-
Notifications
You must be signed in to change notification settings - Fork 5
/
Copy pathblocklists-recordedfuture.txt
1541 lines (1466 loc) · 38.5 KB
/
blocklists-recordedfuture.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
## hosts-blocklists
## domains-ips-hashes
## blocklists-recordedfuture
## https://www.recordedfuture.com/research
## https://www.recordedfuture.com/research/intelligence-reports
# https://www.recordedfuture.com/ransomhub-draws-in-affiliates-with-multi-os-capability-and-high-commission-rates
02e9f0fbb7f3acea4fcf155dc7813e15c1c8d1c77c3ae31252720a9fa7454292
# https://www.recordedfuture.com/the-travels-of-markopolo-self-proclaimed-meeting-software-vortax-spreads-infostealers
123mllhasbrasil.com
aidigibrain.com
assetsreserve.com
betbhaibetting.com
casino-legrand.info
cheapcleanprotein.com
crosscertify.com
crosstacks.com
deskpaypal.com
ebolight.com
eliteneatproductshop.com
faruvinnovations.com
garagemfinity.com
hobbyplanners.com
indianahomerates.com
institutoangelabatista.com
iuddy.com
marylandhomerates.com
msjessd.com
nongduangmarket.com
novatercaagilidade.com
pegamente.com
piloje.com
plumbonwater.com
repairleatherla.com
shinudating.com
showpiecekennelmating.com
tripleplay-arg1.com
vortax.app
vortax.io
vortax.org
vortax.space
weworkhappy.com
xhaxo.com
77.221.151.54
79.137.197.159
89.105.198.134
193.233.132.137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# https://www.recordedfuture.com/grus-bluedelta-targets-key-networks-in-europe-with-multi-phase-espionage-camp
calc-dwn.infinityfreeapp.com
clouddrive.infinityfreeapp.com
consumerpanel0x254a2.frge.io
consumerpanelapp.42web.io
delivery-ukrinmash-service.infinityfreeapp.com
document-c.infinityfreeapp.com
document-d.infinityfreeapp.com
documents-cloud.infinityfreeapp.com
downloadable.infinityfreeapp.com
downloadc.infinityfreeapp.com
downloaddoc.infinityfreeapp.com
downloadfile.infinityfreeapp.com
downloadingdoc.infinityfreeapp.com
downloadinge.infinityfreeapp.com
downloadingf.infinityfreeapp.com
downloadingq.infinityfreeapp.com
downloadingw.infinityfreeapp.com
downloadx.infinityfreeapp.com
downloadz.infinityfreeapp.com
eo1ws2wgj75rdfd.m.pipedream.net
eo6kgbwpysq0laa.m.pipedream.net
eogo85tybrrn2r.m.pipedream.net
eomhv6vdu4v5qyt.m.pipedream.net
eos93vb2cwsu3xf.m.pipedream.net
eottxji4yk4vg5x.m.pipedream.net
eoy6vrzslpn9vu.m.pipedream.net
eoytfd39hbrspa3.m.pipedream.net
fdsagdfg.rf.gd
file-download.infinityfreeapp.com
filedwn.infinityfreeapp.com
filehosting.infinityfreeapp.com
filihosting.infinityfreeapp.com
hatdfg-rhgreh684.frge.io
id-unconfirmeduser.frge.io
microsoft-files.infinityfreeapp.com
online-download.infinityfreeapp.com
online-drive.infinityfreeapp.com
opendoc.infinityfreeapp.com
opendocument.infinityfreeapp.com
opendocuments.infinityfreeapp.com
panelunregistertle-348.frge.io
run.mocky.io
setnewcred.ukr.net.frge.io
settings-panel.frge.io
turbify-biz-cesdaz.rf.gd
ua-consumerpanel.frge.io
ukrprivacysite.frge.io
webhook.site
xgfdstu6k.frge.io
xzdgsdfhfgtjdfj.wuaze.com
37.191.122.186
68.76.150.97
73.80.9.137
174.53.242.108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# https://www.recordedfuture.com/gitcaught-threat-actor-leverages-github-repository-for-malicious-infrastructure
aptonic.xyz
arcbrowser.pro
cleanmymac.pro
cleanshot.ink
dekabristiney.fvds.ru
figma.lat
iina-app.lat
lightpillar.lat
macbartender.lat
orbitpettystudio.fun
parallelsdesktop.pro
password-app.pro
patrikbob100.fvds.ru
pixelmator.pics
pixelmator.us
punchtelephoneverdi.store
rainway.cloud
rize.lat
servicescraft.buzz
setapp.ink
sipapp.lat
skylum.store
smallrabbitcrossing.site
snuggleapplicationswo.fun
strainriskpropos.store
telephoneverdictyow.site
theoryapparatusjuko.fun
ultradelux.buzz
5.42.64.45
5.42.64.83
5.42.65.108
5.42.65.114
31.41.244.77
45.61.137.213
49.13.89.149
77.246.158.48
81.31.245.209
95.217.234.153
140.82.20.165
185.172.128.132
185.215.113.55
188.120.227.9
193.149.189.199
195.85.115.195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# https://www.recordedfuture.com/exploring-the-depths-of-solarmarkers-multi-tiered-infrastructure
2.58.14.183
2.58.14.246
2.58.15.58
2.58.15.214
23.29.115.186
37.120.198.226
45.86.163.163
78.135.73.152
84.252.94.184
91.206.178.133
146.0.79.21
146.70.40.228
146.70.71.135
146.70.80.66
146.70.80.79
146.70.80.83
146.70.92.187
146.70.101.83
146.70.104.176
146.70.106.174
146.70.121.88
146.70.125.68
146.70.125.119
146.70.145.242
146.70.160.62
146.70.161.15
185.236.203.159
185.243.113.47
185.243.115.88
193.29.104.25
194.15.216.237
212.237.217.133
212.237.217.136
212.237.217.156
217.138.215.79
217.138.215.85
217.138.215.105
2de324d57bb96154e70958eea97713553f59025ca39220aec5d53c908cbf4645
814a9e7720ea8f283e779a43ee72bb215aa6d27a07adfadd45d5c710fb86ee3a
837e7a67db612b25bfd0f94d37cdbe8b2dc1a298fe5641f27a233ea6daa73bf0
ace82e39c0c7bba7b66f589ae8523aeffb1b34aeafe6d2f1f5ed873a0b980936
# https://www.recordedfuture.com/russia-linked-copycop-uses-llms-to-weaponize-influence-content-at-scale
bbc-uk.news
bostontimes.org
britishchronicle.com
chicagocrier.com
clearstory.news
dcweekly.org
gbgeopolitics.com
infosindependants.fr
londonchronicle.news
londoncrier.co.uk
londoncrier.com
miamichron.com
sanfranchron.com
xposedem.com
95.165.66.27
# https://www.recordedfuture.com/cybercriminal-campaign-spreads-infostealers-highlighting-risks-to-web3-gaming
ai-zerolend.xyz
argongame.com
argongame.fun
argongame.network
argongame.xyz
astration.io
astrationgame.com
astrationgame.io
astrationplay.com
astrationplay.io
blastl2.net
cosmicwayrb.org
crypterium.world
crypteriumplay.com
crypteriumplay.io
crypteriumworld.io
dustfighter.io
dustfighter.space
dustfightergame.com
dustoperation.xyz
gameastration.com
playastration.com
playcrypterium.com
playcrypterium.io
testload.pythonanywhere.com
vether-testers.org
vether.org
worldcrypterium.io
5.42.64.83
5.42.65.55
5.42.65.102
5.42.65.106
5.42.65.107
5.42.66.22
5.42.67.1
31.31.196.161
31.31.196.178
82.115.223.26
89.105.201.132
144.76.184.11
193.163.7.160
0d9877eefd26756e2ecee3d806d60cb72bcb33d880f06e2f0e12c7c85d963426
0ed67ebecabb5fd7c4d41e521054154dbda0712845cb6f1b5b403c9f4d71ed4a
073d524d8fc005acc05162f2e8574688a076d7888ec180c0ff78cab09b92ce95
7d35dd19ee508c74c159e82f99c0483114e9b5b30f9bc2bd41c37b83cfbcd92d
8d7df60dd146ade3cef2bfb252dfe81139f0a756c2b9611aaa6a972424f8af85
56a11900f952776d17637e9186e3954739c0d9039bf7c0aa7605a00a61bd6543
74ebbac956e519e16923abdc5ab8912098a4f64e38ddcb2eae23969f306afe5a
5136a49a682ac8d7f1ce71b211de8688fce42ed57210af087a8e2dbc8a934062
8934aaeb65b6e6d253dfe72dea5d65856bd871e989d5d3a2a35edfe867bb4825
63724fbab837988311a551d4d9540577f822e23c49864095f568324352c0d1fd
434878a4416201b4f26d1414be9126ae562c9f5be3f65168e48c0e95560460ac
4841020c8bd06b08fde6e44cbe2e2ab33439e1c8368e936ec5b00dc0584f7260
ac5c92fe6c51cfa742e475215b83b3e11a4379820043263bf50d4068686c6fa5
b2e2859dd87628d046ac9da224b435d09dd856d9ad3ede926aa5e1dc9903ffe8
ba06a6ee0b15f5be5c4e67782eec8b521e36c107a329093ec400fe0404eb196a
c299089aca754950f7427e6946a980cedfded633ab3d55ca0aa5313bb2cc316c
ccd6375cd513412c28a4e8d0fdedf6603f49a4ac5cd34ddd53cc72f08209bd83
e1657101815c73d9efd1a35567e6da0e1b00f176ac7d5a8d3f88b06a5602c320
ea592d5ca0350a3e46e3de9c6add352cd923206d1dcc45244e7a0a3c049462a4
edd043f2005dbd5902fc421eabb9472a7266950c5cbaca34e2d590b17d12f5fa
f5e3f5d769efc49879b640334d6919bdb5ba7cae403317c8bd79d042803e20ce
f6893fba30db87c2415a1e44b1f03e5e57ac14f9dbd2c3b0c733692472f099fd
fabfe1bcce7eade07a30ff7d073859e2a8654c41da1f784d3b58da40aaeef682
# https://www.recordedfuture.com/attributing-i-soon-private-contractor-linked-chinese-state-sponsored-groups
1ds.me
antspam-mail.services
bayantele.xyz
dnslookup.services
docx.1ds.me
gmail.isooncloud.com
gmailapp.me
i-soon.net
ip.1ds.me
lengmo.myds.me
lengmo.net
linercn.org
livehost.live
mailnotes.online
mailteso.online
mpt.buzz
mptcdn.com
mydigi.site
news.1ds.me
sw-hk.services
wcuhk.livehost.live
web.goog1eweb.com
whkedu.dnslookup.services
1.192.194.162
66.98.127.105
101.219.17.111
118.31.3.116
171.88.142.148
171.88.143.37
171.88.143.72
221.13.74.218
# https://www.recordedfuture.com/predator-spyware-operators-rebuild-multi-tier-infrastructure-target-mobile-devices
02s.co
06g.co
09a.co
2-gis.kz
astanapark.com
beroxe.com
buildneeds.net
bw-guardian.com
cabinet-salyk.kz
centent-management.net
clazc.com
coazoa.com
copy-note.net
corporatebusinesssolution.net
dzhabarzan.com
e-kgd.kz
ehudaldaa.com
escortbabesluxo.com
eventnews.live
fast-notify.com
fastnews.biz
fr-monde.com
gabzmus.com
get-location.com
get-location.net
highclub.life
informationrank.net
jumia-egy.com
kapital-news.com
kejoranews.net
kollesa.com
krisha-kz.com
kroal.com
ladiesclubhouse.com
lusofonia-mundo.com
magnum-kz.com
mastershop.biz
mb-ph.net
mmegi.co
msbsck.com
mujmbosnoticias.com
mundodenoticias.online
myfawry.net
nospam.kz
notify-service.biz
nur-news.com
olimpbets.kz
ongsworld.com
pelovkin.com
people-beeline.com
peticaonline.com
plastictoysworld.com
plinkypong.com
post-notify.info
qazsporttv.com
rcuples.com
rozavetrovv.com
schedulefestival.com
shoxtek.com
soccer-bw.com
spacsaver.info
sportnow.news
suarapapua.co
sustanbuild.com
thintank.co
tickets-kz.com
tobupmi.com
tohna.net
ulstur.co
vendaswebs.com
vestinfo.net
vestinfo.org
vestinfos.net
vinho-online.com
vlast-news.com
walatparez.com
weekendcool.com
yo-um7.com
zakorn.com
zikolo.net
ztb-news.com
2.58.15.58
5.39.221.36
5.39.221.47
5.39.221.48
5.255.88.172
23.137.248.95
37.120.222.115
45.86.163.77
45.86.163.93
45.129.0.125
45.148.244.5
46.30.190.98
46.246.97.245
46.249.49.230
79.110.52.179
79.110.52.196
79.137.199.216
79.141.175.146
84.247.51.14
84.247.51.18
85.17.9.21
85.17.9.73
85.17.9.74
85.239.34.174
87.121.45.29
87.121.45.42
87.121.45.45
88.119.161.135
91.241.93.165
95.141.34.222
98.142.254.112
101.99.75.197
141.94.122.19
146.70.158.144
146.70.161.50
158.58.172.3
164.215.103.20
164.215.103.143
169.239.128.137
169.239.129.48
169.239.129.63
169.239.129.76
169.255.59.98
176.124.198.52
176.124.198.55
185.62.58.107
185.66.140.112
185.113.8.67
185.113.8.83
185.117.91.165
185.117.91.237
185.130.45.34
185.130.46.165
185.130.46.202
185.130.227.29
185.130.227.88
185.130.227.95
185.156.172.17
185.156.172.20
185.156.172.48
185.158.248.85
185.158.248.131
185.196.9.76
185.212.47.75
185.219.220.99
185.219.221.30
192.46.237.163
193.29.59.171
193.29.104.5
193.29.104.13
193.29.104.83
193.42.36.84
193.42.36.106
193.168.143.111
193.168.143.116
193.168.143.184
193.168.143.185
193.233.161.137
193.233.161.163
212.237.217.127
213.252.246.152
# https://www.recordedfuture.com/russia-aligned-tag-70-targets-european-government-and-military-mail
bugiplaysec.com
hitsbitsx.com
ocsp-reloads.com
recsecas.com
38.180.2.23
38.180.3.57
38.180.76.31
86.105.18.113
176.97.66.57
176.97.76.118
176.97.76.129
198.50.170.72
6800357ec3092c56aab17720897c29bb389f70cb49223b289ea5365314199a26
ea22b3e9ecdfd06fae74483deb9ef0245aefdc72f99120ae6525c0eaf37de32e
# https://www.recordedfuture.com/russian-influence-network-doppelgangers-ai-content-tactics
50statesoflie.com
711ggr.com
abtbatteries.com
acrosstheline.press
alfonrust.com
arviewtv.org
besuchszweck.org
buymeagradient.com
chickenhug.com
cropmarketchronicles.us
customautobodyaz.com
cypressnewsgh.online
decalworx.co.uk
derbaterischelowe.info
derleitstern.com
electionwatch.live
eurobrics.de
fl-studio-mobile-apk.online
fox-news.in
freemit.com
frisurenmarkt.com
gardeningflair.com
ger4098764793ggwhit3.online
gmailster.com
govreadyq.com
grenzezank.com
hauynescherben.net
holylandherald.com
incawonders.com
incredipoll.com
karritech.co.uk
kbbet1.life
la-croix.cam
lavirgule.news
lebelligerant.com
leidatova.com
leparisien.pm
lepoint.foo
levinaigre.net
liesofwallstreet.com
maddiecrum.com
matiasbenavides.com
meisterurian.io
mypride.press
news.walla.com.co
news.walla.re
norfolkcustomconcrete.com
notrepays.today
obozrevatel.ltd
observateurcontinential.fr
pankajnakhat.com
penisbreakfast.com
ppplown.com
pwscontrols.com
rating-cred122.buzz
rbk.media
renderny.com
risebedutt07.club
rrn.media
se5pro.co.uk
speaiker.com
spiegel.ltd
taigamebaisung.com
theliberal.in
tribunalukraine.info
turn.click
ukgraphiclab.co.uk
unian.pm
warfareinsider.us
washingtonpost.pm
welt.ltd
whatahotnews.com
whencontact.com
yassirjamal.com
yellowbarrels.co.uk
45.91.8.61
94.142.138.17
94.228.162.92
94.228.162.206
185.46.46.122
185.251.89.255
185.251.91.91
206.71.148.217
# https://www.recordedfuture.com/hamas-application-infrastructure-reveals-possible-overlap-tag-63-iranian-threat-activity
admin.nikanps.top
alqassam.ps
francescatmorrison.icu
hamrah.nikanps.top
hz.nikanpsx.top
isabeljwade.icu
jayyburrows.icu
jessicakphillips.icu
modir.nikanps.top
nikanps.top
nikanpsx.hopto.org
nikanpsx.top
user.nikanps.top
5.45.81.22
91.107.129.43
91.107.188.236
176.114.6.214
185.209.31.193
198.54.117.210
04880196c8927d7fcaf32d6cc55f5b7a33858f65de70a968efc0ea8d9f7221c2
# https://www.recordedfuture.com/multi-year-chinese-apt-campaign-targets-south-korean-academic-government-political-entities
alleyk.onthewifi.com
anrnet.servegame.com
asheepa.sytes.net
attachdaum.servecounterstrike.com
attachmaildaum.serveblog.net
attachmaildaum.servecounterstrike.com
bizmeka.viewdns.net
bucketnec.bounceme.net
chsoun.serveftp.com
ckstar.zapto.org
daecheol.myvnc.com
eburim.viewdns.net
eduin21.zapto.org
elecinfonec.servehalflife.com
foodlab.hopto.org
formsgle.freedynamicdns.net
formsgle.freedynamicdns.org
fresh.servepics.com
global.freedynamicdns.net
global.freedynamicdns.org
hairouni.serveblog.net
hamonsoft.serveblog.net
hanseo1.hopto.org
harvest.my-homeip.net
hometax.onthewifi.com
hwarang.myddns.me
jaminss.viewdns.net
janara.freedynamicdns.org
jeoash.servemp3.com
jstreco.myftp.biz
kanager.bounceme.net
kcgselect.servehalflife.com
kjmacgk.ddnsking.com
kookmina.servecounterstrike.com
ksd22.myddns.me
kumohhic.viewdns.net
kybook.viewdns.net
leader.gotdns.ch
likms.hopto.org
logindaums.ddnsking.com
loginsdaum.viewdns.net
mafolog.serveminecraft.net
mailplug.ddnsking.com
minjoo2.servehttp.com
mintaek.bounceme.net
munjanara.servehttp.com
necgo.serveblog.net
pattern.webhop.me
pixoneer.myvnc.com
plomacy.ddnsking.com
proeso.servehttp.com
prparty.webhop.me
puacgo1.servemp3.com
saevit.servebeer.com
safety.viewdns.net
samgiblue.servegame.com
sarang.serveminecraft.net
satreci.bounceme.net
sejonglog.hopto.org
signga.redirectme.net
skparty.myonlineportal.org
steering.viewdns.net
stjpmsko.serveblog.net
surveymonkey.myddns.me
themiujoo.viewdns.net
tsuago.servehalflife.com
tsuagos.servehalflife.com
unipedu.servebeer.com
visdpaka.servemp3.com
visual.webhop.me
wwl1764.ddnsking.com
45.133.194.135
92.38.135.92
107.148.149.108
141.164.60.28
148.163.6.214
158.247.223.50
158.247.234.163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# https://www.recordedfuture.com/redhotel-a-prolific-chinese-state-sponsored-group-operating-at-a-global-scale
0j10u9wi.itcom888.live
0nenote.com
2h3cvvhgtf.sibersystems.xyz
3tgdtyfpt9.sibersystems.xyz
6hi6m62bzp.caamanitoba.us
8kmobvy5o.itcom666.live
94ceaugp.itcom888.live
711zm77cwq.sibersystems.xyz
air.ngndc.com
alexa-api.com
api.asia-cdn.asia
api.iredemail.com
asia-cdn.asia
b1k10pk9.caamanitoba.us
bbs.iredemail.com
bwlgrafana.itcom888.live
caamanitoba.us
cctv.liveonlin.com
cdn.officesuport.com
checkip.cyberoams.com
conhostsadas.website
cookietest.ml
cyberoams.com
demo.icoreemail.com
demo.iredemail.com
dga.asia
dgti.dga.asia
dkxvb0mf.itcom888.live
downloads.ekaldhfl.club
ekaldhfl.club
excel.officesuport.com
freehighways.com
full.iredemail.com
fyalluw0.sibersystems.xyz
icarln.ismtrsn.club
icoreemail.com
index.iredemail.com
iredemail.com
ismtrsn.club
ist.ekaldhfl.club
itcom666.live
itcom888.live
itsm-uat-app.itcom888.live
jmz8xhxen3.sibersystems.xyz
jw7uvtodx4.caamanitoba.us
kb.dga.asia
keep.0nenote.com
kiwi.officesuport.com
livehost.live
liveonlin.com
lrm.ismtrsn.club
mail.officesuport.com
main.liveonlin.com
main.officesuport.com
map.freehighways.com
mkn.ngndc.com
msdn.microsoft.nhqdc.com
mtlklabs.co
n71qtqemam.sibersystems.xyz
news.ismtrsn.club
ngndc.com
nhqdc.com
npgsql.liveonlin.com
ntpc.officesuport.com
nvw3tdetwx.itcom888.live
officesuport.com
open.iredemail.com
plt.ekaldhfl.club
pps.ekaldhfl.club
public.liveonlin.com
qbxlwr4nkq.itcom666.live
R77wu4s847.sibersystems.xyz
remote.officesuport.com
report.asia-cdn.asia
sc.dga.asia
sci.livehost.live
sibersystems.xyz
sijqlfnbes.sibersystems.xyz
spa.ngndc.com
speedtest.asia-cdn.asia
tech.liveonlin.com
test.officesuport.com
tgoomh.ismtrsn.club
thy.ekaldhfl.club
tlt.ekaldhfl.club
ts.ekaldhfl.club
us.ekaldhfl.club
usa.ekaldhfl.club
vappvcsa.itcom888.live
video.dga.asia
www.alexa-api.com
xdryqrbe.caamanitoba.us
yt-sslvpn.itcom888.live
1.13.82.101
5.188.33.188
5.188.33.254
5.188.34.164
5.188.34.173
38.54.16.131
38.54.16.179
38.60.199.87
38.60.199.208
45.76.186.26
45.77.153.197
61.238.103.165
64.4.54.254
64.227.132.226
92.38.169.222
92.38.176.128
92.38.178.40
92.38.178.60
92.223.90.133
95.85.91.50
103.140.239.41
103.157.142.95
108.61.158.179
139.180.193.182
140.82.7.72
141.164.63.244
154.212.129.132
156.236.114.202
1ded9878f8680e1d91354cbb5ad8a6960efd6ddca2da157eb4c1ef0f0430fd5f
2f1321c6cf0bc3cf955e86692bfc4ba836f5580c8b1469ce35aa250c97f0076e
5cba27d29c89caf0c8a8d28b42a8f977f86c92c803d1e2c7386d60c0d8641285
5d3a6f5bd0a72ee653c6bdad68275df730b836d6f9325ee57ec7d32997d5dcef
6e3c3045bb9d0db4817ad0441ee3c95b8fe3e087388d1ceefb9ebbd2608aef16
6f31a4656afb8d9245b5b2f5a634ddfbdb9db3ca565d2c52aee68554ede068d1
7a61708f391a667c8bb91fcfd7392a328986059563d972960f8237a69e375d50
9c8e5f6e5e843767f0969770478e3ad449f8a412dad246a17ea69694233884b9
9eb0124d822d6b0fab6572b2a4445546e8029ad6bd490725015d49755b5845a4
24d4089f74672bc00c897a74664287fe14d63a9b78a8fe2bdbbf9b870b40d85c
25da610be6acecfd71bbe3a4e88c09f31ad07bdd252eb30feeef9debd9667c51
29ed44228ed4a9883194f7e910b2aac8e433ba3edd89596353995ba9b9107093
48e81b1c5cc0005cc58b99cefe1b6087c841e952bb06db5a5a6441e92e40bed6
69ff2f88c1f9007b80d591e9655cc61eaa4709ccd8b3aa6ec15e3aa46b9098bd
75d79b6cf7836a88f21b637ae29958b36e8d6926854f2954823dba29e5a8f3fe
233bb85dbeba69231533408501697695a66b7790e751925231d64bddf80bbf91
294fb8f21034475198c3320d01513cc9917629c6fd090af76ea0ff8911e0caa3
7056e9b69cc2fbc79ba7a492906bcc84dabc6ea95383dff3844dfde5278d9c7a
5861584bb7fa46373c1b1f83b1e066a3d82e9c10ce87539ee1633ef0f567e743
aeceaa7a806468766923a00e8c4eb48349f10d069464b53674eeb150e0a59123
b02aed9a615b6dff2d48b1dd5d15d898d537033b2f6a5e9737d27b0e0817b30e
b4cc0b4540d185dd9f5ceabd1fbca85370f1124f7eb44277d871fb1aaf05d7ad
c00991cfeafc055447d7553a14be2303e105b6a97ab35ecf820b9dbd42826f9d
e053ca5888fb0d5099efed76e68a1af0020aaaa34ca610e7a1ac0ae9ffe36f6e
ede0c1f0d6c3d982f63abbdd5f10648948a44e5fa0d948a89244a06abaf2ecfe
f1dcf623a8f8f4b26fe54fb17c8597d6cc3f7066789daf47a5f1179bd7f7001a
f8cd64625f8964239dad1b2ce7372d7a293196455db7c6b5467f7770fd664a61
# https://www.recordedfuture.com/bluecharlie-previously-tracked-as-tag-53-continues-to-deploy-new-infrastructure-in-2023
bittechllc.net
centeritdefcity.com
checkscreenit.com
cloudcpanelhost.com
clouddefsystems.com
cloudrootstorage.com
commandentrance.com
computertechdirectsystems.com
computingtechstudio.com
configuregatewayglobal.com
controlgatestorage.com
controlsstoragedirect.com
controlstoragesolutions.com
cryptdatagate.com
cryptoanalyzetech.com
cryptotechdirect.com
cryptothistech.com
datagatellc.com
datagatewayglobal.com
datastoragecrypto.com
definform.com
deskactivitygm.com
directdocumentgate.com
directdocumentgateway.com
directexpressgateway.com
directstoragegate.com
docsinfogate.com
documentdirectllc.com
documentdirectto.com
entrywaycenter.com
gateblurbrepository.com
gatecryptospace.com
gateinfosecure.com