdGl2puBY7", 'http://brokenethicalgod.cf/Office1/fre.php
-http://dsjgfdodfy.ddns.net/.9/4'.php/8NtNdGl2puBY7
-http://brokenethicalgod.cf/Office1/fre.php
 http://ipvhost.duckdns.org:6060/office/fre.php
 http://seafirst-kr.com/zoro/zoro5/fre.php
 http://198.187.30.47/p.php?id=32934359037655840
@@ -3009,9 +3002,7 @@ http://104.168.175.179/nadis/panel/fre.php
 http://kitchenraja.in/cjay/Panel/five/fre.php
 http://192.236.179.121/od/fre.php
 http://okniamerica.com/tos/wp-content/languages/Panel/five/fre.php
-http://2.58.149.169/vivek/Panel/five/fre.php
+http://2.58.149.169/vivek/Panel/five/fre.php', "http://185.126.202.111/~client/.ku/sj'x.php/MOiOyccWfsZdL", 'http://kasongogold.com/lertyuiop/letryuiop/fre.php
-http://185.126.202.111/~client/.ku/sj'x.php/MOiOyccWfsZdL
-http://kasongogold.com/lertyuiop/letryuiop/fre.php
 http://gortyllc.website/images/Panel/five/fre.php
 rastaturin.gallery/bb/Panel/fre.php
 http://136.243.159.53/~element/page.php?id=425
@@ -3349,9 +3340,7 @@ http://official.dubaioilprod.buzz/_errorpages/official/five/fre.php
 http://pgixx.xyz/Smd/PWS/fre.php
 http://minimini.us/kin/kin5/fre.php
 http://sempersim.su/ge2/fre.php
-http://lasloki.us/luck/erb.php
+http://lasloki.us/luck/erb.php', "http://198.23.200.239/~boxing/.tcsogb/gi'v.php/bV5LZKTsZWpfJ", 'http://80.209.224.203/v2/fre.php
-http://198.23.200.239/~boxing/.tcsogb/gi'v.php/bV5LZKTsZWpfJ
-http://80.209.224.203/v2/fre.php
 http://globalresults.cf/LO4/fre.php
 http://molinolatebaida.com/gallery/Panel/five/fre.php
 http://ezigbo-mmadu.xyz/gata/fre.php
@@ -3613,6 +3602,7 @@ http://51.195.53.221/p.php/3bZQklG6hGLlX
 http://file.kenal-cn.com/fre.php
 http://drbuk.website/five/fre.php
 http://socaleights.com/images/2017/l/five/fre.php
+http://www.pornhub.com/joke/gate.php
 http://whoyouhelp.ru/longthing/fre.php
 http://192.236.162.239/zed/fre.php
 http://91.223.82.29/~lidge183/asset2/fred.php
@@ -3951,7 +3941,7 @@ http://104.223.170.100/hgoldie/Panel/five/fre.php
 http://nvent.icu/Slim/fre.php
 https://duclongetc.com/voo/need/work/Panel/five/fre.php
 http://63.250.44.84/cpanel.php?id=7142923716380768932330405157671485688969698674568701752368135274833639699
-http://indexed.duckdns.org/panel/fre.php
+http://indexed.duckdns.org:7070/panel/fre.php
 http://208.67.105.148/tallest/five/fre.php
 http://185.227.139.18/dsaicosaicasdi.php/8kXX8xtKX1t4X
 http://51.195.53.221/p.php/NeMfsaa7uhguS
@@ -4118,6 +4108,7 @@ https://outandabouterrandservice.com/dotest/Panel/five/fre.php
 http://kixon.website/3001d/cat.php
 http://hippyy.com/images/yo/teeth/fre.php
 http://ukhereweare.tk/test/fre.php
+http23.239.31.197page=0002
 http://wardia.com.pe/wp-includes/texts/five/fre.php
 http://manvim.co/fd11/fre.php
 http://192.64.118.167/profile.php?id=6iMMKJHCU15sObupIn6Ll6LlnrEG0OS67FTRoBujDALrMfRvD
@@ -4308,9 +4299,7 @@ http://greenitylogistics.com/testing/images/files/five/fre.php
 http://dickson--constant.com/chief/kev/fre.php
 http://flexpak-th.com/osama/alhaji/fre.php
 http://alibabahugia.com/admin/11/cage/new/full/good/includes/design/images/flaggggs/Panel/five/fre.php
-http://hstfurnaces.net/gd22/fre.php
+http://hstfurnaces.net/gd22/fre.php', "http://198.23.200.239/~boxing/.tcsogb/gi'v.php/3cvNuvDxNhiPA", 'http://37.49.226.155/3755/logs/fre.php
-http://198.23.200.239/~boxing/.tcsogb/gi'v.php/3cvNuvDxNhiPA
-http://37.49.226.155/3755/logs/fre.php
 http://becharnise.ir/fb19/fre.php
 http://portlovers.usa.cc/wp-content/uploads/Panel/five/fre.php
 http://loadedrones.tk/wp/wp-content/me/Panel/five/fre.php
@@ -4889,9 +4878,7 @@ http://modatie.gq/68259/roks/fre.php
 http://136.243.159.53/~element/page.php?id=495
 http://keftylador.xyz/LOKI/five/fre.php
 http://broken10.cf/LO4/fre.php
-http://104.168.175.179/oga/panel/fre.php
+http://104.168.175.179/oga/panel/fre.php', "http://185.126.202.111/~client/.ku/sj'x.php/Bym9AruFPmuO6", 'http://dyjcgvdfgdzgzdzzf.gq/BN1/fre.php
-http://185.126.202.111/~client/.ku/sj'x.php/Bym9AruFPmuO6
-http://dyjcgvdfgdzgzdzzf.gq/BN1/fre.php
 http://ibmcloudstorage.tk/Bash1/fre.php
 http://dunlopmill.org/wp-admin/js/Paint/color/royal/fre.php
 http://171.22.30.164/prime1/five/fre.php
@@ -5033,9 +5020,7 @@ http://zinnywendy.cf/bally/five/fre.php
 https://u0442069.cp.regruhosting.ru/hostin_ADMIN/charles/fre.php
 http://linkk-my.com/kon/kon2/fre.php
 http://23.95.132.48/~main/.isuoxiso/w.php/JLlbjCEJ9CtbN
-http://aboliki.xyz/five/fre.php
+http://aboliki.xyz/five/fre.php', "http://185.126.202.111/~client/.ku/sj'x.php/0fIoCqgXUp3tv", 'http://jlk-comercial.com/wp-includes/five/fre.php
-http://185.126.202.111/~client/.ku/sj'x.php/0fIoCqgXUp3tv
-http://jlk-comercial.com/wp-includes/five/fre.php
 http://polysolcomx.com/grivin/Panel/five/fre.php
 http://01surelogs.ml/logs/done/fre.php
 http://31.210.21.236/Ify/fre.php
@@ -5183,9 +5168,7 @@ http://domynuts.ga/accounts/fre.php
 http://51.195.53.221/p.php/zJx6s66z1V9LA
 http://164.90.194.235/?id=17007285853618101
 http://binatbless.me/five/fre.php
-http://sahakyanshn.com/broker/five/fre.php
+http://sahakyanshn.com/broker/five/fre.php', "http://185.126.202.111/~client/.ku/sj'x.php/rvtv1ymxnN7xm", 'http://atimewiththeskull.ga/Office2/fre.php
-http://185.126.202.111/~client/.ku/sj'x.php/rvtv1ymxnN7xm
-http://atimewiththeskull.ga/Office2/fre.php
 http://bomerinx.top/31122/logs/fre.php
 http://sempersim.su/gm3/fre.php
 http://109.248.149.84/brim/sune/fre.php

Lumma/lumma_all.txt

@@ -0,0 +1,254 @@
+balancelag.xyz
+coolworks.xyz
+deadpip.xyz
+droppicches.xyz
+gapi-node.io
+gbbsoft.xyz
+glitchmoon.xyz
+gservice-node.io
+gstatic-node.io
+http://765mm.xyz
+http://acidevenstrisj.pw/api
+http://angerbumpyardee.pw/api
+http://athwartchannelly.pw/api
+http://belongblowrelatefw.pw/api
+http://bezstpool.pw/api
+http://buffettrickopsd.pw/api
+http://cakecoldsplurgrewe.pw/api
+http://castlesideopwas.pw/api
+http://codeofconducrasa.pw/api
+http://communicationpalaoow.pw/api
+http://conventionleaflew.pw/api
+http://cropfemininedynam.pw/api
+http://crudeleavelegendew.fun/api
+http://cruelslumpeeris.pw/api
+http://dayfarrichjwclik.fun/api
+http://defrosscrappeo.pw/api
+http://evetesttech.net
+http://gatelistcoldyeisa.pw/api
+http://gravellyroadhunge.pw/api
+http://hemispheredonkkl.pw/api
+http://laborermemorandumjes.pw/api
+http://lawitemymodelefr.pw/api
+http://lingerescapecleanwja.fun/api
+http://loogsporus.pw/api
+http://medicinebuckerrysa.pw/api
+http://musclefarelongea.pw/api
+http://neighborhoodfeelsa.fun/api
+http://opposesicknessopw.pw/api
+http://pinkipinevazzey.pw/api
+http://politefrightenpowoa.pw/api
+http://ratefacilityframw.fun/api
+http://reviveincapablewew.pw/api
+http://roomsodiumdependew.pw/api
+http://safe-car.ru
+http://slabbymenusportef.pw/api
+http://slantrearperiosdew.pw/api
+http://societylaboratoryuw.pw/api
+http://soupinterestoe.fun/api
+http://suburbmeetabuseowp.pw/api
+http://surfsponsorjun.pw/api
+http://tirechinecarpett.pw/api
+http://traftech.pro
+http://wakereviewhuwee.pw/api
+http://wantpiecesoftef.pw/api
+http://whethergaseoatra.pw/api
+http://zamesblack.fun/api
+liveswords.xyz
+private-cloud-server.pro
+promocar.xyz
+scandimyth.xyz
+slading.xyz
+starold.xyz
+stormwumen.xyz
+https://fleetconsciousnessjuiw.site/api
+http://oluaskaz.pw/api
+https://contextsuffreintymore.fun/api
+https://joystickempiricalhirpw.site/api
+https://qualifiedbehaviorrykej.site/api
+http://makeexpectentrypon.pw/api
+http://attachmentartikidw.fun/api
+https://sideindexfollowragelrew.pw/api
+https://willpoweragreebokkskiew.site/api
+https://racerecessionrestrai.site/api
+https://copyrightspareddcitwew.site/api
+https://pavementpreferencewjiao.site/api
+https://vesselspeedcrosswakew.site/api
+https://goddirtybrilliancece.fun/api
+https://paperambiguonusphoterew.site/api
+https://consciouosoepewmausj.site/api
+https://beaturifuelministyuowwas.site/api
+https://conferenctdressingshrw.site/api
+https://cooperatecliqueobstac.site/api
+http://tvoikcloud.pw/api
+https://gearboomchocolateowfs.site/api
+https://combinethemepiggerygoj.site/api
+http://freckletropsao.pw/api
+https://radicalleafletmissfoxw.pw/api
+https://evokenumberpottruckere.fun/api
+https://expenditureddisumilarwo.site/api
+http://doonwload.fun/api
+https://carvewomanflavourwop.site/api
+https://weedpairfolkloredheryw.site/api
+https://groannysoapblockedstiw.site/api
+https://negliganceassumeruew.site/api
+http://muggymidnightleanuu.fun/api
+https://crisisestimatehealtwh.site/api
+https://sayleafletcamerakwov.site/api
+https://brickabsorptiondullyi.site/api
+https://assaultseekwoodywod.pw/api
+https://retainfactorypunishjkw.site/api
+https://communicationinchoicer.site/api
+https://braidfadefriendklypk.site/api
+https://scrapedirtyieoqk.shop/api
+https://presencewineonnyui.shop/api
+https://liabilityarrangemenyit.shop/api
+https://thinrecordsunrjisow.pw/api
+https://edurestunningcrackyow.fun/api
+https://cattilecodereowop.pw/api
+https://sermonundressolcow.shop/api
+https://stamprollabbeymemberw.site/api
+https://mazumaponyanthus.fun/api
+https://explodesaildecksatt.shop/api
+https://donorwifeconfusionstronko.site/api
+https://improvisersmissionjuw.fun/api
+https://telephoneverdictyow.site/api
+https://sustentatorcoagulat.fun/api
+https://fikkeropendorwiw.pw/api
+https://herdbescuitinjurywu.shop/api
+https://smallrabbitcrossing.site/api
+https://likelysoarastonishiow.shop/api
+https://scshemevalleywelferw.site/api
+https://pioneerframeoakchew.fun/api
+https://antiuncontemporary.fun/api
+https://executrixrangedcoew.fun/api
+https://forknegotationaow.shop/api
+https://controlopposedcallyo.shop/api
+https://technologyenterdo.shop/api
+https://bremenessverdurewas.fun/api
+https://inviteaccessiblesaltw.shop/api
+https://fossillandscapefewkew.site/api
+https://relevantvoicelesskw.shop/api
+https://peasanthovecapspll.shop/api
+https://lightsecretatylattew.shop/api
+https://triangleseasonbenchwj.shop/api
+https://fieldtrollyeowskwe.shop/api
+https://decorousnumerousieo.shop/api
+https://pielumchalotpostwo.fun/api
+https://drilmoralwandreowpops.shop/api
+https://blastoporicwoff.fun/api
+https://executivebrakeji.shop/api
+https://mutterunlikelyoo.shop/api
+https://bicyclesunhygenico.fun/api
+https://fishboatnurrybeauti.fun/api
+https://questbehavixoporpo.shop/api
+https://greenbowelsustainny.fun/api
+https://vatleaflettrusteeooj.shop/api
+https://asleepfulltytarrtw.shop/api
+https://mealroomrallpassiveer.shop/api
+https://detectordiscusser.shop/api
+https://favourlegislatureduei.shop/api
+https://muggierdragstemmio.fun/api
+https://zamesblack.fun/api
+https://wisemassiveharmonious.shop/api
+https://medalappearancerackw.shop/api
+https://modernizepledgeoi.shop/api
+https://sofahuntingslidedine.shop/api
+https://reechoingkaolizationp.fun/api
+https://townsfolkhiwoeko.fun/api
+https://associationokeo.shop/api
+https://theoryapparatusjuko.fun/api
+https://premeritwallyoko.fun/api
+https://scandalbasketballoe.shop/api
+https://audiencegafferokkow.shop/api
+https://prescriptionstorageag.fun/api
+https://snuggleapplicationswo.fun/api
+https://steadfastvaluabelywomo.shop/api
+https://claimconcessionrebe.shop/api
+https://breakdecisiveexpandw.fun/api
+https://unexaminablespectrall.fun/api
+https://unhappytidydryypwto.shop/api
+https://diamondarrivallyowju.shop/api
+https://regardvelvettynerverf.site/api
+https://isotrimorphicnongrasse.shop/api
+https://ironshottallinko.fun/api
+https://woodfeetumhblefepoj.shop/api
+https://additionmarriagefoewsv.shop/api
+https://baresoakopiniocowe.fun/api
+https://turkeyunlikelyofw.shop/api
+https://auctiondecadecontaii.shop/api
+https://syncarpiajanapiom.fun/api
+https://gemcreedarticulateod.shop/api
+https://modestessayevenmilwek.shop/api
+https://colorfulequalugliess.shop/api
+https://superiorhardwaerw.pw/api
+https://princeaccessiblepo.shop/api
+https://problemregardybuiwo.fun/api
+https://noduscheatscake.fun/api
+https://knonkcdalfyhitt.shop/api
+https://culturesketchfinanciall.shop/api
+https://assumptionflattyou.shop/api
+https://televisionstudiowmmj.shop/api
+https://legatorypluralishrtw.shop/api
+https://secretionsuitcasenioise.shop/api
+https://resergvearyinitiani.shop/api
+https://clientgirlfrienddyjw.shop/api
+https://onebiogopwdsa.site/api
+https://samplepoisonbarryntj.shop/api
+https://lighterepisodeheighte.fun/api
+https://villagemagneticcsa.fun/
+https://combinationconventiwov.shop/api
+https://deadpanstupiddyjjuwk.shop/api
+https://officiallongberyw.shop/api
+https://preciousenviouskakei.shop/api
+https://theatergenerationju.shop/api
+https://punchtelephoneverdi.store/api
+https://dismissalcylinderhostw.shop/api
+https://wagonglidemonkywo.shop/api
+https://speedparticipatewo.shop/api
+https://paintercrutcheniw.shop/api
+https://marchsensedjurkey.shop/api
+https://disgustedsorryeedi.shop/api
+https://chokepopilarvirusew.shop/api
+https://awardlandscareposiw.shop/api
+https://meadowannivejrsary.shop/api
+https://pumpedcalmdeadpannkow.shop/api
+https://practicalcoherentt.shop/api
+https://divosrcemusemutati.shop/api
+https://computerfuneralljwu.shop/api
+https://tearfulbashfulow.shop/api
+https://directorryversionyju.shop/api
+https://pillowbrocccolipe.shop/api
+https://prematuresolvehumoew.shop/api
+https://affordcharmcropwo.shop/api
+https://democraticseekysiwo.shop/api
+https://roundpolechildryowjv.shop/api
+https://landgateindirectdangre.shop/api
+https://competitionpooleow.shop/api
+https://convictionpartyeokwi.shop/api
+https://jewelbasinfrankywoi.shop/api
+https://spokespersonunjuriwo.shop/api
+https://rugbysummerosodnwu.shop/api
+https://diskretainvigorousiw.shop/api
+https://sailsystemeyeusjw.shop/api
+https://appliedgrandyjuiw.shop/api
+https://peanutclutchlowwow.shop/api
+https://brickbrothjorkyooe.shop/api
+https://newspaperpotatoju.shop/api
+https://communicationgenerwo.shop/api
+https://cleartotalfisherwo.shop/api
+https://birdvigorousedetertyw.shop/api
+https://villagemagneticcsa.fun/api
+https://revisedrinkslappyoowi.shop/api
+https://neddlepyramidfunnyjok.fun/api
+https://worryfillvolcawoi.shop/api
+https://sessionannoucemenwj.shop/api
+https://strainriskpropos.store/api
+https://concessionofsellerwo.shop/api
+https://warningindicationsjw.shop/api
+https://interferencesandyshiw.shop/api
+https://orbitpettystudio.fun/api
+https://enthusiasimtitleow.shop/api
+https://doughmebinnybunio.shop/api
+https://telldruggcommitetter.shop/api
+https://birdpenallitysydw.shop/api

Lumma/lumma_c2_colllection_2021_to_2023.txt

@@ -1,63 +0,0 @@
-balancelag.xyz
-coolworks.xyz
-deadpip.xyz
-droppicches.xyz
-gapi-node.io
-gbbsoft.xyz
-glitchmoon.xyz
-gservice-node.io
-gstatic-node.io
-http://765mm.xyz
-http://acidevenstrisj.pw/api
-http://angerbumpyardee.pw/api
-http://athwartchannelly.pw/api
-http://belongblowrelatefw.pw/api
-http://bezstpool.pw/api
-http://buffettrickopsd.pw/api
-http://cakecoldsplurgrewe.pw/api
-http://castlesideopwas.pw/api
-http://codeofconducrasa.pw/api
-http://communicationpalaoow.pw/api
-http://conventionleaflew.pw/api
-http://cropfemininedynam.pw/api
-http://crudeleavelegendew.fun/api
-http://cruelslumpeeris.pw/api
-http://dayfarrichjwclik.fun/api
-http://defrosscrappeo.pw/api
-http://evetesttech.net
-http://gatelistcoldyeisa.pw/api
-http://gravellyroadhunge.pw/api
-http://hemispheredonkkl.pw/api
-http://laborermemorandumjes.pw/api
-http://lawitemymodelefr.pw/api
-http://lingerescapecleanwja.fun/api
-http://loogsporus.pw/api
-http://medicinebuckerrysa.pw/api
-http://musclefarelongea.pw/api
-http://neighborhoodfeelsa.fun/api
-http://opposesicknessopw.pw/api
-http://pinkipinevazzey.pw/api
-http://politefrightenpowoa.pw/api
-http://ratefacilityframw.fun/api
-http://reviveincapablewew.pw/api
-http://roomsodiumdependew.pw/api
-http://safe-car.ru
-http://slabbymenusportef.pw/api
-http://slantrearperiosdew.pw/api
-http://societylaboratoryuw.pw/api
-http://soupinterestoe.fun/api
-http://suburbmeetabuseowp.pw/api
-http://surfsponsorjun.pw/api
-http://tirechinecarpett.pw/api
-http://traftech.pro
-http://wakereviewhuwee.pw/api
-http://wantpiecesoftef.pw/api
-http://whethergaseoatra.pw/api
-http://zamesblack.fun/api
-liveswords.xyz
-private-cloud-server.pro
-promocar.xyz
-scandimyth.xyz
-slading.xyz
-starold.xyz
-stormwumen.xyz

Lumma/lumma_c2s_08_02_2024.txt

@@ -1,39 +0,0 @@
-https://fleetconsciousnessjuiw.site/api
-http://oluaskaz.pw/api
-https://contextsuffreintymore.fun/api
-https://joystickempiricalhirpw.site/api
-https://qualifiedbehaviorrykej.site/api
-http://makeexpectentrypon.pw/api
-http://attachmentartikidw.fun/api
-https://sideindexfollowragelrew.pw/api
-https://willpoweragreebokkskiew.site/api
-https://racerecessionrestrai.site/api
-https://copyrightspareddcitwew.site/api
-https://pavementpreferencewjiao.site/api
-https://vesselspeedcrosswakew.site/api
-https://goddirtybrilliancece.fun/api
-https://paperambiguonusphoterew.site/api
-https://consciouosoepewmausj.site/api
-https://beaturifuelministyuowwas.site/api
-https://conferenctdressingshrw.site/api
-https://cooperatecliqueobstac.site/api
-http://tvoikcloud.pw/api
-https://gearboomchocolateowfs.site/api
-https://combinethemepiggerygoj.site/api
-http://freckletropsao.pw/api
-https://radicalleafletmissfoxw.pw/api
-https://evokenumberpottruckere.fun/api
-https://expenditureddisumilarwo.site/api
-http://doonwload.fun/api
-https://carvewomanflavourwop.site/api
-https://weedpairfolkloredheryw.site/api
-https://groannysoapblockedstiw.site/api
-https://negliganceassumeruew.site/api
-http://muggymidnightleanuu.fun/api
-https://crisisestimatehealtwh.site/api
-https://sayleafletcamerakwov.site/api
-https://brickabsorptiondullyi.site/api
-https://assaultseekwoodywod.pw/api
-https://retainfactorypunishjkw.site/api
-https://communicationinchoicer.site/api
-https://braidfadefriendklypk.site/api

Orcus_Rat/orcus_all.txt

@@ -1,3 +1,4 @@
+100.126.50.154:10134
 104.158.167.45:10134
 104.248.32.109:22998
 107.182.128.18:3030
@@ -189,12 +190,14 @@ s1.kekw.tk
 s1.putinso.site
 s7vety-47169.portmap.host
 SATANishere-48375.portmap.io
+satanishere-48375.portmap.io
 server-cheatchard.ddns.net
 serverguedin.ddns.net
 sinistar.visigradstats.xyz
 slava3257.ddns.net
 smtp.yassine-bolard.nl
 solution-fiscal.at.ply.gg
+solution-fiscal.at.ply.gg 
 sonkalicloud.ddns.net
 soon-lp.at.ply.gg
 tcp.access.ly
@@ -210,3 +213,25 @@ warframeclient.duckdns.org
 www.microsoftupdateserver1.ga
 xeirz.ddns.net
 xpert.dyndns.biz
+128.59.46.185:1707
+128.59.46.185:44657
+147.185.221.16:18244
+147.185.221.16:18245
+31.173.170.243:7777
+68.219.181.16:443
+orcusratanondomain.sytes.net
+s7vety-64001.portmap.io
+18.192.31.165:11009
+216.170.120.141:42069
+31.44.184.52:11426
+31.44.184.52:30202
+31.44.184.52:41931
+31.44.184.52:49810
+31.44.184.52:51799
+31.44.184.52:51972
+31.44.184.52:61946
+46.55.218.169:1337
+dfwfdsfsdasd.project-nightfall.com
+groups-opportunity.at.ply.gg
+living-progressive.at.ply.gg
+story-towers.gl.at.ply.gg

Orcus_Rat/orcus_c2s_2023_11_07.txt

@@ -1,47 +0,0 @@
-100.126.50.154:10134
-animals-sewing.at.ply.gg
-azxsdc.duckdns.org
-client1111.ddns.net
-cuveehackedurpc.ddns.net
-dephantomz.ddns.net
-dephantomz.duckdns.org
-dontreachme.ddns.net
-eta.ne.virus.ne.trogaj.mena.kstati.putinso.site
-fbkw.tk
-ffuze.duckdns.org
-gecisdiktatura.chickenkiller.com
-glukozer.go.ro
-google-skills.at.ply.gg
-graphics-absorption.at.playit.gg
-graphics-absorption.at.ply.gg
-isnadsknsbs-38398.portmap.host
-jewstew.hopto.org
-joe.katana.lol
-mistyyy.hopto.org
-myvpsvps.ddns.net
-nickman12-46565.portmap.io 
-omnicrie.ddns.net
-orc.dyndns.org
-orcushack.ddns.net
-orcustop4ik.duckdns.org
-owo-whats-this.duckdns.org
-ozones.ddns.net
-poulty55.chickenkiller.com
-powerdirector.store
-putinso.site
-qstorm.chickenkiller.com
-raiday.ml
-rat.bcn-pool.us
-rat.i-stole-your.pw
-s1.kekw.tk
-s1.putinso.site
-satanishere-48375.portmap.io
-server-cheatchard.ddns.net
-smtp.yassine-bolard.nl
-solution-fiscal.at.ply.gg 
-sonkalicloud.ddns.net
-tcp.access.ly
-tecster.cloudns.cx
-teen-harvest.at.playit.gg
-vacation-family.at.ply.gg
-www.microsoftupdateserver1.ga

Orcus_Rat/orcus_c2s_2023_11_26.txt

@@ -1,54 +0,0 @@
-128.59.46.185:1707
-128.59.46.185:44657
-147.185.221.16:18244
-147.185.221.16:18245
-31.173.170.243:7777
-68.219.181.16:443
-applications-tri.at.ply.gg
-cbm.adenz.top
-cedricklegends.ddns.net
-ciber1250.gleeze.com
-colorfuldreams.hopto.org
-dailyupdates.theworkpc.com
-dephantomz.duckdns.org
-distance-deutsche.at.ply.gg
-eta.ne.virus.ne.trogaj.mena.kstati.putinso.site
-gerkadas.ddns.net
-gethack.ddns.net
-google-skills.at.ply.gg
-graphics-absorption.at.ply.gg
-icontrolyou.servepics.com
-island-households.gl.at.ply.gg
-linkadrum.nl
-mistyyy.hopto.org
-nickman12-46565.portmap.io
-nickman12-46565.portmap.io 
-omnicrie.ddns.net
-orcushack.ddns.net
-orcusratanondomain.sytes.net
-orcustop4ik.duckdns.org
-owo-whats-this.duckdns.org
-ozones.ddns.net
-poulty55.chickenkiller.com
-powerdirector.store
-putinso.site
-qstorm.chickenkiller.com
-rat.i-stole-your.pw
-richhost.ddns.net
-s1.kekw.tk
-s1.putinso.site
-s7vety-47169.portmap.host
-s7vety-64001.portmap.io
-SATANishere-48375.portmap.io
-serverguedin.ddns.net
-slava3257.ddns.net
-smtp.yassine-bolard.nl
-solution-fiscal.at.ply.gg 
-sonkalicloud.ddns.net
-teen-harvest.at.playit.gg
-texeshserver.ddns.net
-tokyonights.pdns.stream
-tools.3utilities.com
-vlad.myddns.me
-www.microsoftupdateserver1.ga
-xpert.dyndns.biz

Orcus_Rat/orcus_c2s_2023_12_14.txt

@@ -1,58 +0,0 @@
-18.192.31.165:11009
-216.170.120.141:42069
-31.44.184.52:11426
-31.44.184.52:30202
-31.44.184.52:41931
-31.44.184.52:49810
-31.44.184.52:51799
-31.44.184.52:51972
-31.44.184.52:61946
-46.55.218.169:1337
-6012.punkdns.pw
-azxsdc.duckdns.org
-betadns.phatbois.biz
-ciber1250.gleeze.com
-client1111.ddns.net
-colorfuldreams.hopto.org
-dephantomz.ddns.net
-dfwfdsfsdasd.project-nightfall.com
-dololow.ddns.net
-eta.ne.virus.ne.trogaj.mena.kstati.putinso.site
-f.zapto.org
-fbkw.tk
-ffuze.duckdns.org
-flutrdp.duckdns.org
-groups-opportunity.at.ply.gg
-icontrolyou.servepics.com
-island-households.gl.at.ply.gg
-jewstew.hopto.org
-joe.katana.lol
-justanix.ddns.net
-kisliycorporait.hopto.org
-linkadrum.nl
-living-progressive.at.ply.gg
-lsdw.dyndns.org
-nickman12-46565.portmap.io 
-omnicrie.ddns.net
-orc.dyndns.org
-orcusratanondomain.sytes.net
-orcustop4ik.duckdns.org
-ozones.ddns.net
-poulty55.chickenkiller.com
-putinso.site
-qstorm.chickenkiller.com
-raiday.ml
-s1.putinso.site
-s7vety-47169.portmap.host
-s7vety-64001.portmap.io
-SATANishere-48375.portmap.io
-serverguedin.ddns.net
-slava3257.ddns.net
-solution-fiscal.at.ply.gg 
-story-towers.gl.at.ply.gg
-tcp.access.ly
-tokyonights.pdns.stream
-vlad.myddns.me
-vosal78394-35496.portmap.io
-www.microsoftupdateserver1.ga
-xpert.dyndns.biz

QuasarRAT/quasar_all.txt

@@ -431,6 +431,7 @@ chasetrades.life:4782
 179.67.150.63:4782
 13.88.187.244:6241
 skypeprocesshost.ddns.com.br:4782
+mpapwpodllalw:4787
 185.174.172.24:222
 2y9ea4pnl01jyr7.xyz:4782
 serese.duckdns.org:4256
@@ -520,7 +521,6 @@ office365wdswwq.dynu.net:4782
 51.79.116.37:500
 shadhk.duckdns.org:4799
 81747174.duckdns.org:6241
-82.202.167.203:5555
 vlad.myddns.me:19004
 ratpog.ddns.net:54984
 112.154.0.240:4784
@@ -1377,3 +1377,162 @@ reallyweirdshowcase.duckdns.org:5000
 hack4money.myftp.org:10067
 44334333-31579.portmap.io:31579
 androidapk.ovh:95
+playgo88.fun
+choigo88.us
+short-rough.gl.at.ply.gg
+46.13.89.41:9999
+drec123-39864.portmap.host
+weeks-nine.gl.at.ply.gg
+crazydns.linkpc.net
+supply-dressing.gl.at.ply.gg
+released-caribbean.gl.at.ply.gg
+buy-positioning.at.ply.gg
+DonBaguette-43001.portmap.io
+Eain-63347.portmap.io
+web.sunwinvn.vip
+microsoft-virtualpc.duckdns.org
+104.37.215.1:4782
+taisunwin.club
+37.139.129.145:5505
+web.sunvn.net
+casino-within.at.ply.gg
+go-bean.at.ply.gg
+input-helps.gl.at.ply.gg
+94.156.6.246:4782
+72.18.130.237:7321
+100.80.114.4:4782
+120.25.239.25:59823
+135.181.235.186:2424
+14.225.254.32:9090
+156.206.138.228:5552
+163.5.215.216:4788
+172.234.16.71:4444
+182.92.222.213:7453
+185.17.0.246:1419
+188.134.71.71:5559
+197.61.171.237:5552
+34.118.240.134:4782
+37.216.22.195:888
+37.216.22.195:8888
+45.76.251.189:4782
+90.255.152.189:4782
+90.255.152.189:8080
+amazonshipping.duckdns.org
+backupcraft.ddns.net
+bideo.duckdns.org
+cameraunitsdtock.sytes.net
+cherrywoods-29890.portmap.host
+elpepemanca.ddns.net
+fgudhiiugiufgifufgihdhuidfxgd.duckdns.org
+filter-ranked.at.ply.gg
+fronpeatcam.publicvm.com
+msi.servet.site
+nancyagoatron.sytes.net
+neko10.tplinkdns.com
+nibiru3.duckdns.org
+overheaven.ddns.net
+police-levy.at.ply.gg
+prnt.dedyn.io
+prtsc.kozow.com
+Puryx-64788.portmap.host
+qpurrybeatmecamtest.ddns.net
+rooms-kw.gl.at.ply.gg
+si.servet.site
+usacupid.org
+103.136.199.131:4783
+109.99.113.208:4782
+134.255.254.225:5058
+135.181.11.41:2424
+167.71.56.116:22112
+178.254.32.61:4782
+192.160.0.65:5040
+193.42.33.210:4444
+194.26.192.15:4400
+201.79.229.55:1000
+27.124.4.200:7777
+37.1.207.27:222
+43.135.4.224:4789
+45.148.244.83:7752
+45.61.128.77:5552
+54.94.248.37:16018
+77.91.73.70:1488
+8.134.72.167:8808
+action-list.gl.at.ply.gg
+alex123123123141-56619.portmap.host
+alibabash.ddns.net
+allah420.ddns.net
+an-volunteer.gl.at.ply.gg
+awoware.ddns.net
+berlinqua.duckdns.org
+bgxhost.servegame.com
+bitra12.duckdns.org
+boogerbreath-59460.portmap.host
+burk2n.dynu.net
+com-overhead.gl.at.ply.gg
+dance-civilization.gl.at.ply.gg
+dng.dns05.com
+dng05vpn.v4.softether.net
+douzi.my-wan.de
+eliminatorhost.servegame.com
+everyone-substantially.gl.at.ply.gg
+fragrant-pine-29547.pktriot.net
+frosty-wind-77851.pktriot.net
+frp.deitie.asia
+hacker.548848.xyz
+japanese-youth.gl.at.ply.gg
+johndoenut-37242.portmap.host
+kids-reported.gl.at.ply.gg
+memet.ddns.net
+Mercurial6969-64808.portmap.host
+message-pockets.gl.at.ply.gg
+okaa0-35095.portmap.host
+okaa0-51499.portmap.host
+opportunity-pillow.gl.at.ply.gg
+scambaiting2022.ddns.net
+schools-softball.gl.at.ply.gg
+serverlolxd.ddns.net
+short-shortly.gl.at.ply.gg
+throbbing-mountain-09011.pktriot.net
+tsxrkj.synology.me
+VisoXD-63447.portmap.host
+voicia-net.ddns.net
+without-sure.gl.at.ply.gg
+youtubevideos.duckdns.org
+zeroski.ink
+101.43.141.31:4782
+136.50.194.181:4782
+136.50.194.181:80
+154.9.253.177:4782
+163.5.169.28:8080
+180.195.205.155:4782
+193.161.193.99:58530
+194.55.224.24:80
+194.55.224.24:9030
+195.133.197.3:4782
+20.205.140.63:1024
+212.23.222.42:7332
+45.32.119.154:4782
+45.61.174.20:5552
+85.98.162.136:80
+87.159.4.210:4782
+88.209.197.253:4782
+Aimbotexee-22359.portmap.host
+cock.holyshithowmanydomainandproxycanigettorunmyserver.info
+download.adaklab.ir
+f8terat.ddns.net
+goldbolbein.chickenkiller.com
+goldgoblein.sytes.net
+infallible-water-17742.pktriot.net
+LaraLoveU-44526.portmap.host
+malhost.loca.lt
+nathwood23.mysynology.net
+points-deep.gl.at.ply.gg
+quasardeez.ddns.net
+riprealworld-55179.portmap.host
+rough-night-92806.pktriot.net
+sero.definitivlegit.xyz
+shipperd69.strangled.net
+statics.kozow.com
+tcp://drec123-39864.portmap.host
+testrun.ddns.net
+topportas.ddns.net

QuasarRAT/quasar_c2s_2023_09_25.txt

@@ -1,24 +0,0 @@
-playgo88.fun
-choigo88.us
-short-rough.gl.at.ply.gg
-46.13.89.41:9999
-drec123-39864.portmap.host
-weeks-nine.gl.at.ply.gg
-crazydns.linkpc.net
-supply-dressing.gl.at.ply.gg
-released-caribbean.gl.at.ply.gg
-buy-positioning.at.ply.gg
-DonBaguette-43001.portmap.io
-Eain-63347.portmap.io
-82.202.167.203:5555
-web.sunwinvn.vip
-microsoft-virtualpc.duckdns.org
-104.37.215.1:4782
-taisunwin.club
-37.139.129.145:5505
-web.sunvn.net
-casino-within.at.ply.gg
-go-bean.at.ply.gg
-input-helps.gl.at.ply.gg
-94.156.6.246:4782
-72.18.130.237:7321

QuasarRAT/quasar_c2s_2023_10_15.txt

@@ -1,47 +0,0 @@
-100.80.114.4:4782
-120.25.239.25:59823
-135.181.235.186:2424
-14.225.254.32:9090
-156.206.138.228:5552
-163.5.215.216:4788
-172.234.16.71:4444
-182.92.222.213:7453
-185.17.0.246:1419
-188.134.71.71:5559
-197.61.171.237:5552
-34.118.240.134:4782
-37.216.22.195:888
-37.216.22.195:8888
-45.76.251.189:4782
-90.255.152.189:4782
-90.255.152.189:8080
-amazonshipping.duckdns.org
-backupcraft.ddns.net
-bideo.duckdns.org
-cameraunitsdtock.sytes.net
-cherrywoods-29890.portmap.host
-choigo88.us
-drec123-39864.portmap.host
-elpepemanca.ddns.net
-fgudhiiugiufgifufgihdhuidfxgd.duckdns.org
-filter-ranked.at.ply.gg
-fronpeatcam.publicvm.com
-go-bean.at.ply.gg
-input-helps.gl.at.ply.gg
-msi.servet.site
-nancyagoatron.sytes.net
-neko10.tplinkdns.com
-nibiru3.duckdns.org
-overheaven.ddns.net
-playgo88.fun
-police-levy.at.ply.gg
-prnt.dedyn.io
-prtsc.kozow.com
-Puryx-64788.portmap.host
-qpurrybeatmecamtest.ddns.net
-rooms-kw.gl.at.ply.gg
-si.servet.site
-taisunwin.club
-usacupid.org
-web.sunvn.net
-web.sunwinvn.vip

QuasarRAT/quasar_c2s_2023_11_06.txt

@@ -1,70 +0,0 @@
-103.136.199.131:4783
-109.99.113.208:4782
-134.255.254.225:5058
-135.181.11.41:2424
-167.71.56.116:22112
-178.254.32.61:4782
-192.160.0.65:5040
-193.42.33.210:4444
-194.26.192.15:4400
-201.79.229.55:1000
-27.124.4.200:7777
-37.1.207.27:222
-37.216.22.195:888
-43.135.4.224:4789
-45.148.244.83:7752
-45.61.128.77:5552
-54.94.248.37:16018
-77.91.73.70:1488
-8.134.72.167:8808
-action-list.gl.at.ply.gg
-alex123123123141-56619.portmap.host
-alibabash.ddns.net
-allah420.ddns.net
-an-volunteer.gl.at.ply.gg
-awoware.ddns.net
-berlinqua.duckdns.org
-bgxhost.servegame.com
-bitra12.duckdns.org
-boogerbreath-59460.portmap.host
-burk2n.dynu.net
-com-overhead.gl.at.ply.gg
-crazydns.linkpc.net
-dance-civilization.gl.at.ply.gg
-dng.dns05.com
-dng05vpn.v4.softether.net
-DonBaguette-43001.portmap.io
-douzi.my-wan.de
-eliminatorhost.servegame.com
-elpepemanca.ddns.net
-everyone-substantially.gl.at.ply.gg
-fragrant-pine-29547.pktriot.net
-fronpeatcam.publicvm.com
-frosty-wind-77851.pktriot.net
-frp.deitie.asia
-hacker.548848.xyz
-input-helps.gl.at.ply.gg
-japanese-youth.gl.at.ply.gg
-johndoenut-37242.portmap.host
-kids-reported.gl.at.ply.gg
-memet.ddns.net
-Mercurial6969-64808.portmap.host
-message-pockets.gl.at.ply.gg
-microsoft-virtualpc.duckdns.org
-nancyagoatron.sytes.net
-nibiru3.duckdns.org
-okaa0-35095.portmap.host
-okaa0-51499.portmap.host
-opportunity-pillow.gl.at.ply.gg
-qpurrybeatmecamtest.ddns.net
-scambaiting2022.ddns.net
-schools-softball.gl.at.ply.gg
-serverlolxd.ddns.net
-short-shortly.gl.at.ply.gg
-throbbing-mountain-09011.pktriot.net
-tsxrkj.synology.me
-VisoXD-63447.portmap.host
-voicia-net.ddns.net
-without-sure.gl.at.ply.gg
-youtubevideos.duckdns.org
-zeroski.ink

QuasarRAT/quasar_c2s_2023_11_21.txt

@@ -1,66 +0,0 @@
-101.43.141.31:4782
-136.50.194.181:4782
-136.50.194.181:80
-154.9.253.177:4782
-163.5.169.28:8080
-180.195.205.155:4782
-193.161.193.99:58530
-194.55.224.24:80
-194.55.224.24:9030
-195.133.197.3:4782
-20.205.140.63:1024
-212.23.222.42:7332
-45.32.119.154:4782
-45.61.174.20:5552
-85.98.162.136:80
-87.159.4.210:4782
-88.209.197.253:4782
-action-list.gl.at.ply.gg
-Aimbotexee-22359.portmap.host
-alibabash.ddns.net
-bitra12.duckdns.org
-boogerbreath-59460.portmap.host
-burk2n.dynu.net
-casino-within.at.ply.gg
-cock.holyshithowmanydomainandproxycanigettorunmyserver.info
-dance-civilization.gl.at.ply.gg
-dng.dns05.com
-download.adaklab.ir
-f8terat.ddns.net
-filter-ranked.at.ply.gg
-fragrant-pine-29547.pktriot.net
-goldbolbein.chickenkiller.com
-goldgoblein.sytes.net
-hacker.548848.xyz
-infallible-water-17742.pktriot.net
-LaraLoveU-44526.portmap.host
-malhost.loca.lt
-Mercurial6969-64808.portmap.host
-microsoft-virtualpc.duckdns.org
-nathwood23.mysynology.net
-okaa0-51499.portmap.host
-opportunity-pillow.gl.at.ply.gg
-overheaven.ddns.net
-points-deep.gl.at.ply.gg
-police-levy.at.ply.gg
-prtsc.kozow.com
-Puryx-64788.portmap.host
-qpurrybeatmecamtest.ddns.net
-quasardeez.ddns.net
-riprealworld-55179.portmap.host
-rooms-kw.gl.at.ply.gg
-rough-night-92806.pktriot.net
-sero.definitivlegit.xyz
-shipperd69.strangled.net
-short-shortly.gl.at.ply.gg
-si.servet.site
-statics.kozow.com
-tcp://drec123-39864.portmap.host
-testrun.ddns.net
-throbbing-mountain-09011.pktriot.net
-topportas.ddns.net
-tsxrkj.synology.me
-VisoXD-63447.portmap.host
-voicia-net.ddns.net
-youtubevideos.duckdns.org
-zeroski.ink

RemcosRAT/remcos_all.txt

@@ -3840,3 +3840,229 @@ pentester0.accesscam.org:56796
 GWtY0fiG58DCq6F.xyz:2404
 totalgp12.ddns.net:2018
 pandemic6u.duckdns.org:38393
+wedhstinwell.online
+104.250.180.178:7902
+193.142.59.76:6322
+193.142.59.76:5689
+80.66.75.66:3388
+comico.con-ip.com
+5.78.40.210:2404
+204.44.124.131:2404
+claudiabetancurlora09.con-ip.com
+cascada.con-ip.com
+vanidad.con-ip.com
+193.42.33.27:5252
+185.255.114.32:2404
+64.188.24.134:2404
+remsmart.hopto.org
+fgndibsvisdviree.con-ip.com
+45.155.7.187:22066
+5.78.40.210:2405
+remcostest.ddns.net
+172.93.160.33:2404
+dsoiuhvciosdjncoshvibd.con-ip.com
+103.202.52.254:5050
+wwwwwwwwww.duckdns.org
+72.11.142.195:55955
+141.98.6.9:7044
+172.81.60.60:3467
+puerta1.con-ip.com
+ifdhbodfijvoidsjvpfdpfijh.con-ip.com
+5.252.22.56:2404
+bliv.duckdns.org
+45.135.128.195:8888
+103.212.81.159:1126
+alvaritospamlamu.con-ip.com
+brian0627.duckdns.org
+95.214.24.210:2404
+37.217.2.176:7777
+94.156.6.57:6657
+193.161.193.99:60921
+185.38.142.102:3107
+gfkodssnvosdjvlksnvldkj.con-ip.com
+81.19.131.36:2450
+donpapii.duckdns.org
+185.225.74.166:1606
+grosjeangerard.hopto.org
+spm23.casacam.net
+95.214.27.6:3366
+rdpown.ydns.eu
+2.59.254.111:3346
+80.76.51.172:8087
+apples.con-ip.com
+remcos1.ydns.eu
+45.95.169.191:2404
+179.61.237.12:443
+45.40.96.248:2404
+141.95.84.40:2222
+lestfuckinggoon.broke-it.net
+actualizaciondedatosgrupoaval.net
+metroboomiin.duckdns.org
+95.214.27.83:2404
+sdvjhdibvcksdnvisdhvsds.con-ip.com
+war.bumbleshrimp.com
+danielitopt.con-ip.com
+194.180.49.35:4935
+91.242.229.190:2450
+85.209.176.106:2404
+sxvcddhcbdjcbixg.con-ip.com
+20.110.88.130:6334
+empireboss.ydns.eu
+dsojvhocnvlkvokcvond.con-ip.com
+whitecat.space
+haroldmoscotelora09.con-ip.com
+allonsy.hopto.org
+asegurar100.4cloud.click
+193.142.59.106:5832
+grantadistciaret.com
+filwelreg.pw
+blackrockxp.dyndns.org
+185.255.114.50:2404
+somto.ydns.eu
+185.225.73.200:2580
+2.59.254.111:33380
+37.1.222.255:22066
+miradores.con-ip.com
+80.66.75.51:37481
+drivebackupupdate.com
+79.110.62.168:6781
+kashrteletts.giize.com
+secure.cloudproxyserv.com
+194.147.140.246:1998
+79.134.225.83:7400
+94.156.6.158:50147
+sheddy1122.ddns.net
+sebastianvelezdn.con-ip.com
+107.150.18.101:1604
+107.150.18.101:2404
+107.175.229.139:8087
+109.236.82.82:5001
+139.28.219.36:51147
+141.95.84.40:1212
+149.56.240.44:2404
+149.56.240.44:2405
+149.56.240.44:2406
+149.56.240.44:2407
+149.56.240.44:2408
+149.56.240.44:3398
+149.56.240.44:9987
+185.29.8.29:4039
+193.142.59.240:5151
+193.161.193.99:1194
+194.147.140.148:1998
+194.147.140.158:1997
+194.147.140.158:1998
+194.147.140.194:1998
+194.147.140.196:1995
+194.147.140.212:1999
+2.59.254.160:8500
+20.252.43.59:4403
+29122021.sytes.net
+45.95.169.117:2404
+45.95.169.140:2404
+5.196.117.233:2023
+5.61.53.75:8007
+5.61.55.210:8004
+5.61.55.210:8006
+80.66.75.86:2404
+80.76.51.172:8787
+81.19.131.34:2450
+91.92.241.117:8787
+91.92.246.64:34771
+91.92.247.146:3348
+94.142.138.155:2580
+94.156.65.197:2404
+94.156.66.37:45944
+94.156.66.37:49539
+95.214.27.6:3348
+bad.con-ip.com
+bantubusta0816.ddns.net
+busbuctomorrrw.ddns.net
+cloudhost.myfirewall.org
+cocacabanaclubsdownt.com
+comercio.con-ip.com
+csrss.pro
+dxxxxza.dynamic-dns.net
+eduardoestevex.duckdns.org
+gig24.sytes.net
+idofjodjvodjvojvojfojooiodijnj.con-ip.com
+ima.con-ip.com
+large-sox.gl.at.ply.gg
+mancuso.con-ip.com
+menge.duckdns.org
+millon777.con-ip.com
+myfrontmannysix.ddns.net
+pentester02.duckdns.org
+rem0323.duckdns.org
+remcoss2023.duckdns.org
+sdhisdviudsibdsibedas.con-ip.com
+sdvsiudhvisdhvodshv.con-ip.com
+sembe.duckdns.org
+servicios.disenospublici.info
+snackdoom94.hopto.org
+sonia777.con-ip.com
+tcxerr.duckdns.org
+virtuallogoprepaidmaxspippline.onedumb.com
+xchilogs.duckdns.org
+YAPER.dynuddns.net
+103.212.81.158:3050
+104.129.27.19:2404
+107.150.18.214:2404
+111.90.147.133:80
+111.90.147.133:8080
+172.174.245.21:5400
+172.93.164.62:2404
+172.93.187.227:2404
+172.93.217.218:2404
+185.157.162.241:1303
+192.161.184.21:24053
+192.3.101.8:45671
+192.3.101.8:55677
+194.147.140.145:1997
+198.55.113.202:2404
+209.127.186.232:4765
+45.137.22.136:8087
+45.66.230.229:8753
+5.181.80.139:2404
+91.92.242.85:4285
+91.92.254.87:1606
+91.92.255.12:25050
+abuhjil.com
+astucia77.con-ip.com
+center.onthewifi.com
+comercio223.con-ip.com
+datastream.myvnc.com
+delamanodedios777.con-ip.com
+dfghgfrdsdcvgtrdxcvplkopsdsdsz.con-ip.com
+eterno.con-ip.com
+eweo9264gtuiort.duckdns.org
+fdvijkrfdsojnlmrfsdojnlmfrdvcj.con-ip.com
+felipito24.con-ip.com
+gfojhvousdovisovosjoisdovn.con-ip.com
+gggb2.dvrdns.org
+gospel.con-ip.com
+gservicese.com
+horsesnje.net
+listpoints.click
+listpoints.online
+luci2023.duckdns.org
+mesa12.con-ip.com
+mxzaa.duckdns.org
+mybabygirl.duckdns.org
+nazareno77.con-ip.com
+novbillions.myddns.me
+playman0101.duckdns.org
+retghrtgwtrgtg.bounceme.net
+rungmotors20.ddns.net
+satura.con-ip.com
+suntit.ddns.net
+svdjvhinvosdhfojsdfdffhdoflsnj.con-ip.com
+tesoro.con-ip.com
+tincaanii.duckdns.org
+titus.casacam.net
+titus102023.ddns.net
+tmsuccess.duckdns.org
+vodahelp.myvnc.com
+wealthalways.duckdns.org
+wealthy2023.ddns.net
+wealthyman.freemyip.com

RemcosRAT/remcos_c2s_2023_09_25.txt

@@ -1,35 +0,0 @@
-wedhstinwell.online
-104.250.180.178:7902
-193.142.59.76:6322
-193.142.59.76:5689
-80.66.75.66:3388
-comico.con-ip.com
-5.78.40.210:2404
-204.44.124.131:2404
-claudiabetancurlora09.con-ip.com
-cascada.con-ip.com
-vanidad.con-ip.com
-193.42.33.27:5252
-185.255.114.32:2404
-64.188.24.134:2404
-remsmart.hopto.org
-fgndibsvisdviree.con-ip.com
-45.155.7.187:22066
-5.78.40.210:2405
-remcostest.ddns.net
-172.93.160.33:2404
-dsoiuhvciosdjncoshvibd.con-ip.com
-103.202.52.254:5050
-wwwwwwwwww.duckdns.org
-72.11.142.195:55955
-141.98.6.9:7044
-172.81.60.60:3467
-puerta1.con-ip.com
-ifdhbodfijvoidsjvpfdpfijh.con-ip.com
-5.252.22.56:2404
-bliv.duckdns.org
-45.135.128.195:8888
-103.212.81.159:1126
-alvaritospamlamu.con-ip.com
-brian0627.duckdns.org
-95.214.24.210:2404

RemcosRAT/remcos_c2s_2023_10_15.txt

@@ -1,60 +0,0 @@
-37.217.2.176:7777
-94.156.6.57:6657
-193.161.193.99:60921
-185.38.142.102:3107
-gfkodssnvosdjvlksnvldkj.con-ip.com
-81.19.131.36:2450
-donpapii.duckdns.org
-185.225.74.166:1606
-grosjeangerard.hopto.org
-spm23.casacam.net
-95.214.27.6:3366
-rdpown.ydns.eu
-2.59.254.111:3346
-80.76.51.172:8087
-apples.con-ip.com
-remcos1.ydns.eu
-45.95.169.191:2404
-179.61.237.12:443
-45.40.96.248:2404
-141.95.84.40:2222
-lestfuckinggoon.broke-it.net
-actualizaciondedatosgrupoaval.net
-metroboomiin.duckdns.org
-95.214.27.83:2404
-claudiabetancurlora09.con-ip.com
-sdvjhdibvcksdnvisdhvsds.con-ip.com
-war.bumbleshrimp.com
-danielitopt.con-ip.com
-194.180.49.35:4935
-91.242.229.190:2450
-85.209.176.106:2404
-sxvcddhcbdjcbixg.con-ip.com
-20.110.88.130:6334
-empireboss.ydns.eu
-dsojvhocnvlkvokcvond.con-ip.com
-whitecat.space
-haroldmoscotelora09.con-ip.com
-allonsy.hopto.org
-asegurar100.4cloud.click
-193.142.59.106:5832
-grantadistciaret.com
-filwelreg.pw
-blackrockxp.dyndns.org
-185.255.114.50:2404
-somto.ydns.eu
-185.225.73.200:2580
-2.59.254.111:33380
-37.1.222.255:22066
-miradores.con-ip.com
-80.66.75.51:37481
-drivebackupupdate.com
-dsoiuhvciosdjncoshvibd.con-ip.com
-79.110.62.168:6781
-kashrteletts.giize.com
-secure.cloudproxyserv.com
-194.147.140.246:1998
-79.134.225.83:7400
-94.156.6.158:50147
-sheddy1122.ddns.net
-sebastianvelezdn.con-ip.com

RemcosRAT/remcos_c2s_2023_11_06.txt

@@ -1,82 +0,0 @@
-107.150.18.101:1604
-107.150.18.101:2404
-107.175.229.139:8087
-109.236.82.82:5001
-139.28.219.36:51147
-141.95.84.40:1212
-149.56.240.44:2404
-149.56.240.44:2405
-149.56.240.44:2406
-149.56.240.44:2407
-149.56.240.44:2408
-149.56.240.44:3398
-149.56.240.44:9987
-185.29.8.29:4039
-193.142.59.240:5151
-193.161.193.99:1194
-194.147.140.148:1998
-194.147.140.158:1997
-194.147.140.158:1998
-194.147.140.194:1998
-194.147.140.196:1995
-194.147.140.212:1999
-2.59.254.160:8500
-20.252.43.59:4403
-29122021.sytes.net
-45.95.169.117:2404
-45.95.169.140:2404
-5.196.117.233:2023
-5.61.53.75:8007
-5.61.55.210:8004
-5.61.55.210:8006
-80.66.75.86:2404
-80.76.51.172:8787
-81.19.131.34:2450
-91.92.241.117:8787
-91.92.246.64:34771
-91.92.247.146:3348
-94.142.138.155:2580
-94.156.65.197:2404
-94.156.66.37:45944
-94.156.66.37:49539
-95.214.27.6:3348
-allonsy.hopto.org
-asegurar100.4cloud.click
-bad.con-ip.com
-bantubusta0816.ddns.net
-bliv.duckdns.org
-busbuctomorrrw.ddns.net
-cloudhost.myfirewall.org
-cocacabanaclubsdownt.com
-comercio.con-ip.com
-csrss.pro
-drivebackupupdate.com
-dxxxxza.dynamic-dns.net
-eduardoestevex.duckdns.org
-fgndibsvisdviree.con-ip.com
-gig24.sytes.net
-grantadistciaret.com
-idofjodjvodjvojvojfojooiodijnj.con-ip.com
-ima.con-ip.com
-kashrteletts.giize.com
-large-sox.gl.at.ply.gg
-mancuso.con-ip.com
-menge.duckdns.org
-metroboomiin.duckdns.org
-millon777.con-ip.com
-myfrontmannysix.ddns.net
-pentester02.duckdns.org
-puerta1.con-ip.com
-rem0323.duckdns.org
-remcoss2023.duckdns.org
-sdhisdviudsibdsibedas.con-ip.com
-sdvsiudhvisdhvodshv.con-ip.com
-secure.cloudproxyserv.com
-sembe.duckdns.org
-servicios.disenospublici.info
-snackdoom94.hopto.org
-sonia777.con-ip.com
-tcxerr.duckdns.org
-virtuallogoprepaidmaxspippline.onedumb.com
-xchilogs.duckdns.org
-YAPER.dynuddns.net

RemcosRAT/remcos_c2s_2023_11_21.txt

@@ -1,91 +0,0 @@
-103.212.81.158:3050
-104.129.27.19:2404
-107.150.18.214:2404
-111.90.147.133:80
-111.90.147.133:8080
-172.174.245.21:5400
-172.93.164.62:2404
-172.93.187.227:2404
-172.93.217.218:2404
-185.157.162.241:1303
-192.161.184.21:24053
-192.3.101.8:45671
-192.3.101.8:55677
-194.147.140.145:1997
-198.55.113.202:2404
-209.127.186.232:4765
-45.137.22.136:8087
-45.66.230.229:8753
-5.181.80.139:2404
-91.92.242.85:4285
-91.92.254.87:1606
-91.92.255.12:25050
-abuhjil.com
-actualizaciondedatosgrupoaval.net
-asegurar100.4cloud.click
-astucia77.con-ip.com
-bad.con-ip.com
-bliv.duckdns.org
-center.onthewifi.com
-cloudhost.myfirewall.org
-cocacabanaclubsdownt.com
-comercio223.con-ip.com
-csrss.pro
-danielitopt.con-ip.com
-datastream.myvnc.com
-delamanodedios777.con-ip.com
-dfghgfrdsdcvgtrdxcvplkopsdsdsz.con-ip.com
-dxxxxza.dynamic-dns.net
-eduardoestevex.duckdns.org
-empireboss.ydns.eu
-eterno.con-ip.com
-eweo9264gtuiort.duckdns.org
-fdvijkrfdsojnlmrfsdojnlmfrdvcj.con-ip.com
-felipito24.con-ip.com
-fgndibsvisdviree.con-ip.com
-gfkodssnvosdjvlksnvldkj.con-ip.com
-gfojhvousdovisovosjoisdovn.con-ip.com
-gggb2.dvrdns.org
-gospel.con-ip.com
-grantadistciaret.com
-gservicese.com
-haroldmoscotelora09.con-ip.com
-horsesnje.net
-idofjodjvodjvojvojfojooiodijnj.con-ip.com
-ifdhbodfijvoidsjvpfdpfijh.con-ip.com
-kashrteletts.giize.com
-listpoints.click
-listpoints.online
-luci2023.duckdns.org
-mesa12.con-ip.com
-millon777.con-ip.com
-miradores.con-ip.com
-mxzaa.duckdns.org
-mybabygirl.duckdns.org
-nazareno77.con-ip.com
-novbillions.myddns.me
-pentester02.duckdns.org
-playman0101.duckdns.org
-remcos1.ydns.eu
-retghrtgwtrgtg.bounceme.net
-rungmotors20.ddns.net
-satura.con-ip.com
-sdvsiudhvisdhvodshv.con-ip.com
-sebastianvelezdn.con-ip.com
-servicios.disenospublici.info
-somto.ydns.eu
-spm23.casacam.net
-suntit.ddns.net
-svdjvhinvosdhfojsdfdffhdoflsnj.con-ip.com
-tesoro.con-ip.com
-tincaanii.duckdns.org
-titus.casacam.net
-titus102023.ddns.net
-tmsuccess.duckdns.org
-vanidad.con-ip.com
-vodahelp.myvnc.com
-wealthalways.duckdns.org
-wealthy2023.ddns.net
-wealthyman.freemyip.com
-whitecat.space
-xchilogs.duckdns.org

WarzoneRAT_AveMaria/warzonerat_all.txt

@@ -196,7 +196,6 @@ rootsec.linkpc.net
 myblessingsfor2022.ddns.net
 194.147.140.22:5200
 103.207.39.184:1998
-morggy11.ooguy.com
 88.198.148.231:5200
 netw.infiinite.com
 185.222.57.141:5200
@@ -239,7 +238,6 @@ group.loseyourip.com
 185.19.85.155:9951
 37.0.10.141:1339
 badnulls.warzonedns.com
-juner234.ddns.net
 185.222.57.66:5200
 esserc.ooguy.com
 161.129.33.242:4567
@@ -248,7 +246,6 @@ nan.ydns.eu
 91.193.75.66:2088
 20.185.199.35:5800
 185.165.153.251:5200
-yerrionminutes.freedynamicdns.org
 136.144.41.66:5200
 64.112.87.6:2222
 77.83.174.211:5200
@@ -303,7 +300,6 @@ willia2.ddns.net
 trendyfela.myftp.biz
 51.89.201.38:5200
 obilafia.giize.com
-pentester01.duckdns.org
 185.105.236.179:1975
 136.144.41.4:4771
 jeanellasimonsxxx.ddns.net
@@ -312,7 +308,6 @@ warz.viewdns.net
 193.56.29.251:5200
 37.120.210.211:22612
 2.56.57.181:56789
-jiaxin.ddns.net
 212.193.30.217:5200
 76.8.53.133:11940
 online-3450.home-webserver.de
@@ -342,7 +337,6 @@ sbdndbnb.duckdns.org
 kkemopes.ddns.net
 37.220.87.3:5200
 84.38.133.199:5200
-nan.ydns.eu
 kohjguj.ydns.eu
 wapt.myhome-server.de
 bugsy.ddnsgeek.com
@@ -423,7 +417,6 @@ newvic.myvnc.com
 91.193.75.247:9961
 windowsupdate.ligrnan.com
 91.192.100.19:26771
-pentester01.duckdns.org
 193.42.33.27:5200
 20.190.63.69:8600
 KTS666.PUBLICVM.COM
@@ -491,9 +484,7 @@ guest.maximos.quest
 195.133.40.109:5200
 global22.ddns.net
 mercenarywarzone.ddns.net
-mubbibun.duckdns.org
 191.101.130.254:30254
-pentester01.duckdns.org
 149.28.115.223:6565
 185.150.25.243:3543
 mamased.duckdns.org
@@ -512,9 +503,7 @@ kazt.duckdns.org
 185.157.161.174:1975
 91.92.120.108:5200
 104.37.172.226:5200
-remote.msoftupdate.me
 130.51.41.31:2000
-buzornn.ddns.net
 79.134.225.54:6626
 213.208.129.212:3214
 184.164.77.132:49160
@@ -542,7 +531,6 @@ warzone121.hopto.org
 mcmac.duckdns.org
 jayurbf.gleeze.com
 172.111.134.200:5201
-pentester01.duckdns.org
 185.140.53.69:4080
 51.81.216.18:5200
 opaqueslots.duckdns.org
@@ -641,7 +629,6 @@ apponfly.mywire.org
 grotomniponmyte.sytes.net
 137.117.59.51:5200
 101.99.92.161:5200
-yerrionminutes.freedynamicdns.org
 171.22.30.72:52011
 185.19.85.183:9305
 war101.ddns.net
@@ -649,7 +636,6 @@ wzefi.duckdns.org
 makavi.hopto.org
 146.70.94.3:17873
 212.192.241.211:5990
-harjahwool.ddnsfree.com
 185.140.53.46:5200
 gerogexcsdf234234sdfsvxc341242324.publicvm.com
 176.124.215.147:5200
@@ -658,7 +644,6 @@ vladisdns.rapiddns.ru
 winvins.3utilities.com
 142.44.161.51:1631
 76.8.53.133:1198
-moneybank.ddns.net
 smartconnect1.duckdns.org
 warzone12.ddns.net
 instac.duckdns.org
@@ -671,7 +656,6 @@ pstericdd.duckdns.org
 80.208.225.197:5200
 phllka.com
 windowsupdater64x.theworkpc.com
-grotomniponmyte.sytes.net
 tiger22.ddns.net
 livinglogs.servehalflife.com
 engkaa.ddns.net
@@ -683,7 +667,6 @@ lumberr.duckdns.org
 oluwabless.ddns.net
 yggtccccchgr.duckdns.org
 top.not2beabused01.xyz
-xchilogs.duckdns.org
 64.52.80.214:5200
 37.0.11.205:1339
 79.134.225.71:6779
@@ -711,7 +694,6 @@ frdedsgf.duckdns.org
 omerlan.duckdns.org
 latua.nsupdate.info
 20.230.7.174:7830
-bed.fastestmaking.com
 hijodelavida.duckdns.org
 171.22.30.72:5151
 101.99.94.158:5200
@@ -746,7 +728,6 @@ blacice24.hopto.org
 79.134.225.81:1640
 kashbilly222.ddns.net
 194.127.179.121:5010
-bed.fastestmaking.com
 46.183.221.107:4082
 163.123.143.201:5200
 91.92.120.197:5200
@@ -808,7 +789,6 @@ oneness.duckdns.org
 140.82.29.65:443
 194.5.97.48:3141
 65.21.9.53:5540
-grace2nation.ddns.net
 tresor2020.ddns.net
 luckynovember4good.ddns.net
 anglekeys.warzonedns.com
@@ -817,7 +797,6 @@ cx212xc.ddns.net
 79.134.225.34:5200
 govcbn.duckdns.org
 193.161.193.99:48883
-grace.adds-only.xyz
 benson12.ddns.net
 84.38.129.152:1014
 tamidem.duckdns.org
@@ -853,7 +832,6 @@ eldragon.ooguy.com
 193.29.104.157:4296
 kellerwarzone.ddns.net
 port15e.zapto.org
-bu250653.hopto.org
 mywarswarw.ddns.net
 winwin76997708nk.awsmppl.com
 193.56.28.104:5200
@@ -893,7 +871,6 @@ olodofries.ddns.net
 Businessdministration.webredirect.org
 blowblue.duckdns.org
 20.91.186.187:6880
-gds1733.my.to
 91.193.75.124:5200
 batashoes.ddns.net
 66.42.107.233:1337
@@ -965,7 +942,6 @@ secureyourdataarea1.duckdns.org
 macking.duckdns.org
 148.251.48.16:5200
 37.46.150.86:5200
-willia2.ddns.net
 newar21.duckdns.org
 safe2202.ddns.net
 37.187.186.28:5281
@@ -976,12 +952,10 @@ safe2202.ddns.net
 xpwarzonlicns2.ddns.net
 backupson.duckdns.org
 185.140.53.174:2404
-mutaalofomaha.com
 wealthyme.warzonedns.com
 157.55.136.23:5300
 185.244.31.243:5200
 141.255.164.13:5200
-blacice24.hopto.org
 papiguy1.ddns.net
 warzone05b.duckdns.org
 vasticbless.hopto.org
@@ -1009,9 +983,7 @@ osas212.duckdns.org
 45.143.147.226:5200
 jsbcdns.warzonedns.com
 mobibanewdan.duckdns.org
-bigmoney2020.ath.cx
 103.207.38.192:5200
-bed.fastestmaking.com
 84.38.133.217:5888
 dontreachme3.ddns.net
 185.29.9.38:3456
@@ -1029,7 +1001,6 @@ linelink-linesn.com
 165.22.5.66:3333
 103.133.109.176:7600
 items.myq-see.com
-safe2202.ddns.net
 cmark.duckdns.org
 wakar.duckdns.org
 185.140.53.12:8833
@@ -1038,8 +1009,6 @@ wakar.duckdns.org
 79.134.225.9:8724
 kenzeey.ddns.net
 111.90.143.155:5200
-sept5th.ddns.net
-pentester01.duckdns.org
 91.192.100.10:11011
 89.117.76.41:22091
 officelogs20.duckdns.org
@@ -1074,7 +1043,6 @@ vtzjnphtvnpckznxhxpb.duckdns.org
 patront.duckdns.org
 103.212.81.157:11011
 23.105.131.156:5300
-grace.adds-only.xyz
 rikpoman.mywire.org
 104.254.90.195:10378
 marknagy44565-36386.portmap.host
@@ -1093,7 +1061,6 @@ blackbenz.duckdns.org
 213.152.186.168:57619
 amallasal.com
 52.168.163.161:5200
-dreams2reality.duckdns.org
 102.129.214.34:5200
 107.182.129.97:5200
 79.134.225.48:5201
@@ -1110,7 +1077,6 @@ paiveio123.ddns.com.br
 45.87.61.139:1010
 66.70.140.25:1188
 103.28.70.185:9090
-xmowa.ddns.net
 94.198.40.14:85
 212.193.30.38:5200
 74.201.28.92:2222
@@ -1126,7 +1092,6 @@ smcxzhu.ddnsking.com
 grounderwarone.rapiddns.ru
 45.88.67.145:5222
 161.129.44.221:9999
-godblessking.ddns.net
 79.134.225.94:5352
 185.239.242.133:5200
 149.28.124.150:5200
@@ -1159,14 +1124,12 @@ sheb.ddns.net
 godwin12.warzonedns.com
 officeday2022.ddns.net
 newpart.cam
-www.dnuocc.com
 hsfdhhoop.ooguy.com
 peggy.ddnsgeek.com
 45.145.185.153:5210
 37.46.150.67:5200
 109.248.144.240:5200
 4610215325.redirectme.net
-hsfdhhoop.ooguy.com
 51.89.0.147:5271
 40.83.220.150:7098
 privatexpo.duckdns.org
@@ -1179,7 +1142,6 @@ helloworld.ddnsking.com
 eriwauwa.duckdns.org
 172.94.127.185:2031
 samirsana2019.myftp.biz
-hannoyputa.giize.com
 89.23.101.93:5200
 51.75.209.245:5883
 41.216.188.29:5200
@@ -1188,7 +1150,6 @@ zcv2ngnfg69354253.3utilities.com
 192.227.173.22:5200
 23.83.133.186:5200
 172.93.189.85:179
-anyinew.duckdns.org
 war.servebeer.com
 96.9.231.122:5200
 40.84.216.183:7600
@@ -1209,7 +1170,6 @@ kashbilly.duckdns.org
 84.38.129.119:3543
 eeddfr.duckdns.org
 23.106.121.172:4321
-moneybank.ddns.net
 mokoolm.gleeze.com
 91.193.75.152:3131
 101.99.94.209:5200
@@ -1225,11 +1185,8 @@ ugo123.hopto.org
 mohbeebnew.duckdns.org
 185.157.161.69:9494
 5.161.206.28:5200
-bed.fastestmaking.com
 81.161.229.75:5200
-moneybank.ddns.net
 111.90.149.147:5200
-warzonez.linkpc.net
 103.212.81.156:6344
 103.125.191.85:2222
 warzone33.duckdns.org
@@ -1320,7 +1277,6 @@ rencos121.duckdns.org
 chukwuoma.duckdns.org
 bestme.mywire.org
 dominion46.ddns.net
-xchilogs.duckdns.org
 style.etanetsys.com
 efiigbo9.duckdns.org
 194.5.98.236:3885
@@ -1349,9 +1305,7 @@ rajsavindia.hopto.org
 194.5.98.138:3232
 212.192.246.126:5200
 balayinkudi.duckdns.org
-bigmoney2020.ath.cx
 185.244.30.176:5288
-soft.maximos.quest
 menaxe.duckdns.org
 alliedofficewarz.ddns.net
 stoic.gleeze.com
@@ -1360,7 +1314,6 @@ stoic.gleeze.com
 warzone109983runnerhacker.duckdns.org
 eazeeflo.warzonedns.com
 konkation.duckdns.org
-wapt.myhome-server.de
 79.134.225.52:5300
 80.76.51.88:1956
 Sanael-62946.portmap.host
@@ -1385,11 +1338,8 @@ sdsd.nerdpol.ovh
 2.58.56.250:5200
 88.119.171.248:8155
 blessnbwz.istmein.de
-pentester01.duckdns.org
-warzon957.duckdns.org
 103.212.81.151:5322
 155.94.150.100:6473
-xchilogs.duckdns.org
 dropy1.ddns.net
 37.0.14.197:1997
 45.61.175.241:934
@@ -1398,7 +1348,6 @@ tokyooffice1.duckdns.org
 193.239.147.32:5210
 RetrieverConnection.ga
 79.134.225.10:4930
-mutaalofomaha.com
 blessingscomemyway.ddns.net
 108.62.12.210:4251
 warzzz.duckdns.org
@@ -1413,7 +1362,6 @@ www.sgstgfahdg7126edha.duckdns.org
 warzonne.publicvm.com
 194.147.140.138:9922
 79.134.225.115:1024
-dgorijan20785.hopto.org
 jeron7.duckdns.org
 85.31.46.198:5200
 195.178.120.187:5200
@@ -1436,7 +1384,6 @@ dar123.hopto.org
 2.56.57.85:56925
 officedesktop004018.webredirect.org
 91.192.100.18:179
-chefdnshot.ddns.net
 79.134.225.111:5200
 anthonyveeder.com
 45.59.119.212:1111
@@ -1457,7 +1404,6 @@ su1d.nerdpol.ovh
 45.87.63.121:2345
 45.143.146.56:1234
 minekroft.duckdns.org
-warzoneburky.ddns.net
 185.140.53.137:4479
 warwin.duckdns.org
 32w4tgef4ehyr5t564rthy.from-nc.com
@@ -1517,7 +1463,6 @@ newmanserverug.ddns.net
 dhkwufrsfhrgrsw.duckdns.org
 newzone.from-ne.com
 wrzone-srvr-connector-port.windows-updates.co
-mitty.ultraddns.com
 185.244.29.130:5200
 resultbox0147logs.ddns.net
 63.141.237.235:5200
@@ -1539,7 +1484,6 @@ n.nerdpol.ovh
 normanaman.duckdns.org
 love.nsupdate.info
 1988life.myq-see.com
-79.134.225.54:5200
 asdfwrkhl.warzonedns.com
 xxxanonymous147.duckdns.org
 96.9.210.115:5200
@@ -1557,17 +1501,13 @@ dnuocc.com
 37.221.113.65:5200
 172.93.165.166:5200
 46.3.199.112:5200
-akubig1.ath.cx
 byx.z86.ru
 elboasin.ddns.net
 newwarr.ddns.net
 194.5.98.138:4689
-mutaalofomaha.com
 172.86.75.51:1337
-love.pure-luck.xyz
 185.19.85.152:179
 5.75.169.94:7781
-warzone.ddns.net
 79.134.225.81:2022
 161.129.40.8:7890
 jude77.duckdns.org
@@ -1589,12 +1529,9 @@ just-fax303.home-webserver.de
 191.101.130.189:700
 91.227.17.32:5200
 89.117.76.41:4422
-nightmare4666.ddns.net
 185.156.175.51:47010
-masterhugo231.servecounterstrike.com
 79.134.225.11:6569
 warzonecastro.ddns.net
-pentester0.accesscam.org
 194.5.97.168:3640
 202.55.132.213:7744
 37.139.129.47:5200
@@ -1603,7 +1540,6 @@ pentester0.accesscam.org
 hbfyewtuvfbhsbdjhjwebfy.net
 accessability042.ddns.net
 wizzydd.duckdns.org
-grace.adds-only.xyz
 steam9.duckdns.org
 91.193.75.244:9951
 91.193.75.173:6667
@@ -1628,7 +1564,6 @@ jackpiaau.ddns.net
 216.38.2.206:5199
 5.252.179.221:6200
 147.135.100.70:3380
-warzonepw.ddns.net
 softwarehost3.ddns.net
 193.239.86.151:5200
 line-ellis.gl.at.ply.gg
@@ -1645,7 +1580,6 @@ lionleee.nerdpol.ovh
 export.zapto.org
 141.98.6.154:5555
 FEBREM1.DDNS.NET
-warzon957.duckdns.org
 jaiban.duckdns.org
 185.244.30.94:2626
 checkingss.duckdns.org
@@ -1657,14 +1591,11 @@ smilecat.ddns.net
 shawgod1.sytes.net
 212.87.204.251:5200
 45.61.136.88:5200
-jabsgu.kozow.com
 kali123.hopto.org
 ihttree.duckdns.org
-esureforme100.myddns.rocks
 194.68.59.48:2318
 176.113.82.95:5200
 136.144.41.220:91
-blessing.maximos.quest
 154.53.32.211:8808
 favour.ddnsgeek.com
 84.38.132.36:5200
@@ -1680,7 +1611,6 @@ binancino.hopto.org
 193.42.32.223:5200
 cusomtamon.freeddns.org
 hongphilxxx.duckdns.org
-valvesco.duckdns.org
 workbro.duckdns.org
 kmt.duckdns.org
 chrisle79.ddns.net
@@ -1707,11 +1637,9 @@ kinosoft.hopto.org
 217.138.215.19:5200
 185.140.53.199:5200
 213.208.129.202:6078
-gpent.duckdns.org
 23.82.140.14:433
 just-fax207.home-webserver.de
 199.127.59.196:5200
-exportmunic007.duckdns.org
 udooiuyt.dynamic-dns.net
 194.5.98.243:7010
 79.134.225.33:5200
@@ -1727,7 +1655,6 @@ revive147.duckdns.org
 fresh12.ddns.net
 23.94.54.224:5277
 victorycolum.ddns.net
-pentester01.duckdns.org
 45.8.146.20:5200
 91.193.75.120:2525
 lesbianporn.duckdns.org
@@ -1748,3 +1675,55 @@ www.warkarwaka.duckdns.org
 79.134.225.27:6667
 mrbigs.hopto.org
 194.33.45.40:5200
+170.130.165.120:5200
+werberyouse.kozow.com
+fgudhiiugiufgifufgihdhuidfxgd.duckdns.org
+aribebate1337.ddns.net
+88.214.59.225:5200
+64.188.20.119:5200
+donpapajay.ddns.net
+supercraft123.serveminecraft.net
+tende.dvrdns.org
+130.51.42.8:7890
+104.152.189.140:5200
+80.76.51.172:8787
+zonewar.ddnsking.com
+109.248.151.113:61743
+qgexserver.hopto.org
+spoudel.mywire.org
+93.123.118.3:65535
+osiarus.duckdns.org
+Superherocan.mywire.org
+u868328.nvpn.so
+5.181.80.111:5200
+103.212.81.156:1751
+103.212.81.154:6028
+130.51.42.169:7702
+155.94.136.130:5200
+163.123.143.8:8901
+173.212.199.134:4411
+173.249.196.201:5077
+185.254.37.81:5200
+194.147.140.186:5200
+23.227.199.39:1976
+38.255.42.252:5678
+45.133.235.148:5200
+46.183.222.97:5555
+46.183.223.122:29873
+91.193.75.147:6789
+94.156.64.213:5200
+jajaovh.duckdns.org
+jilnsmclein.3utilities.com
+kraldeli.linkpc.net
+segun.ddns.net
+unload.duckdns.org
+waswift.ddns.net
+Aimbotexee-22359.portmap.host
+Aimbotexee-47825.portmap.host
+AndroidOnline.ddnsgeek.com
+doldbolcein.crabdance.com
+funkytothebone.giize.com
+gggb.dvrdns.org
+peterzag63.ddns.net
+qgexserver.hopto.orgModify
+satgobleien.jumpingcrab.com

WarzoneRAT_AveMaria/warzonerat_c2s_2023_10_15.txt

@@ -1,427 +0,0 @@
-amospete26.duckdns.org
-warmoni147.duckdns.org
-santzo.warzonedns.com
-esureforme100.myddns.rocks
-panchak.duckdns.org
-170.130.165.120:5200
-luckyfavour2022.ddns.net
-zoneproess.duckdns.org
-0b3c.duckdns.org
-ranggamuffin.duckdns.org
-war3785host.ddns.net
-nonyserver001.duckdns.org
-zcv2ngnfg69354253.3utilities.com
-baramac.duckdns.org
-divy.nerdpol.ovh
-favour.ddnsgeek.com
-mylab.wshrt.sbs
-windnsch.freeddns.org
-xxxxza.dynamic-dns.net
-severdops.ddns.net
-cornerload.dynu.net
-nestssow.ddns.net
-remote.msoftupdate.me
-crazydns.linkpc.net
-hive01.duckdns.org
-mobibagugu.duckdns.org
-grace.adds-only.xyz
-obyhost.ddns.net
-light319.warzonedns.com
-mrtoby.hopto.org
-sheet.duckdns.org
-chongmei33.publicvm.com
-linelink-linesn.com
-kezlkelz.duckdns.org
-www.thatd6whnhdyd56jd.duckdns.org
-Securedbag2021-48502.portmap.host
-warzoneupdater.redirectme.net
-avarian717.duckdns.org
-godblessking.ddns.net
-jackbaur75.linkpc.net
-omc2015asm.ddns.net
-warzone.ddns.net
-tain77.duckdns.org
-balayinkudi.duckdns.org
-juner234.ddns.net
-emberluck.duckdns.org
-marknagy44565-36386.portmap.host
-sept5th.ddns.net
-bc.gta5modmenu.net
-goldfiner.dyn-ip24.de
-rentals.insidedns.com
-bedahogs.100chickens.me
-grounderwarone.rapiddns.ru
-eldragon.ooguy.com
-centurygift.myq-see.com
-febrem1.ddns.net
-herold.gotdns.ch
-myblessingsfor2022.ddns.net
-value747.duckdns.org
-billionaire.ddns.net
-kurtangle082.publicvm.com
-yulanda.hopto.org
-su1d.nerdpol.ovh
-n.nerdpol.ovh
-aidsweden.serveblog.net
-engkaa.ddns.net
-freshwarsmi.ddns.net
-rex1010.duckdns.org
-ugblackblessing2022.ddns.net
-lovemebygift.ddns.net
-mechenchan.duckdns.org
-minerz.duckdns.org
-work2020.ddns.net
-hongphilxxx.duckdns.org
-hilipizie.hopto.org
-hannijelrt.myddns.me
-websites.theworkpc.com
-windows2023update.duckdns.org
-werberyouse.kozow.com
-naval.duckdns.org
-checkingss.duckdns.org
-just-fax303.home-webserver.de
-adebaree.duckdns.org
-wealthymanr.kozow.com
-remotes1338.hopto.org
-juner234.ddns.net
-kazt.duckdns.org
-jiaxin.ddns.net
-gameofthrone.ddns.net
-warzonepw.ddns.net
-xxxanonymous147.duckdns.org
-mailporty.ddns.net
-asiumasium.ddns.net
-jaiban.duckdns.org
-zone.facebook-shoping.com
-kawasapi.co.in
-hijodelavida.duckdns.org
-afair.ddns.net
-msteelwar.ddns.net
-rencos121.duckdns.org
-ogodoswar.ddns.net
-oluwabless.ddns.net
-pubg.ddns.net
-fgudhiiugiufgifufgihdhuidfxgd.duckdns.org
-aribebate1337.ddns.net
-officelogs20.duckdns.org
-cx212x.ddns.net
-govcbn.duckdns.org
-grace.adds-only.xyz
-genasispony.publicvm.com
-tokyooffice1.duckdns.org
-evet.mywire.org
-mercenarywarzone.ddns.net
-mubbibun.duckdns.org
-expressdelivery.info
-bestsuccess.duckdns.org
-sdsd.nerdpol.ovh
-88.214.59.225:5200
-chukwuoma.duckdns.org
-xchilogs.duckdns.org
-sbdndbnb.duckdns.org
-macrim.duckdns.org
-cowboyd.ddns.net
-64.188.20.119:5200
-iphy.strangled.net
-onlythefamily.duckdns.org
-instac.duckdns.org
-office101.warzonedns.com
-sandyclark255.hopto.org
-warzone05b.duckdns.org
-yetye.ddns.net
-jeron7.duckdns.org
-barr2.ddns.net
-sapsurro.duckdns.org
-chinagov.duckdns.org
-godismyhope.ddns.net
-eichelberger.duckdns.org
-nchijindu2.hopto.org
-wazminister.duckdns.org
-dnuocc.com
-asscum.ddns.net
-travisrem.duckdns.org
-hsfdhhoop.ooguy.com
-sheb.ddns.net
-williamz20.ddns.net
-dephantomz.duckdns.org
-exportmunic007.duckdns.org
-1000usd.duckdns.org
-goodies.dynamic-dns.net
-iphy2.linkpc.net
-smila.ddns.net
-tamidem.duckdns.org
-newar21.duckdns.org
-msteel1759.ddns.net
-septembre.duckdns.org
-thegatorway.com
-anyinew.duckdns.org
-remote.msoftupdate.me
-guest.maximos.quest
-logcollector.xyz
-gratiyupo.ddnsfree.com
-dreams2reality.duckdns.org
-captainkwado.duckdns.org
-graceandfavour.ddns.net
-sept5th.ddns.net
-yggtccccchgr.duckdns.org
-satsundai.club
-ghjklhgteg.strangled.net
-mitty1.freemyip.com
-harjahwool.ddnsfree.com
-donpapajay.ddns.net
-dhkwufrsfhrgrsw.duckdns.org
-ijogaa.duckdns.org
-meduska.ddns.net
-grekris.freeddns.org
-karmakoin.gotdns.ch
-bed.fastestmaking.com
-warzoneburky.ddns.net
-apponfly.mywire.org
-strongodss.ddns.net
-phllka.com
-kenzeey.ddns.net
-bed.fastestmaking.com
-supercraft123.serveminecraft.net
-patront.duckdns.org
-online-3450.home-webserver.de
-grace.adds-only.xyz
-danseeeee.duckdns.org
-accessability042.ddns.net
-nan.ydns.eu
-osas212.duckdns.org
-rowanyne.ooo
-jude77.duckdns.org
-jiaxin.ddns.net
-mrbigs.hopto.org
-worrynot.duckdns.org
-waz.no-ip.ca
-warzone121.hopto.org
-moseslogs2022.ddns.net
-pussy12.duckdns.org
-newsfeed.msoftupdate.me
-udooiuyt.dynamic-dns.net
-godwin12.warzonedns.com
-nan.ydns.eu
-members-path.at.ply.gg
-nweke.ddnsgeek.com
-jeffdfehjhsda.ddns.net
-omglunie.hopto.org
-tende.dvrdns.org
-toomuchego.ydns.eu
-iphanyi.ddns.net
-21421412515215.duckdns.org
-anglekeys.warzonedns.com
-ls.pickzznoz.bar
-moneybank.ddns.net
-renareport.duckdns.org
-130.51.42.8:7890
-m1.swooptopnet.com
-xchilogs.duckdns.org
-crossllc.ddns.net
-sdafsdffssffs.ydns.eu
-warwin.duckdns.org
-mcmac.duckdns.org
-buzornn.ddns.net
-8830.sygcarpets.com
-104.152.189.140:5200
-bugsy.ddnsgeek.com
-80.76.51.172:8787
-netw.infiinite.com
-kmt.duckdns.org
-kellerwarzone.ddns.net
-smilecat.ddns.net
-hussanmohammed.duckdns.org
-workstation2022.ddns.net
-kohjguj.ydns.eu
-tiger22.ddns.net
-8e3d-wzr.duckdns.org
-uomz1.ddns.net
-esserc.ooguy.com
-ihttree.duckdns.org
-zonewar.ddnsking.com
-wzxbrian.duckdns.org
-shawgod1.sytes.net
-shallom2022server.sytes.net
-safe2202.ddns.net
-subwaynovember4good.ddns.net
-dfgedee.duckdns.org
-MYWARSWAR.ddnsfree.com
-p2.is-by.us
-backupson.duckdns.org
-goodyear21.duckdns.org
-speedfoxx1.hopto.org
-www.asnbanks.nl
-dompe.awsmppl.com
-taker1234.hopto.org
-chefdnshot.ddns.net
-afada.duckdns.org
-love.pure-luck.xyz
-privatexpo.duckdns.org
-stub.ignorelist.com
-caebd.ddns.net
-speedballing.warzonedns.com
-parkerpublic.com
-mutaalofomaha.com
-109.248.151.113:61743
-macsucc.ddns.net
-dfdgdsasedw.ydns.eu
-obibryme.ddns.net
-deidf.duckdns.org
-qgexserver.hopto.org
-grace.adds-only.xyz
-guykj.ddns.net
-nojonxn.duckdns.org
-greatr.warzonedns.com
-nyambe.duckdns.org
-emaildayo24.duckdns.org
-jamesxx.dynu.net
-xpwarzonlin2.ddns.net
-babajay.ddns.net
-jeanellasimonsxxx.ddns.net
-jeffreyrobertsrnama.ddns.net
-mgc2090.duckdns.org
-tobi12345.hopto.org
-pentester01.duckdns.org
-telenaxty.ddns.net
-gpent.duckdns.org
-valvesco.duckdns.org
-group.loseyourip.com
-boobsy.duckdns.org
-iyhto.ddns.net
-xchilogs.duckdns.org
-xls.medicelcoolers.cn
-tef-co-ir.com
-rikpoman.mywire.org
-warzonez.linkpc.net
-eiuthwr5436dr.duckdns.org
-subwayblessings2022.ddns.net
-warz.viewdns.net
-rootsec.linkpc.net
-alukoren.duckdns.org
-jasphet.duckdns.org
-papi1.ddns.net
-untyaru.casacam.net
-winvins.3utilities.com
-mutaalofomaha.com
-davidwongwarzone.zapto.org
-membership.myddns.rocks
-unload.duckdns.org 
-sipex2021.ddns.net
-millionways.duckdns.org
-esureforme100.myddns.rocks
-ojo123.ddns.net
-miner.fckinpwned.cn
-bigmoney2020.ath.cx
-alliedofficewarz.ddns.net
-newvic.myvnc.com
-dkhurams.duckdns.org
-eccoclean.hopto.org
-kempes.ddns.net
-mitty.ultraddns.com
-resultbox0147logs.ddns.net
-donelpacino.ddns.net
-4kr4m0.ddns.net
-plazzasecretballeronline.onedumb.com
-brf1.secondaryservicelog.cloudns.cx
-masterhugo231.servecounterstrike.com
-pentester01.duckdns.org
-mywarswarw.ddns.net
-bigleaks3.ddns.net
-kimlee11.duckdns.org
-konkation.duckdns.org
-spoudel.mywire.org
-adaisreal.ddns.net
-newzone.from-ne.com
-iphanyi.chickenkiller.com
-mondaynew22.3utilities.com
-graceofgod.myftp.biz
-2c04mm.hopto.org
-apiv1.duckdns.org
-benztel.hopto.org
-cmark.duckdns.org
-wz.servehttp.com
-cachepallioniwarznpa.icu
-pstericdd.duckdns.org
-makavi.hopto.org
-binancino.hopto.org
-princekelvin.ddns.net
-93.123.118.3:65535
-osiarus.duckdns.org
-windowsupdater64x.theworkpc.com
-medicosta.linkpc.net
-mansengco778.ddns.net
-agent47.ddns.net
-moneybank.ddns.net
-jayurbf.gleeze.com
-Superherocan.mywire.org
-gecisdiktatura.chickenkiller.com
-lapoire3.hopto.org
-moneybank.ddns.net
-wapt.myhome-server.de
-newtechublil.ddns.net
-blessing.maximos.quest
-arronsterritfamilyplan.duckdns.org
-oneness.duckdns.org
-chexfotii.ddns.net
-bluemoon7.duckdns.org
-backup1212.ddns.net
-Sanael-62946.portmap.host
-hannoyputa.giize.com
-newwarr.ddns.net
-cbngroup.duckdns.org
-uhie2021.duckdns.org
-maxlogs.webhop.me
-mutaalofomaha.com
-yerrionminutes.freedynamicdns.org
-genasispony.hopto.org
-willia2.ddns.net
-warsone.duckdns.org
-chefdnshot.ddns.net
-lindsaystewart113.hopto.org
-thedonaldman77.warzonedns.com
-style.etanetsys.com
-gds1733.my.to
-mobibanewdan.duckdns.org
-sams1234.ddns.net
-kkkindo.ddns.net
-soon-lp.at.ply.gg
-jevron.duckdns.org
-bigissssss.zzux.com
-jenniferhong.publicvm.com
-kashbilly222.ddns.net
-hurricane.ydns.eu
-oficina3030.duckdns.org
-crow1234.ddns.net
-verifysec0.myftp.biz
-flytin.duckdns.org
-warkarwaka.duckdns.org
-efiigbo9.duckdns.org
-warzone109983runnerhacker.duckdns.org
-glorylnter.hopto.org
-cabalfenix.ddns.net
-smsv4.ufcfan.org
-hafiznor336.duckdns.org
-resereved.nerdpol.ovh
-vladisdns.rapiddns.ru
-wapt.myhome-server.de
-blackbenz.duckdns.org
-chrisle79.ddns.net
-savagesquad.ooguy.com
-secureyourdataarea1.duckdns.org
-lati10.ddns.net
-pentester01.duckdns.org
-warzon957.duckdns.org
-dar123.hopto.org
-warzonepw.ddns.net
-pliblu-fax.home-webserver.de
-war.servebeer.com
-niggalips.hopto.org
-mcavy.duckdns.org
-morggy11.ooguy.com
-5.181.80.111:5200
-bu250653.hopto.org
-seencroundercontroller.webredirect.org
-iphanyi.entrydns.org
-cx212xc.ddns.net
-103.212.81.156:1751
-dropy1.ddns.net

WarzoneRAT_AveMaria/warzonerat_c2s_2023_11_06.txt

@@ -1,410 +0,0 @@
-103.212.81.154:6028
-1140.ninqshing.net
-130.51.42.169:7702
-155.94.136.130:5200
-163.123.143.8:8901
-173.212.199.134:4411
-173.249.196.201:5077
-185.254.37.81:5200
-194.147.140.186:5200
-21421412515215.duckdns.org
-23.227.199.39:1976
-2x5v.2p.fm
-38.255.42.252:5678
-411184r.duckdns.org
-45.133.235.148:5200
-46.183.222.97:5555
-46.183.223.122:29873
-4kr4m0.ddns.net
-4sureme.ddns.net
-6620.jianhong356.com
-8e3d-wzr.duckdns.org
-91.193.75.147:6789
-94.156.64.213:5200
-absolut7.duckdns.org
-adaisreal.ddns.net
-aeasc541ac56sa65c.hopto.org
-afada.duckdns.org
-afair.ddns.net
-aidsweden.serveblog.net
-akubig1.ath.cx
-alliedofficewarz.ddns.net
-alukoren.duckdns.org
-amallasal.com
-andronmatskiv20.sytes.net
-ankarab.ddns.net
-anthonyveeder.com
-apponfly.mywire.org
-asiumasium.ddns.net
-ast3rhost.ddns.net
-avira-antivirus.ydns.eu
-babajay.ddns.net
-balayinkudi.duckdns.org
-banta.ddns.net
-baotao.3utilities.com
-barr2.ddns.net
-bc.gta5modmenu.net
-bed.fastestmaking.com
-bedahogs.100chickens.me
-bestgrace.mywire.org
-bestsuccess.ddns.net
-bigissssss.zzux.com
-bigmoney2020.ath.cx
-blacice24.hopto.org
-blackbenz.duckdns.org
-blaq.nerdpol.ovh
-blaq56491.nerdpol.ovh
-blasterblast.warzonedns.com
-blessing.maximos.quest
-blessnbwz.istmein.de
-blessthychild.ddns.net
-bluemail-fax.home-webserver.de
-boobsy.duckdns.org
-boomooil.com
-brf1.secondaryservicelog.cloudns.cx
-bryandatabase.duckdns.org
-bu250653.hopto.org
-buzornn.ddns.net
-byx.z86.ru
-cachepallioniwarznpa.icu
-caebd.ddns.net
-casasma.casacam.net
-ccnewcdt.duckdns.org
-centurygift.myq-see.com
-cfr.eur-import.com
-chardomin.duckdns.org
-charlesdnsoh.duckdns.org
-checkme12.freeddns.org
-chefdnshost.ddns.net
-chefdnshost.duckdns.org
-chefdnshot.ddns.net
-chexfotii.ddns.net
-chongmei33.publicvm.com
-chukwuoma.duckdns.org
-cjlumberslimited.ddns.net
-clientss777.duckdns.org
-cornerload.dynu.net
-crazydns.linkpc.net
-cusomtamon.freeddns.org
-cx212x.ddns.net
-cx212xc.ddns.net
-cxww2.ddns.net
-danseeeee.duckdns.org
-dar123.hopto.org
-darkfox.ddns.net
-darkworldblackerlocker.dumb1.com
-deidf.duckdns.org
-dephantomz.duckdns.org
-desireblex.ddns.net
-dfdgdsasedw.ydns.eu
-dgorijan20785.hopto.org
-divy.nerdpol.ovh
-dnmpbczm0963fxtdplc.duckdns.org
-donelpacino.ddns.net
-donpapajay.ddns.net
-dontreachme3.ddns.net
-dreams2reality.duckdns.org
-dubem2021.duckdns.org
-duckguy.duckdns.org
-eichelberger.duckdns.org
-eiuthwr5436dr.duckdns.org
-elboasin.ddns.net
-emberluck.duckdns.org
-engkaa.ddns.net
-esserc.ooguy.com
-esureforme100.myddns.rocks
-evet.mywire.org
-export.zapto.org
-exportmunic007.duckdns.org
-expressdelivery.info
-faith.zapto.org
-favormelord.ddns.net
-favour.ddnsgeek.com
-febnew3.ddns.net
-FEBREM1.DDNS.NET
-fgbgfyby.loseyourip.com
-fghj.nerdpol.ovh
-forcema002.duckdns.org
-free66.hopto.org
-fresh12.ddns.net
-fukfndru.ddns.net
-gameofthrone.ddns.net
-gbotowaya.duckdns.org
-gds1733.my.to
-gecisdiktatura.chickenkiller.com
-genasispony.hopto.org
-genasispony.publicvm.com
-georgerandome253.hopto.org
-gerogexcsdf234234sdfsvxc341242324.publicvm.com
-ghjklhgteg.strangled.net
-godblessking.ddns.net
-goodyear21.duckdns.org
-googleservers.org
-govcbn.duckdns.org
-gpent.duckdns.org
-grace.adds-only.xyz
-grace2nation.ddns.net
-graceandfavour.ddns.net
-graceland777.ddns.net
-graceofgod.myftp.biz
-greatr.warzonedns.com
-grekris.freeddns.org
-griffins.hopto.org
-grounderwarone.rapiddns.ru
-guest.maximos.quest
-hafiznor336.duckdns.org
-hamzzaogolozar77.toythieves.com
-hannijelrt.myddns.me
-hannoyputa.giize.com
-helpme20.duckdns.org
-herold.gotdns.ch
-hightense.duckdns.org
-hijodelavida.duckdns.org
-hilipizie.hopto.org
-hive01.duckdns.org
-hongphilxxx.duckdns.org
-hotelbr.minhacasa.tv
-hsfdhhoop.ooguy.com
-hussanmohammed.duckdns.org
-ifedinma.duckdns.org
-ijele22.ooguy.com
-imunstoppable.duckdns.org
-info1.dynamic-dns.net
-info111.ddns.net
-instac.duckdns.org
-iphanyi.chickenkiller.com
-iphanyi.mywire.org
-iphy.strangled.net
-iron19.ddns.net
-items.myq-see.com
-iyhto.ddns.net
-jabsgu.kozow.com
-jackbaur75.linkpc.net
-jajaovh.duckdns.org
-jasphet.duckdns.org
-jayurbf.gleeze.com
-jeron7.duckdns.org
-jiaxin.ddns.net
-jilnsmclein.3utilities.com
-jsbcdns.warzonedns.com
-juner234.ddns.net
-just-fax303.home-webserver.de
-karmakoin.gotdns.ch
-kashbilly.duckdns.org
-kazt.duckdns.org
-kellerwarzone.ddns.net
-kempes.ddns.net
-killabean.duckdns.org
-kimlee11.duckdns.org
-king1.warzonedns.com
-kingsdoggy12.hopto.org
-kinosoft.hopto.org
-kk101.ddns.net
-konkation.duckdns.org
-kraldeli.linkpc.net
-lag.ddns.net
-latua.nsupdate.info
-lesbianporn.duckdns.org
-light319.warzonedns.com
-linelink-linesn.com
-lionlee.nerdpol.ovh
-lionleee.nerdpol.ovh
-livinglogs.servehalflife.com
-love.nsupdate.info
-love.pure-luck.xyz
-luckyfavour2022.ddns.net
-m1.swooptopnet.com
-macking.duckdns.org
-macrim.duckdns.org
-macsucc.ddns.net
-maine007.hopto.org
-mamased.duckdns.org
-mansengco778.ddns.net
-marknagy44565-36386.portmap.host
-maulo.duckdns.org
-mcavy.duckdns.org
-mechenchan.duckdns.org
-meduska.ddns.net
-members-path.at.ply.gg
-mercenarywarzone.ddns.net
-metroboomiin.duckdns.org
-mgc2090.duckdns.org
-micasamiwedding.duckdns.org
-microsoft-update-tool.duckdns.org
-migracion.linkpc.net
-minekroft.duckdns.org
-miner.fckinpwned.cn
-mitty.ultraddns.com
-mobibagugu.duckdns.org
-mobibanewdan.duckdns.org
-mokoolm.gleeze.com
-mondaynew22.3utilities.com
-mosesmanservernew.hopto.org
-mutaalofomaha.com
-MYWARSWAR.ddnsfree.com
-mywarswarw.ddns.net
-MYWARSWARW.ddnsfree.com
-n.nerdpol.ovh
-nasas.dnsupdate.info
-naval.duckdns.org
-nchijindu2.hopto.org
-netw.infiinite.com
-newnex.3utilities.com
-newpart.cam
-newsfeed.msoftupdate.me
-newtechublil.ddns.net
-newvic.myvnc.com
-newzone.from-ne.com
-nightmare4666.ddns.net
-nojonxn.duckdns.org
-normanaman.duckdns.org
-noxbot.ddns.net
-nweke.ddnsgeek.com
-nyambe.duckdns.org
-obibryme.ddns.net
-obyhost.ddns.net
-ofenja.zapto.org
-office101.warzonedns.com
-officeday2022.ddns.net
-officedesktop004018.webredirect.org
-oficina3030.duckdns.org
-olodofries88.ddns.net
-omc2015asm.ddns.net
-onlythefamily.duckdns.org
-ontmintuejio.sytes.net
-onyem.duckdns.org
-osairus.duckdns.org
-osas212.duckdns.org
-ozcall.duckdns.org
-p2.is-by.us
-parkerpublic.com
-pc.khenz-pc.com
-peggy.ddnsgeek.com
-pentester0.accesscam.org
-pentester01.duckdns.org
-phllka.com
-port15e.zapto.org
-pradeepprabhu705.ddns.net
-princsa.ddns.net
-promotrans54185.ddns.net
-provent.ddns.net
-pubg.ddns.net
-publicvm.casacam.net
-qgexserver.hopto.orgModify
-rajsavindia.hopto.org
-ranggamuffin.duckdns.org
-remote.msoftupdate.me
-remotes1338.hopto.org
-rencos121.duckdns.org
-rentals.insidedns.com
-resereved.nerdpol.ovh
-resultbox0147logs.ddns.net
-revive147.duckdns.org
-richiealvin2021.ddns.net
-rippeymp811.ddns.net
-rtyui.nerdpol.ovh
-safe2202.ddns.net
-samirsana2019.myftp.biz
-sams1234.ddns.net
-Sanael-62946.portmap.host
-sandyclark255.hopto.org
-sapsurro.duckdns.org
-satsundai.clu
-satusdei.ddns.net
-sbdndbnb.duckdns.org
-segun.ddns.net
-sept5th.ddns.net
-septembre.duckdns.org
-sgzi.e20.ru
-shawcn1.sytes.net
-sheet.duckdns.org
-sipex2021.ddns.net
-smartconnect.duckdns.org
-smila.ddns.net
-soft.maximos.quest
-soon-lp.at.ply.gg
-spamworzon.duckdns.org
-speedfoxx1.hopto.org
-spicydojo.duckdns.org
-steam9.duckdns.org
-stoic.gleeze.com
-su1d.nerdpol.ovh
-subwayblessings2022.ddns.net
-subwaynovember4good.ddns.net
-suitehvd2.home-webserver.de
-syncronize.3utilities.com
-tain.rapiddns.ru
-tain77.duckdns.org
-tef-co-ir.com
-telegrammylink.ddns.net
-tende.dvrdns.org
-thankme1.ddns.net
-thedarkly.linkpc.net
-tokyooffice1.duckdns.org
-tonymaris7342.ddns.net
-trenchesrelax.duckdns.org
-trendyfela.myftp.biz
-tresor2020.ddns.net
-ugob.ddns.net
-unload.duckdns.org 
-untyaru.casacam.net
-update.aquaholic.dev
-valvesco.duckdns.org
-victorycolum.ddns.net
-vivald21.hopto.org
-wakar.duckdns.org
-wapt.myhome-server.de
-war.servebeer.com
-war101.ddns.net
-war3785host.ddns.net
-warvm.duckdns.org
-warz.viewdns.net
-warzon.duckdns.org
-warzon957.duckdns.org
-warzone.ddns.net
-warzone05b.duckdns.org
-warzone109983runnerhacker.duckdns.org
-warzone12.ddns.net
-warzone121.hopto.org
-warzone2020.duckdns.org
-warzoneburky.ddns.net
-warzonecastro.ddns.net
-warzonepw.ddns.net
-warzonez.linkpc.net
-warzonnee.duckdns.org
-waswift.ddns.net
-wazminister.duckdns.org
-wealth.warzonedns.com
-wealthymanr.kozow.com
-weurtdgfjs.rapiddns.ru
-willia2.ddns.net
-williamz20.ddns.net
-windnsch.freeddns.org
-windows.wshrt.sbs
-windowsupdater64x.theworkpc.com
-winwin76997708nk.awsmppl.com
-work2020.ddns.net
-workbro.duckdns.org
-www.asnbanks.nl
-www.dnuocc.com
-www.thatd6whnhdyd56jd.duckdns.org
-www.turdtaco.xyz
-www.warkarwaka.duckdns.org
-wz-patient001.duckdns.org
-wz.servehttp.com
-wzefi.duckdns.org
-wzxbrian.duckdns.org
-xchilogs.duckdns.org
-xls.medicelcoolers.cn
-xpcehopsford.ddns.net
-xxxxza.dynamic-dns.net
-ydess.duckdns.org
-year2021best.mine.nu
-yerrionminutes.freedynamicdns.org
-yetye.ddns.net
-yggtccccchgr.duckdns.org
-zaki29.ddns.net
-zcv2ngnfg69354253.3utilities.com
-zingx1.ddns.net
-zoppw.mywire.org
-zopzw.ddns.net

WarzoneRAT_AveMaria/warzonerat_c2s_2023_11_21.txt

@@ -1,426 +0,0 @@
-vodahelp.myvnc.com
-segun.ddns.net
-remote.msoftupdate.me
-mailporty.ddns.net
-blessnbwz.istmein.de
-bovigar.duckdns.org
-doldbolcein.crabdance.com
-tresor2020.ddns.net
-jackbaur75.linkpc.net
-omerlan.duckdns.org
-pstericdd.duckdns.org
-lovemebygift.ddns.net
-pradeepprabhu705.ddns.net
-warwin.duckdns.org
-newtechublil.ddns.net
-udooiuyt.dynamic-dns.net
-medicosta.linkpc.net
-willia2.ddns.net
-rootsec.linkpc.net
-eriwauwa.duckdns.org
-gerogexcsdf234234sdfsvxc341242324.publicvm.com
-anglekeys.warzonedns.com
-blessing.maximos.quest
-KTS666.PUBLICVM.COM
-tawk.duckdns.org
-favour.ddnsgeek.com
-caebd.ddns.net
-work2020.ddns.net
-bluemail-fax.home-webserver.de
-dnmpbczm0963fxtdplc.duckdns.org
-wealth.warzonedns.com
-princekelvin.ddns.net
-googleservers.org
-smilecat.ddns.net
-g8787.ddns.net
-p2.is-by.us
-newpart.cam
-bestsuccess.ddns.net
-googlemap.ddns.net
-vladisdns.rapiddns.ru
-patront.duckdns.org
-windows2012.theworkpc.com
-onyem.duckdns.org
-ls.pickzznoz.bar
-mydomain007.duckdns.org
-panchak.duckdns.org
-year2021best.mine.nu
-buy.teamviewsoft.com
-cornerload.dynu.net
-ngray.duckdns.org
-yulanda.hopto.org
-dontreachme3.ddns.net
-alexxaan.duckdns.org
-pc.khenz-pc.com
-febrem1.ddns.net
-werberyouse.kozow.com
-bc.gta5modmenu.net
-xxxxza.dynamic-dns.net
-6620.jianhong356.com
-king1.warzonedns.com
-miner.fckinpwned.cn
-kkkindo.ddns.net
-msdos.treatwellshome.xyz
-ifedinma.duckdns.org
-rencos121.duckdns.org
-boobsy.duckdns.org
-pato01.ddns.net
-kingmeth.ddns.net
-gecisdiktatura.chickenkiller.com
-kellerwarzone.ddns.net
-duck50501.hopto.org
-fukfndru.ddns.net
-osairus.duckdns.org
-value747.duckdns.org
-Aimbotexee-22359.portmap.host
-fgbgfyby.loseyourip.com
-thegatorway.com
-boomooil.com
-rtyui.nerdpol.ovh
-blackroots7.duckdns.org
-dropy1.ddns.net
-blessing.maximos.quest
-dompe.awsmppl.com
-blaq.nerdpol.ovh
-smartconnect1.duckdns.org
-oficina3030.duckdns.org
-naval.duckdns.org
-chardomin.duckdns.org
-trendyfela.myftp.biz
-imunstoppable.duckdns.org
-newmanserverug.ddns.net
-remote.isubi.sbs
-dezember22.duckdns.org
-global22.ddns.net
-smartupdater.lignarn.com
-donpapajay.ddns.net
-kenmolle.ddns.net
-ast3rhost.ddns.net
-victorycolum.ddns.net
-iphy2.linkpc.net
-dgorijan20785.hopto.org
-olodofries88.ddns.net
-chefdnshost.ddns.net
-port15e.zapto.org
-crossllc.ddns.net
-jsbcdns.warzonedns.com
-designed-nodes.at.ply.gg
-AndroidOnline.ddnsgeek.com
-godismyhope.ddns.net
-mcmac.duckdns.org
-afada.duckdns.org
-oneness.duckdns.org
-fagbishop.duckdns.org
-netw.infiinite.com
-evakarpati.ddns.net
-expressdelivery.info
-mechenchan.duckdns.org
-healings.duckdns.org
-wealthymanr.kozow.com
-alliedofficewarz.ddns.net
-dubem2021.duckdns.org
-arronsterritfamilyplan.duckdns.org
-warnonmobina.duckdns.org
-godblessking.ddns.net
-windows2023update.duckdns.org
-zopzw.ddns.net
-rentals.insidedns.com
-sbdndbnb.duckdns.org
-cusomtamon.freeddns.org
-Aimbotexee-47825.portmap.host
-spoudel.mywire.org
-forcema002.duckdns.org
-xxxanonymoussom.duckdns.org
-anthonyveeder.com
-chukwuoma.duckdns.org
-huhuhu.ooguy.com
-msteel1759.ddns.net
-power22.myftp.org
-stoic.gleeze.com
-mrbigs.hopto.org
-accessability042.ddns.net
-osiarus.duckdns.org
-godhlep.ddns.net
-wtwrrtxhssbqsm-fk.duckdns.org
-enginekeysmoney.ddns.net
-papi1.ddns.net
-untyaru.casacam.net
-kinosoft.hopto.org
-nestssow.ddns.net
-dfdgdsasedw.ydns.eu
-warzoneburky.ddns.net
-govcbn.duckdns.org
-makavi.hopto.org
-38.170.239.48:7506
-fresh12.ddns.net
-hannoyputa.giize.com
-absolut7.duckdns.org
-remote.msoftupdate.me
-info111.ddns.net
-mutaalofomaha.com
-waz.no-ip.ca
-peterzag63.ddns.net
-kimlee11.duckdns.org
-valvesco.duckdns.org
-xchilogs.duckdns.org
-warzone12.ddns.net
-grotomniponmyte.sytes.net
-ccnewcdt.duckdns.org
-zoneproess.duckdns.org
-lionleee.nerdpol.ovh
-softwarehost3.ddns.net
-jaiban.duckdns.org
-helpme20.duckdns.org
-papiguy1.ddns.net
-newsfeed.msoftupdate.me
-yetye.ddns.net
-feeders.ninqshing.net
-sams1234.ddns.net
-sapsurro.duckdns.org
-satgobleien.jumpingcrab.com
-blasterblast.warzonedns.com
-zonewar.ddnsking.com
-mamased.duckdns.org
-logcollector.xyz
-gds1733.my.to
-qgexserver.hopto.orgModify
-smsv4.ufcfan.org
-warvm.duckdns.org
-normanaman.duckdns.org
-exportmunic007.duckdns.org
-RetrieverConnection.ga
-8830.sygcarpets.com
-thedonaldman77.warzonedns.com
-buzornn.ddns.net
-mondaynew22.3utilities.com
-clientss777.duckdns.org
-Securedbag2021-48502.portmap.host
-cfr.eur-import.com
-gpent.duckdns.org
-benson12.ddns.net
-free66.hopto.org
-warzon957.duckdns.org
-dreams2reality.duckdns.org
-membership.myddns.rocks
-blacice24.hopto.org
-macsucc.ddns.net
-nasas.dnsupdate.info
-vieir.warzonedns.com
-wrzone-srvr-connector-port.windows-updates.co
-harjahwool.ddnsfree.com
-checkme12.freeddns.org
-iphy.strangled.net
-blackpyramid.duckdns.org
-telegrammylink.ddns.net
-safe2202.ddns.net
-members-path.at.ply.gg
-FEBREM1.DDNS.NET
-0b3c.duckdns.org
-spamworzon.duckdns.org
-travisrem.duckdns.org
-sipex2021.ddns.net
-sanchuza.warzonedns.com
-amospete26.duckdns.org
-menaxe.nsupdate.info
-maxcoopart80.ddns.net
-jasphet.duckdns.org
-waswift.ddns.net
-1000usd.duckdns.org
-bluemoon7.duckdns.org
-maxlogs.webhop.me
-phaz6434325328.redirectme.net
-myblessingsfor2022.ddns.net
-freshwarsmi.ddns.net
-meeti.hopto.org
-ijele22.ooguy.com
-wizzyfdgod.gotdns.com
-metroboomiin.duckdns.org
-goodyear21.duckdns.org
-santzo.warzonedns.com
-bed.fastestmaking.com
-amaraciiiiiiii.duckdns.org
-provent.ddns.net
-severdops.ddns.net
-www.sgstgfahdg7126edha.duckdns.org
-eazeeflo.warzonedns.com
-grounderwarone.rapiddns.ru
-willia2.ddns.net
-speedfoxx1.hopto.org
-peggy.ddnsgeek.com
-safe2202.ddns.net
-cachepallioniwarznpa.icu
-hbfyewtuvfbhsbdjhjwebfy.net
-95.168.174.55:5200
-juner234.ddns.net
-asscum.ddns.net
-renareport.duckdns.org
-ozcall.duckdns.org
-acommand.duckdns.org
-hjjhjkk.ydns.eu
-mcavy.duckdns.org
-blessed232.duckdns.org
-desireblex.ddns.net
-kenzeey.ddns.net
-websites.theworkpc.com
-thedarkly.linkpc.net
-kempes.ddns.net
-jabsgu.kozow.com
-chrisle79.ddns.net
-menaxe.duckdns.org
-noxbot.ddns.net
-resultbox0147logs.ddns.net
-www.warkarwaka.duckdns.org
-bar2020.ddns.net
-marknagy44565-36386.portmap.host
-phllka.com
-zoppw.mywire.org
-luckynovember4good.ddns.net
-charlesdnsoh.duckdns.org
-samguys2.duckdns.org
-hotboy01.ddns.net
-iphanyi.chickenkiller.com
-wazminister.duckdns.org
-danseeeee.duckdns.org
-oluwabless.ddns.net
-asdfwrkhl.warzonedns.com
-guiller.ddns.net
-194.147.140.140:1769
-cx212x.ddns.net
-rowanyne.ooo
-warzone33.duckdns.org
-osas212.duckdns.org
-bestsuccess.ddns.net
-obyhost.ddns.net
-newwarr.ddns.net
-gbotowaya.duckdns.org
-yerrionminutes.freedynamicdns.org
-ugoguy01.ddns.net
-wz.servehttp.com
-favormelord.ddns.net
-septembre.duckdns.org
-ijogaa.duckdns.org
-brf1.secondaryservicelog.cloudns.cx
-remotes1338.hopto.org
-xxxanonymous147.duckdns.org
-chefdnshot.ddns.net
-tokyooffice1.duckdns.org
-moneybank.ddns.net
-zone.facebook-shoping.com
-jayurbf.gleeze.com
-danngh.ddns.net
-akubig1.ath.cx
-bed.fastestmaking.com
-vasticbless.hopto.org
-checkingss.duckdns.org
-sept5th.ddns.net
-kohjguj.ydns.eu
-warzon.duckdns.org
-warzone.ddns.net
-microsoft-update-tool.duckdns.org
-hamzzaogolozar77.toythieves.com
-epiclauncher.duckdns.org
-au.warzonedns.com
-genasispony.hopto.org
-ca-fax123.home-webserver.de
-bigissssss.zzux.com
-badnulls.warzonedns.com
-valvesco.duckdns.org
-resereved.nerdpol.ovh
-tonymaris7342.ddns.net
-21421412515215.duckdns.org
-esureforme100.myddns.rocks
-niggalips.hopto.org
-harjahwool.ddnsfree.com
-ankarab.ddns.net
-ebase.duckdns.org
-vivald21.hopto.org
-topimoiofnfiomog.freedynamicdns.org
-olodofries.ddns.net
-supercraft123.serveminecraft.net
-lumberr.duckdns.org
-dgorijan20785.hopto.org
-spicydojo.duckdns.org
-wapt.myhome-server.de
-xmowa.ddns.net
-jeffreyrobertsrnama.ddns.net
-amallasal.com
-warzon957.duckdns.org
-general.wifi-app.net
-kali123.hopto.org
-ranggamuffin.duckdns.org
-bryandatabase.duckdns.org
-just-fax303.home-webserver.de
-testing1212.ddns.net
-anyinew.duckdns.org
-4610215325.redirectme.net
-warkarwaka.duckdns.org
-194.147.140.205:1994
-winwin76997708nk.awsmppl.com
-xls.medicelcoolers.cn
-capeview.duckdns.org
-putmein.zapto.org
-buzornn.ddns.net
-kw9d0w.duckdns.org
-syncronize.3utilities.com
-windows.wshrt.sbs
-andronmatskiv20.sytes.net
-4kr4m0.ddns.net
-ihttree.duckdns.org
-tobi12345.hopto.org
-online-3450.home-webserver.de
-micasamiwedding.duckdns.org
-warzonepw.ddns.net
-bigmoney2020.ath.cx
-none0468.ddns.net
-xchilogs.duckdns.org
-nan.ydns.eu
-banta.ddns.net
-ghjklhgteg.strangled.net
-dar123.hopto.org
-mutaalofomaha.com
-fgudhiiugiufgifufgihdhuidfxgd.duckdns.org
-strongodss.ddns.net
-warzonlicen1304.ddns.net
-grace2nation.ddns.net
-afair.ddns.net
-jeffdfehjhsda.ddns.net
-backup1212.ddns.net
-karmakoin.gotdns.ch
-guest.maximos.quest
-sdafsdffssffs.ydns.eu
-funkytothebone.giize.com
-gratiyupo.ddnsfree.com
-cjlumberslimited.ddns.net
-revive147.duckdns.org
-MYWARSWAR.ddnsfree.com
-blackish.hopto.org
-grace.adds-only.xyz
-mrtoby.hopto.org
-icey.awsmppl.com
-satusdei.ddns.net
-n.nerdpol.ovh
-backupson.duckdns.org
-unload.duckdns.org 
-pentester01.duckdns.org
-love.nsupdate.info
-barr2.ddns.net
-Superherocan.mywire.org
-glorylnter.hopto.org
-newnex.3utilities.com
-pentester01.duckdns.org
-iron65.ddns.net
-gggb.dvrdns.org
-rodasiter.duckdns.org
-hightense.duckdns.org
-baramac.duckdns.org
-wizzycheddah1.duckdns.org
-warzonez.linkpc.net
-pentester0.accesscam.org
-yerrionminutes.freedynamicdns.org
-m1.swooptopnet.com
-crow1234.ddns.net
-toomuchego.ydns.eu
-benztel.hopto.org
-story43.ddns.net
-kmt.duckdns.org
-febnew3.ddns.net

XWorm/xworm_all.txt

@@ -347,3 +347,149 @@ share-divorce.at.ply.gg:31298
 leakportsnext.duckdns.org:55443
 212.87.204.124:5555
 trial-pour.at.ply.gg:52808
+homesafe1000.duckdns.org
+youtubevideos.ddns.net
+chikes17.duckdns.org
+50.114.203.104:7909
+159.69.11.30:7000
+81.67.181.238:9033
+mo1010.duckdns.org
+soon-lp.at.ply.gg
+faq.medecinsansfrontiere.fr
+planpnl.duckdns.org
+191.101.130.18:8252
+255.255.255.0:12999
+141.98.6.196:7020
+154.53.51.233:8909
+xvskill.duckdns.org
+Graxe239-61522.portmap.host
+copy-marco.gl.at.ply.gg
+atelilian99.ddns.net
+garden-event.at.ply.gg
+size-bills.at.ply.gg
+23.106.215.7:7007
+16.ip.gl.ply.gg
+xyoptotway.work.gd
+88.11.59.100:8888
+209.145.51.44:7000
+floptuytonroyem.sytes.net
+51.89.158.83:7000
+20.229.184.215:65350
+103.114.106.183:47074
+4Mekey.myftp.biz
+pool-roman.at.ply.gg
+101.99.92.161:7000
+friend-deer.gl.at.ply.gg
+51.81.216.78:1111
+registered-dt.at.ply.gg
+66.94.97.98:7000
+20.197.231.178:7000
+windowsmanagerhost.ddns.net
+rick63.publicvm.com
+brightle.ddns.net
+216.230.73.215:6789
+139.99.153.82:8181
+federal-true.gl.at.ply.gg
+138.201.189.141:4444
+147.185.221.16:45753
+androidmedallo.duckdns.org
+face-kissing.gl.at.ply.gg
+serverwindor.duckdns.org
+xmsh.publicvm.com
+mode-apollo.gl.at.ply.gg
+releases-photos.at.ply.gg
+163.5.215.212:1337
+mike09-55168.portmap.host
+testarosa.duckdns.org
+having-nevertheless.gl.at.ply.gg
+jameshde18.duckdns.org
+41.216.188.29:7000
+functions-screensavers.gl.at.ply.gg
+147.185.221.16:57076
+163.5.215.212:8072
+147.185.221.16:56343
+193.161.193.99:61360
+95.164.18.46:2608
+rules-views.at.ply.gg
+157.254.223.19:8000
+147.185.221.16:57012
+adult-purchased.gl.at.ply.gg
+frostycheats-30646.portmap.host
+lee44.kozow.com
+147.185.221.16:18915
+147.185.221.16:40164
+147.185.221.16:49975
+15.228.35.69:5000
+172.177.19.106:7000
+181.217.95.27:1024
+188.148.105.135:2112
+2freshinxworm2.ddns.net
+35.220.199.19:7000
+54.90.216.100:7001
+62.233.57.160:6789
+95.214.27.146:47600
+ANTILOL2113-61842.portmap.host
+case-defines.gl.at.ply.gg
+DizzyWizzy-61490.portmap.host
+espadadz.ddns.net
+f8terat.ddns.net
+fl-distributions.gl.at.ply.gg
+freshinxworm.ddns.net
+goheg99417-59409.portmap.host
+juandice-60636.portmap.io
+kriz-nas.ddnss.de
+lead-selections.gl.at.ply.gg
+m0ney7.ddns.net
+media-specified.gl.at.ply.gg
+menu-webcam.gl.at.ply.gg
+normanisback.com
+notfishvr55-32209.portmap.host
+okaa0-25007.portmap.host
+okaa0-35095.portmap.host
+partner-juice.gl.at.ply.gg
+q-grounds.gl.at.ply.gg
+raven123.ddnsgeek.com
+reference-tokyo.at.ply.gg
+secoundxwormm.ddns.net
+shows-brussels.gl.at.ply.gg
+tarekfr77-41254.portmap.host
+tcxerr.duckdns.org
+104.250.180.178:7061
+147.185.221.17:24796
+162.212.154.8:41589
+185.183.34.34:7000
+185.239.237.162:7000
+2023navidad.duckdns.org
+206.189.20.127:6234
+207.32.219.52:7771
+216.107.136.195:7000
+3.121.139.82:18925
+3.121.139.82:5240
+3.127.59.75:18925
+3.127.59.75:5240
+34.130.82.241:5010
+46.183.221.28:7000
+51.89.38.74:33966
+52.28.112.211:18925
+52.28.112.211:5240
+52.91.10.228:7000
+54.90.216.100:7000
+65.0.80.77:7000
+80.66.87.4:7000
+87.172.204.140:7000
+93.123.85.35:7000
+around-lite.gl.at.ply.gg
+conditions-monthly.at.ply.gg
+fgfdsnvisdnvijnsdvdssdsd.con-ip.com
+frank4893.duckdns.org
+gold-peoples.gl.at.ply.gg
+house-rooms.gl.at.ply.gg
+if-shuttle.gl.at.ply.gg
+language-partnership.gl.at.ply.gg
+newpossibility.duckdns.org
+nonoise.duckdns.org
+sero.definitivlegit.xyz
+traffic-statewide.gl.at.ply.gg
+Viiper1337-29699.portmap.host
+windowis11.com
+windows.theworkpc.com

XWorm/xworm_c2s_2023_09_25.txt

@@ -1,26 +0,0 @@
-homesafe1000.duckdns.org
-youtubevideos.ddns.net
-chikes17.duckdns.org
-50.114.203.104:7909
-159.69.11.30:7000
-81.67.181.238:9033
-mo1010.duckdns.org
-soon-lp.at.ply.gg
-faq.medecinsansfrontiere.fr
-planpnl.duckdns.org
-191.101.130.18:8252
-255.255.255.0:12999
-141.98.6.196:7020
-154.53.51.233:8909
-xvskill.duckdns.org
-Graxe239-61522.portmap.host
-copy-marco.gl.at.ply.gg
-atelilian99.ddns.net
-garden-event.at.ply.gg
-size-bills.at.ply.gg
-23.106.215.7:7007
-16.ip.gl.ply.gg
-xyoptotway.work.gd
-88.11.59.100:8888
-209.145.51.44:7000
-floptuytonroyem.sytes.net

XWorm/xworm_c2s_2023_10_15.txt

@@ -1,49 +0,0 @@
-51.89.158.83:7000
-20.229.184.215:65350
-103.114.106.183:47074
-4Mekey.myftp.biz
-pool-roman.at.ply.gg
-101.99.92.161:7000
-friend-deer.gl.at.ply.gg
-51.81.216.78:1111
-registered-dt.at.ply.gg
-size-bills.at.ply.gg
-Graxe239-61522.portmap.host
-66.94.97.98:7000
-20.197.231.178:7000
-windowsmanagerhost.ddns.net
-rick63.publicvm.com
-brightle.ddns.net
-garden-event.at.ply.gg
-216.230.73.215:6789
-139.99.153.82:8181
-federal-true.gl.at.ply.gg
-138.201.189.141:4444
-147.185.221.16:45753
-androidmedallo.duckdns.org
-face-kissing.gl.at.ply.gg
-serverwindor.duckdns.org
-xmsh.publicvm.com
-mode-apollo.gl.at.ply.gg
-releases-photos.at.ply.gg
-163.5.215.212:1337
-mike09-55168.portmap.host
-testarosa.duckdns.org
-having-nevertheless.gl.at.ply.gg
-jameshde18.duckdns.org
-faq.medecinsansfrontiere.fr
-planpnl.duckdns.org
-41.216.188.29:7000
-functions-screensavers.gl.at.ply.gg
-147.185.221.16:57076
-163.5.215.212:8072
-147.185.221.16:56343
-193.161.193.99:61360
-95.164.18.46:2608
-rules-views.at.ply.gg
-157.254.223.19:8000
-147.185.221.16:57012
-copy-marco.gl.at.ply.gg
-adult-purchased.gl.at.ply.gg
-frostycheats-30646.portmap.host
-lee44.kozow.com

XWorm/xworm_c2s_2023_11_06.txt

@@ -1,52 +0,0 @@
-147.185.221.16:18915
-147.185.221.16:40164
-147.185.221.16:49975
-15.228.35.69:5000
-172.177.19.106:7000
-181.217.95.27:1024
-188.148.105.135:2112
-2freshinxworm2.ddns.net
-35.220.199.19:7000
-54.90.216.100:7001
-62.233.57.160:6789
-95.214.27.146:47600
-ANTILOL2113-61842.portmap.host
-brightle.ddns.net
-case-defines.gl.at.ply.gg
-chikes17.duckdns.org
-DizzyWizzy-61490.portmap.host
-espadadz.ddns.net
-f8terat.ddns.net
-faq.medecinsansfrontiere.fr
-federal-true.gl.at.ply.gg
-fl-distributions.gl.at.ply.gg
-freshinxworm.ddns.net
-functions-screensavers.gl.at.ply.gg
-garden-event.at.ply.gg
-goheg99417-59409.portmap.host
-Graxe239-61522.portmap.host
-having-nevertheless.gl.at.ply.gg
-juandice-60636.portmap.io
-kriz-nas.ddnss.de
-lead-selections.gl.at.ply.gg
-lee44.kozow.com
-m0ney7.ddns.net
-media-specified.gl.at.ply.gg
-menu-webcam.gl.at.ply.gg
-mo1010.duckdns.org
-normanisback.com
-notfishvr55-32209.portmap.host
-okaa0-25007.portmap.host
-okaa0-35095.portmap.host
-partner-juice.gl.at.ply.gg
-planpnl.duckdns.org
-q-grounds.gl.at.ply.gg
-raven123.ddnsgeek.com
-reference-tokyo.at.ply.gg
-registered-dt.at.ply.gg
-releases-photos.at.ply.gg
-secoundxwormm.ddns.net
-shows-brussels.gl.at.ply.gg
-size-bills.at.ply.gg
-tarekfr77-41254.portmap.host
-tcxerr.duckdns.org

XWorm/xworm_c2s_2023_11_21.txt

@@ -1,65 +0,0 @@
-104.250.180.178:7061
-147.185.221.17:24796
-16.ip.gl.ply.gg
-162.212.154.8:41589
-17.ip.gl.ply.gg
-185.183.34.34:7000
-185.239.237.162:7000
-2023navidad.duckdns.org
-206.189.20.127:6234
-207.32.219.52:7771
-216.107.136.195:7000
-3.121.139.82:18925
-3.121.139.82:5240
-3.127.59.75:18925
-3.127.59.75:5240
-34.130.82.241:5010
-46.183.221.28:7000
-4Mekey.myftp.biz
-51.89.38.74:33966
-52.28.112.211:18925
-52.28.112.211:5240
-52.91.10.228:7000
-54.90.216.100:7000
-65.0.80.77:7000
-80.66.87.4:7000
-87.172.204.140:7000
-93.123.85.35:7000
-ANTILOL2113-61842.portmap.host
-around-lite.gl.at.ply.gg
-atelilian99.ddns.net
-brightle.ddns.net
-chikes17.duckdns.org
-conditions-monthly.at.ply.gg
-copy-marco.gl.at.ply.gg
-espadadz.ddns.net
-federal-true.gl.at.ply.gg
-fgfdsnvisdnvijnsdvdssdsd.con-ip.com
-frank4893.duckdns.org
-functions-screensavers.gl.at.ply.gg
-gold-peoples.gl.at.ply.gg
-Graxe239-61522.portmap.host
-having-nevertheless.gl.at.ply.gg
-house-rooms.gl.at.ply.gg
-if-shuttle.gl.at.ply.gg
-kriz-nas.ddnss.de
-language-partnership.gl.at.ply.gg
-lead-selections.gl.at.ply.gg
-m0ney7.ddns.net
-menu-webcam.gl.at.ply.gg
-newpossibility.duckdns.org
-nonoise.duckdns.org
-okaa0-25007.portmap.host
-pool-roman.at.ply.gg
-sero.definitivlegit.xyz
-size-bills.at.ply.gg
-soon-lp.at.ply.gg
-tcxerr.duckdns.org
-testarosa.duckdns.org
-traffic-statewide.gl.at.ply.gg
-Viiper1337-29699.portmap.host
-windowis11.com
-windows.theworkpc.com
-windowsmanagerhost.ddns.net
-xvskill.duckdns.org
-xyoptotway.work.gd

cryptbot/cryptbot_all.txt

@@ -899,3 +899,269 @@ zyonwd32.top
 zyoouw55.top
 zyorsx75.top
 zyoyol62.top
+http://dixiel22.top/gate.php
+http://tysbtr65.top/gate.php
+http://ewzqcg510.top/gate.php
+http://yawwta22.top/gate.php
+http://luahap410.top/gate.php
+http://mipqzk75.top/gate.php
+http://avorae74.top/gate.php
+http://trelxh310.top/gate.php
+http://bluejackover.com/gate.php
+http://olsrza75.top/gate.php
+http://jaczkt57.top/gate.php
+http://xuntsc52.top/gate.php
+http://jacrpt77.top/gate.php
+http://whicwq12.top/gate.php
+http://xjuxjt32.top/gate.php
+http://luvyku45.top/gate.php
+http://fygaoy42.top/gate.php
+http://xunqmh24.top/gate.php
+http://xunbjd35.top/gate.php
+http://lahlra52.top/gate.php
+http://yawubg710.top/gate.php
+http://jacukw58.top/gate.php
+http://xunius610.top/gate.php
+http://lahuwf14.top/gate.php
+http://ewzuod410.top/gate.php
+http://qalkaw22.top/gate.php
+http://jacuwi310.top/gate.php
+http://wuqdun211.top/gate.php
+http://xunfml12.top/gate.php
+http://xjudab64.top/gate.php
+http://xundva410.top/gate.php
+http://wuqtaz510.top/gate.php
+http://yeit8sr.top/gate.php
+http://trekwg110.top/gate.php
+http://towgqo410.top/gate.php
+http://luawpm45.top/gate.php
+http://ywouji55.top/gate.php
+http://ernblt32.top/gate.php
+http://tyokqx24.top/gate.php
+http://towspd42.top/gate.php
+http://yawmyr510.top/gate.php
+http://jaczjs42.top/gate.php
+http://trenio65.top/gate.php
+http://luviva44.top/gate.php
+http://lahxam72.top/gate.php
+http://ewzpak62.top/gate.php
+http://mipbkr32.top/gate.php
+http://xjuoso62.top/gate.php
+http://xjustw22.top/gate.php
+http://avoguc410.top/gate.php
+http://kudxoq75.top/gate.php
+http://mipjpl312.top/gate.php
+http://ewzjvx32.top/gate.php
+http://xuntol31.top/gate.php
+http://jachgu35.top/gate.php
+http://ythre3sr.top/gate.php
+http://wuqhes24.top/gate.php
+http://ernjxs12.top/gate.php
+http://kyrsti44.top/gate.php
+http://ubykot72.top/gate.php
+http://xunoem712.top/gate.php
+http://xjumco24.top/gate.php
+http://ewzvpq52.top/gate.php
+http://gofreshdev.com/gate.php
+http://kyrvwz79.top/gate.php
+http://ernlen22.top/gate.php
+http://wuqdku312.top/gate.php
+http://wuqsyf55.top/gate.php
+http://quwkve35.top/gate.php
+http://miprfi24.top/gate.php
+http://olsjqj14.top/gate.php
+http://mipmgc410.top/gate.php
+http://yawzmg25.top/gate.php
+http://luauap21.top/gate.php
+http://luvasm712.top/gate.php
+http://xjulqa12.top/gate.php
+http://ythre3sb.top/gate.php
+http://yawizk23.top/gate.php
+http://olsnbz210.top/gate.php
+http://jaczhy110.top/gate.php
+http://sginte310.top/gate.php
+http://yfive5sb.top/gate.php
+http://kudhel512.top/gate.php
+http://ewznda55.top/gate.php
+http://ewznqy210.top/gate.php
+http://kudidn210.top/gate.php
+http://ewzmix42.top/gate.php
+http://ivysyr52.top/gate.php
+http://yawhop210.top/gate.php
+http://xjuzzm34.top/gate.php
+http://luazql23.top/gate.php
+http://tseven7sb.top/gate.php
+http://tixalp22.top/gate.php
+http://sginiv12.top/gate.php
+http://jaclzh55.top/gate.php
+http://jacglx33.top/gate.php
+http://fygqwc32.top/gate.php
+http://wuqewl15.top/gate.php
+http://quwszc49.top/gate.php
+http://xjuhie25.top/gate.php
+http://jacsbo34.top/gate.php
+http://fygqwg52.top/gate.php
+http://ivyvfd62.top/gate.php
+http://kudqyx62.top/gate.php
+http://wuquyi42.top/gate.php
+http://wuqahf710.top/gate.php
+http://yawium610.top/gate.php
+http://avonuf310.top/gate.php
+http://jaclcg38.top/gate.php
+http://avosma45.top/gate.php
+http://quwguv710.top/gate.php
+http://xunbip25.top/gate.php
+http://xjuupt72.top/gate.php
+http://xjupom52.top/gate.php
+http://whitbs710.top/gate.php
+http://ewzsvl72.top/gate.php
+http://sgitvg72.top/gate.php
+http://qallqe15.top/gate.php
+http://tystne110.top/gate.php
+http://luaobe32.top/gate.php
+http://kudwum22.top/gate.php
+http://lahwsg62.top/gate.php
+http://avoqvw210.top/gate.php
+http://yawtil52.top/gate.php
+http://ubydhm32.top/gate.php
+http://jacgyt15.top/gate.php
+http://chucxo62.top/gate.php
+http://quwqjh75.top/gate.php
+http://ewzicv310.top/gate.php
+http://yawvtr72.top/gate.php
+http://jacqoi46.top/gate.php
+http://treana210.top/gate.php
+http://wuqpgj62.top/gate.php
+http://kudalf32.top/gate.php
+http://ivyves72.top/gate.php
+http://yawurk110.top/gate.php
+http://lahrom42.top/gate.php
+http://lahmkf22.top/gate.php
+http://kudkhj610.top/gate.php
+http://kudhxs35.top/gate.php
+http://xjuwir54.top/gate.php
+http://ernwld52.top/gate.php
+http://olskqf25.top/gate.php
+http://miphbi44.top/gate.php
+http://xjuhuf15.top/gate.php
+http://erniku42.top/gate.php
+http://quwsgq110.top/gate.php
+http://wuqcok410.top/gate.php
+http://mipmkh110.top/gate.php
+http://tregir12.top/gate.php
+http://kyrayb52.top/gate.php
+http://wuqlod22.top/gate.php
+http://yawfyx24.top/gate.php
+http://mipapz710.top/gate.php
+http://ywoswy22.top/gate.php
+http://ivyhur32.top/gate.php
+http://qalfya311.top/gate.php
+http://lahdlk32.top/gate.php
+http://lahsfr12.top/gate.php
+http://loftet12.top/gate.php
+http://sgiyhb23.top/gate.php
+http://ewzblx23.top/gate.php
+http://luarpk14.top/gate.php
+http://luvmyb410.top/gate.php
+http://olsylu55.top/gate.php
+http://segrir110.top/gate.php
+alevkx42.top
+morhaq06.top
+knumfl68.top
+rasrzh25.top
+morekt05.top
+lysayu42.top
+raspdh35.top
+morwiv04.top
+fokhvw75.top
+fokuti41.top
+rasctx32.top
+xokecn54.top
+fokwsf42.top
+ewaymo21.top
+ewaqfe45.top
+haiezf32.top
+ewafal62.top
+hairdx22.top
+rasbrq34.top
+bunvaw31.top
+haiwpj11.top
+knuywu58.top
+moraku02.top
+fokujb52.top
+befrgv71.top
+ewayky18.top
+pacter42.top
+lyswug41.top
+fokfgl36.top
+smadyi56.top
+bunbeq17.top
+ewamcd41.top
+knuplj61.top
+knucsj38.top
+fokjzu65.top
+morqoi02.top
+bunzoh16.top
+smajug75.top
+saas01.pro
+ewaunl38.top
+ewadgz11.top
+ewasic56.top
+marjkc03.top
+knuelc78.top
+beflku61.top
+dyxlx33.top
+ewadmw53.top
+befuak48.top
+befzco47.top
+smainz71.top
+knuhld48.top
+ewabpl55.top
+morcyr03.top
+bunmud42.top
+morbyn04.top
+fokjmu66.top
+ewafxq25.top
+befixc63.top
+haizul15.top
+moruat06.top
+mortbo03.top
+mortiq04.top
+befkap57.top
+rasqdc22.top
+knueoh22.top
+morfiw05.top
+ewazqx71.top
+kypersau25.top
+ewaosm65.top
+morsyr05.top
+moryei03.top
+ewauhc58.top
+morsuq02.top
+morcgu03.top
+haijwd23.top
+knufnp41.top
+knudqw18.top
+fokovq72.top
+morhas01.top
+knurxh28.top
+ewazda75.top
+bunawj52.top
+tuytee11.top
+bunhiv18.top
+morluw04.top
+ewawtm26.top
+haiolr12.top
+lysmer21.top
+fokqgb55.top
+ewavmp35.top
+morups07.top
+fokacv34.top
+ewaumk24.top
+befuwa51.top
+knugzo71.top
+ewaisb31.top
+http://chuawt52.top/gate.php
+http://fygbib44.top/gate.php
+http://nekyil22.top/gate.php
+http://olssqh34.top/gate.php

cryptbot/cryptbot_c2s_10_02_2024.txt

@@ -1,89 +0,0 @@
-morqoi02.top
-morhaq06.top
-tuytee11.top
-knuelc78.top
-lysayu42.top
-ewazqx71.top
-marjkc03.top
-bunzoh16.top
-haiolr12.top
-befzco47.top
-morbyn04.top
-morups07.top
-haizul15.top
-ewayky18.top
-morcyr03.top
-rasqdc22.top
-ewaisb31.top
-fokjzu65.top
-lyswug41.top
-smajug75.top
-smainz71.top
-knuywu58.top
-befuak48.top
-befkap57.top
-ewadmw53.top
-fokfgl36.top
-knucsj38.top
-morsyr05.top
-smadyi56.top
-morsuq02.top
-morwiv04.top
-ewasic56.top
-morekt05.top
-ewaqfe45.top
-befrgv71.top
-http://chuawt52.top/gate.php
-http://fygbib44.top/gate.php
-befixc63.top
-moryei03.top
-knurxh28.top
-ewavmp35.top
-beflku61.top
-haiezf32.top
-morcgu03.top
-ewafxq25.top
-pacter42.top
-ewauhc58.top
-mortiq04.top
-knuhld48.top
-ewaumk24.top
-fokacv34.top
-ewaymo21.top
-mortbo03.top
-fokjmu66.top
-befuwa51.top
-saas01.pro
-ewabpl55.top
-rasrzh25.top
-knudqw18.top
-ewafal62.top
-ewawtm26.top
-dyxlx33.top
-bunvaw31.top
-fokhvw75.top
-moraku02.top
-morhas01.top
-ewazda75.top
-fokovq72.top
-knuplj61.top
-moruat06.top
-haijwd23.top
-ewaunl38.top
-fokqgb55.top
-fokujb52.top
-ewaosm65.top
-morfiw05.top
-rasctx32.top
-http://nekyil22.top/gate.php
-ewadgz11.top
-knumfl68.top
-raspdh35.top
-hairdx22.top
-fokuti41.top
-haiwpj11.top
-bunawj52.top
-fokwsf42.top
-rasbrq34.top
-xokecn54.top
-ewamcd41.top

cryptbot/cryptbot_c2s_2023_10_16.txt

@@ -1,167 +0,0 @@
-http://dixiel22.top/gate.php
-http://tysbtr65.top/gate.php
-http://ewzqcg510.top/gate.php
-http://yawwta22.top/gate.php
-http://luahap410.top/gate.php
-http://mipqzk75.top/gate.php
-http://avorae74.top/gate.php
-http://trelxh310.top/gate.php
-http://bluejackover.com/gate.php
-http://olsrza75.top/gate.php
-http://jaczkt57.top/gate.php
-http://xuntsc52.top/gate.php
-http://jacrpt77.top/gate.php
-http://whicwq12.top/gate.php
-http://xjuxjt32.top/gate.php
-http://luvyku45.top/gate.php
-http://fygaoy42.top/gate.php
-http://xunqmh24.top/gate.php
-http://xunbjd35.top/gate.php
-http://lahlra52.top/gate.php
-http://yawubg710.top/gate.php
-http://jacukw58.top/gate.php
-http://xunius610.top/gate.php
-http://lahuwf14.top/gate.php
-http://ewzuod410.top/gate.php
-http://qalkaw22.top/gate.php
-http://jacuwi310.top/gate.php
-http://wuqdun211.top/gate.php
-http://xunfml12.top/gate.php
-http://xjudab64.top/gate.php
-http://xundva410.top/gate.php
-http://wuqtaz510.top/gate.php
-http://yeit8sr.top/gate.php
-http://trekwg110.top/gate.php
-http://towgqo410.top/gate.php
-http://luawpm45.top/gate.php
-http://ywouji55.top/gate.php
-http://ernblt32.top/gate.php
-http://tyokqx24.top/gate.php
-http://towspd42.top/gate.php
-http://yawmyr510.top/gate.php
-http://jaczjs42.top/gate.php
-http://trenio65.top/gate.php
-http://luviva44.top/gate.php
-http://lahxam72.top/gate.php
-http://ewzpak62.top/gate.php
-http://mipbkr32.top/gate.php
-http://xjuoso62.top/gate.php
-http://xjustw22.top/gate.php
-http://avoguc410.top/gate.php
-http://kudxoq75.top/gate.php
-http://mipjpl312.top/gate.php
-http://ewzjvx32.top/gate.php
-http://xuntol31.top/gate.php
-http://jachgu35.top/gate.php
-http://ythre3sr.top/gate.php
-http://wuqhes24.top/gate.php
-http://ernjxs12.top/gate.php
-http://kyrsti44.top/gate.php
-http://ubykot72.top/gate.php
-http://xunoem712.top/gate.php
-http://xjumco24.top/gate.php
-http://ewzvpq52.top/gate.php
-http://gofreshdev.com/gate.php
-http://kyrvwz79.top/gate.php
-http://ernlen22.top/gate.php
-http://wuqdku312.top/gate.php
-http://wuqsyf55.top/gate.php
-http://quwkve35.top/gate.php
-http://miprfi24.top/gate.php
-http://olsjqj14.top/gate.php
-http://mipmgc410.top/gate.php
-http://yawzmg25.top/gate.php
-http://luauap21.top/gate.php
-http://luvasm712.top/gate.php
-http://xjulqa12.top/gate.php
-http://ythre3sb.top/gate.php
-http://yawizk23.top/gate.php
-http://olsnbz210.top/gate.php
-http://jaczhy110.top/gate.php
-http://sginte310.top/gate.php
-http://yfive5sb.top/gate.php
-http://kudhel512.top/gate.php
-http://ewznda55.top/gate.php
-http://ewznqy210.top/gate.php
-http://kudidn210.top/gate.php
-http://ewzmix42.top/gate.php
-http://ivysyr52.top/gate.php
-http://yawhop210.top/gate.php
-http://xjuzzm34.top/gate.php
-http://luazql23.top/gate.php
-http://tseven7sb.top/gate.php
-http://tixalp22.top/gate.php
-http://sginiv12.top/gate.php
-http://jaclzh55.top/gate.php
-http://jacglx33.top/gate.php
-http://fygqwc32.top/gate.php
-http://wuqewl15.top/gate.php
-http://quwszc49.top/gate.php
-http://xjuhie25.top/gate.php
-http://jacsbo34.top/gate.php
-http://fygqwg52.top/gate.php
-http://ivyvfd62.top/gate.php
-http://kudqyx62.top/gate.php
-http://wuquyi42.top/gate.php
-http://wuqahf710.top/gate.php
-http://yawium610.top/gate.php
-http://avonuf310.top/gate.php
-http://jaclcg38.top/gate.php
-http://avosma45.top/gate.php
-http://quwguv710.top/gate.php
-http://xunbip25.top/gate.php
-http://xjuupt72.top/gate.php
-http://xjupom52.top/gate.php
-http://whitbs710.top/gate.php
-http://ewzsvl72.top/gate.php
-http://sgitvg72.top/gate.php
-http://qallqe15.top/gate.php
-http://tystne110.top/gate.php
-http://luaobe32.top/gate.php
-http://kudwum22.top/gate.php
-http://lahwsg62.top/gate.php
-http://avoqvw210.top/gate.php
-http://yawtil52.top/gate.php
-http://ubydhm32.top/gate.php
-http://jacgyt15.top/gate.php
-http://chucxo62.top/gate.php
-http://quwqjh75.top/gate.php
-http://ewzicv310.top/gate.php
-http://yawvtr72.top/gate.php
-http://jacqoi46.top/gate.php
-http://treana210.top/gate.php
-http://wuqpgj62.top/gate.php
-http://kudalf32.top/gate.php
-http://ivyves72.top/gate.php
-http://yawurk110.top/gate.php
-http://lahrom42.top/gate.php
-http://lahmkf22.top/gate.php
-http://kudkhj610.top/gate.php
-http://kudhxs35.top/gate.php
-http://xjuwir54.top/gate.php
-http://ernwld52.top/gate.php
-http://olskqf25.top/gate.php
-http://miphbi44.top/gate.php
-http://xjuhuf15.top/gate.php
-http://erniku42.top/gate.php
-http://quwsgq110.top/gate.php
-http://wuqcok410.top/gate.php
-http://mipmkh110.top/gate.php
-http://tregir12.top/gate.php
-http://kyrayb52.top/gate.php
-http://wuqlod22.top/gate.php
-http://yawfyx24.top/gate.php
-http://mipapz710.top/gate.php
-http://ywoswy22.top/gate.php
-http://ivyhur32.top/gate.php
-http://qalfya311.top/gate.php
-http://lahdlk32.top/gate.php
-http://lahsfr12.top/gate.php
-http://loftet12.top/gate.php
-http://sgiyhb23.top/gate.php
-http://ewzblx23.top/gate.php
-http://luarpk14.top/gate.php
-http://luvmyb410.top/gate.php
-http://olsylu55.top/gate.php
-http://segrir110.top/gate.php
-alevkx42.top

gafgyt/gafgyt_all.txt

@@ -137,3 +137,17 @@
 94.156.102.166:2782
 94.156.161.21:4261
 95.214.26.108:666
+178.218.146.89:839
+89.190.156.159:671
+45.95.147.204:5555
+188.166.67.116:4258
+103.29.2.134:12345
+103.14.48.18:23
+103.78.0.111:444
+146.190.178.31:606
+84.54.51.156:65281
+91.92.244.25:23
+93.123.85.116:23456
+93.123.85.5:6969
+93.123.85.6:4258
+94.142.139.228:23

gafgyt/gafgyt_c2s_2023_11_07.txt

@@ -1 +0,0 @@
-178.218.146.89:839

gafgyt/gafgyt_c2s_2023_11_25.txt

@@ -1,4 +0,0 @@
-89.190.156.159:671
-45.95.147.204:5555
-188.166.67.116:4258
-103.29.2.134:12345

gafgyt/gafgyt_c2s_2023_12_14.txt

@@ -1,9 +0,0 @@
-103.14.48.18:23
-103.78.0.111:444
-146.190.178.31:606
-84.54.51.156:65281
-91.92.244.25:23
-93.123.85.116:23456
-93.123.85.5:6969
-93.123.85.6:4258
-94.142.139.228:23

gh0strat/gh0strat_all.txt

@@ -49,5 +49,22 @@ www.lqwljs.top
 xy1.youjucan.com
 zhj08.e2.luyouxia.net
 zhodaji.com
+hdalulnc.e3.luyouxia.net
 q3472884397.e2.luyouxia.net
 yy3088429300.e2.luyouxia.net
+zxyhwww.top
+cn-he-plc-2.openfrp.top
+66ddjkr.e3.luyouxia.net
+kx5555.e3.luyouxia.net
+p.f2pool.info
+hfs666.top
+latiao.ddns.net
+asjidoaiosdjo.e3.luyouxia.net
+fdsfhkjf.e3.luyouxia.net
+xiaoyuwudi.e3.luyouxia.net
+www.996m2m2.top
+54412.e3.luyouxia.net
+ad2916985983.e2.luyouxia.net
+free.idcfengye.com
+gx121.e1.luyouxia.net
+xc091221.e2.luyouxia.net

gh0strat/gh0strat_c2s_10_02_2024.txt

@@ -1,16 +0,0 @@
-zxyhwww.top
-cn-he-plc-2.openfrp.top
-66ddjkr.e3.luyouxia.net
-kx5555.e3.luyouxia.net
-p.f2pool.info
-hfs666.top
-latiao.ddns.net
-asjidoaiosdjo.e3.luyouxia.net
-fdsfhkjf.e3.luyouxia.net
-xiaoyuwudi.e3.luyouxia.net
-www.996m2m2.top
-54412.e3.luyouxia.net
-ad2916985983.e2.luyouxia.net
-free.idcfengye.com
-gx121.e1.luyouxia.net
-xc091221.e2.luyouxia.net

pony/pony_all.txt

@@ -1,4 +1,3 @@
-## File needs review. Please use at own risk.
 http://raslo1.bangex.com/regate/regate.php
 http://mrtdfu.pw:4915/way/like.php
 http://handiexpertcarcare.com/forum/viewtopic.php

sality/sality_c2s_2020_to_2023.txt

@@ -1,8 +0,0 @@
-# Careful, some of them are sinkholed by ShadowServer. I add them here so ongoing infections can be recognized. Please make sure to check DNS servers for these domains.
-http://kukutrustnet888.info/home.gif
-http://89.119.67.154/testo5/
-http://kukutrustnet777888.info/
-http://kukutrustnet777.info/home.gif
-http://klkjwre77638dfqwieuoi888.info/
-http://www.klkjwre9fqwieluoi.info/
-http://kukutrustnet987.info/home.gif

socelars/socelars_all.txt

@@ -1,4 +1,3 @@
-# Careful, Amazon AWS buckets in here. The URL is a good IoC, don't use the main domain please, else you will have a hard time.
 http://www.allinfo.pw/
 http://www.anquyebt.com/
 http://www.asdgain.xyz/

stealc/stealc_all.txt

@@ -147,3 +147,144 @@ http://95.217.232.10/2e12d77e23b78d01.php
 http://185.244.48.191
 http://45.87.154.30
 http://publisherget.top/410b5129171f10ea.php
+http://91.103.253.18
+http://aidandylan.top
+http://193.201.8.110
+http://5.42.65.39
+http://94.130.186.149
+http://89.23.98.151
+http://194.87.71.138
+http://193.201.8.121
+http://94.142.138.253
+http://194.169.175.126
+http://109.206.243.134
+http://217.196.96.16
+http://185.221.196.69
+http://91.103.252.74
+http://91.103.252.11
+http://193.201.8.123
+http://208.91.189.189
+http://116.203.55.91
+http://tetromask.site
+http://217.196.96.138
+http://elijahdiego.top
+http://jesseaustin.top
+http://77.91.97.146
+http://116.203.73.136
+http://dominiczachary.top
+http://45.140.147.83
+http://91.212.166.95
+http://91.103.253.171
+http://henryjackson.icu
+http://kevinrobinson.top
+http://williammoore.top
+http://193.233.232.98
+http://95.216.187.218
+http://157.90.24.248
+http://94.142.138.179
+http://91.92.243.201
+http://5.75.165.104
+http://raymonddixon.icu
+http://ronaldrichards.icu
+http://devinjason.top
+http://robertjohnson.top
+http://bidbur.com
+http://91.215.85.189
+http://jaimemcgee.top
+http://howardwood.top
+http://vittoriogioia.icu
+http://77.91.68.247
+http://185.244.48.148
+http://danielhamerling.icu
+http://77.91.124.154
+http://vewver.xyz
+http://giuliotoro.icu
+http://193.233.232.54
+http://severinofragola.icu
+http://185.250.45.18
+http://arturogillotti.icu
+http://bernardofata.icu
+http://185.78.76.13
+http://128.140.84.205
+http://5.42.92.215
+http://185.172.128.79
+http://185.172.128.24
+http://giveapp.pro
+http://77.105.132.216
+http://finnmanninger.icu
+http://raphaelbischoff.icu
+http://109.107.182.60
+http://116.203.180.34
+http://5.42.65.54
+http://ettoregiardina.icu
+http://149.255.35.132
+http://dskflherlkhopihsf.com
+http://janmorath.icu
+http://82.115.223.87
+http://80.66.85.128
+http://5.42.66.58
+http://109.107.181.33
+http://82.115.223.88
+http://45.87.153.135
+http://77.91.76.36
+http://5.75.177.20
+http://phoenixexec.icu
+http://5.42.66.57
+http://138.201.196.248
+http://florianhabeler.icu
+http://194.120.116.120
+http://92.246.138.149
+http://104.245.33.157
+http://77.105.132.229
+http://5.42.64.41
+http://77.91.123.99
+http://80.89.239.178
+http://95.216.72.17
+http://91.242.229.100
+http://193.163.7.111
+http://185.17.40.133
+http://ffud666.com
+http://185.244.48.135
+http://176.124.198.17
+http://bubbebottle.xyz
+http://5.42.66.36
+http://216.98.13.202
+http://216.98.9.109
+http://193.42.32.206
+http://jeffmorales.top
+http://94.156.65.61
+http://5.42.64.6
+http://michaeljohnson.top
+http://publisherget.top
+http://23.227.202.68
+http://147.45.47.71
+http://193.163.7.129
+http://193.163.7.20
+http://37.28.157.3
+http://91.92.246.192
+http://185.161.248.78
+http://89.105.201.132
+http://5.75.240.249
+http://172.86.77.102
+http://185.172.128.145
+http://normanhoffman.top
+http://37.27.52.241
+http://65.109.226.91
+http://147.45.47.72
+http://77.105.132.208
+http://91.92.254.245
+http://37.27.52.220
+http://185.172.128.210
+http://94.156.8.100
+http://79.137.206.15
+http://193.143.1.226
+http://45.159.248.242
+http://mariles.top
+http://5.75.232.223
+http://46.29.234.95
+http://larsvanderwal.top
+http://193.163.7.160
+http://91.108.240.151
+http://joscramp.top
+http://rewe-coupouns.com
+http://arthurmaes.top

stealc/stealc_c2s_09_02_2024.txt

@@ -1,41 +0,0 @@
-http://185.172.128.79
-http://185.172.128.24
-http://giveapp.pro
-http://77.105.132.216
-http://finnmanninger.icu
-http://raphaelbischoff.icu
-http://109.107.182.60
-http://116.203.180.34
-http://5.42.65.54
-http://ettoregiardina.icu
-http://149.255.35.132
-http://dskflherlkhopihsf.com
-http://janmorath.icu
-http://82.115.223.87
-http://80.66.85.128
-http://5.42.66.58
-http://109.107.181.33
-http://82.115.223.88
-http://45.87.153.135
-http://77.91.76.36
-http://5.75.177.20
-http://phoenixexec.icu
-http://5.42.66.57
-http://138.201.196.248
-http://florianhabeler.icu
-http://194.120.116.120
-http://92.246.138.149
-http://104.245.33.157
-http://77.105.132.229
-http://5.42.64.41
-http://77.91.123.99
-http://80.89.239.178
-http://95.216.72.17
-http://91.242.229.100
-http://193.163.7.111
-http://185.17.40.133
-http://ffud666.com
-http://185.244.48.135
-http://176.124.198.17
-http://bubbebottle.xyz
-http://5.42.66.36

stealc/stealc_c2s_2023_10_16.txt

@@ -1,28 +0,0 @@
-http://91.103.253.18
-http://aidandylan.top
-http://193.201.8.110
-http://5.42.65.39
-http://94.130.186.149
-http://89.23.98.151
-http://194.87.71.138
-http://193.201.8.121
-http://94.142.138.253
-http://194.169.175.126
-http://109.206.243.134
-http://217.196.96.16
-http://185.221.196.69
-http://91.103.252.74
-http://91.103.252.11
-http://193.201.8.123
-http://208.91.189.189
-http://116.203.55.91
-http://tetromask.site
-http://217.196.96.138
-http://elijahdiego.top
-http://jesseaustin.top
-http://77.91.97.146
-http://116.203.73.136
-http://dominiczachary.top
-http://45.140.147.83
-http://91.212.166.95
-http://91.103.253.171

stealc/stealc_c2s_2023_11_06.txt

@@ -1,17 +0,0 @@
-http://henryjackson.icu
-http://kevinrobinson.top
-http://williammoore.top
-http://193.233.232.98
-http://95.216.187.218
-http://157.90.24.248
-http://94.142.138.179
-http://91.92.243.201
-http://5.75.165.104
-http://raymonddixon.icu
-http://ronaldrichards.icu
-http://devinjason.top
-http://robertjohnson.top
-http://bidbur.com
-http://91.215.85.189
-http://jaimemcgee.top
-http://howardwood.top

stealc/stealc_c2s_2023_11_21.txt

@@ -1,15 +0,0 @@
-http://vittoriogioia.icu
-http://77.91.68.247
-http://185.244.48.148
-http://danielhamerling.icu
-http://77.91.124.154
-http://vewver.xyz
-http://giuliotoro.icu
-http://193.233.232.54
-http://severinofragola.icu
-http://185.250.45.18
-http://arturogillotti.icu
-http://bernardofata.icu
-http://185.78.76.13
-http://128.140.84.205
-http://5.42.92.215

wshrat/wshrat_all.txt

@@ -143,5 +143,7 @@ http://newjspeople.duckdns.org:9072
 http://37.0.8.115:8992
 http://198.37.105.223:7121
 http://menge.duckdns.org:5670
-http://198.37.105.223:7121
+http://harold.ns01.info:1604
-http://menge.duckdns.org:5670
+http://harold.ns01.info:3609
+http://akinbo.ddns.net:6390
+http://snk2333.duckdns.org:47471

wshrat/wshrat_c2s_2023_11_07.txt

@@ -1,2 +0,0 @@
-http://harold.ns01.info:1604
-http://harold.ns01.info:3609

wshrat/wshrat_c2s_2023_12_13.txt

@@ -1 +0,0 @@
-http://snk2333.duckdns.org:47471