# Copyright (c) 2014-2024 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: cacosms, irata, irspy, realrat

# Reference: https://twitter.com/malwrhunterteam/status/1407420438725238785
# Reference: https://twitter.com/mr_amini8/status/1413038661696987142
# Reference: https://www.virustotal.com/gui/ip-address/157.90.9.65/relations
# Reference: https://www.virustotal.com/gui/file/70b8d5cd1a364c0cf148c8fb36a9cfe85bfbf6b18fbbcf1d36de4aee5e4b9e74/detection
# Reference: https://www.virustotal.com/gui/file/5f9c5dec4856278393b8936c8145a65f8ca045aa01b71e16de6ee5b68d893ea0/detection
# Reference: https://www.virustotal.com/gui/file/46901fac5acff20fa83b8bb4f27a8f96e73a67209b799587bc46f1f6e5b8441b/detection
# Reference: https://www.virustotal.com/gui/file/835a9a1f8c6d3231a939c3070c179cb8f7e74ed5f3afebdff21f4bafe1bbf19f/detection

http://188.40.233.91
gjpay.site
ir-sana.ml
ir-shalplak.gq
ir-shparak.tk
sana-eblagh.xyz
shahparak-ir.ml
shaparak-bmc.tk
shayparak.tk
/ebiagh/
/eblagh/
/eblaghd/
/eblaghe/
/eblaghd/Mellat/recive.php
/sighe12/Mellat/recive.php
/Mellat/recive.php

# Reference: https://twitter.com/malwrhunterteam/status/1407420438725238785
# Reference: https://twitter.com/midnight_comms/status/1461723157232951297
# Reference: https://www.virustotal.com/gui/ip-address/192.227.134.70/relations
# Reference: https://www.virustotal.com/gui/file/8e0dbe364134d00c32ebaeb7a479c4b28bcdb4b528c4a255ade404e0dccdfc21/detection

adiiran-lr.gq
adiiran.tk
adl-dadgostari.tk
adl-police.ml
adl-police.tk
adliran-paygiri.tk
adlirane.ml
adlliiran-ir.cf
adlliiran-ir.ga
adlliiran-ir.gq
asanpeygiri.tk
eblagh-f.ml
eblagh-f.tk
eblagh-iran.ml
eblagh-samane.tk
eblaghe-ghazai.cf
eblaghie-v.gq
edliran.cf
edliran.ga
fata.gq
ir-eblaghe.cf
ir-starka.cf
iran-portal.xyz
ireblaghsana-ir.ml
police-adl.tk
rat-rat.tk
remotedefacer.link
remotedefacer.online
samane.cf
sana-ebiagh.tk
sana-iirani.site
sana-iran-ir.site
sana-iriraun.site
sana-lran.tk
sanabv.ga
sayboriml.ml
sna-portal.com
testsus.ml
/73526/eblagh.php
/Lopqer/sms.php
/eblagh.php

# Reference: https://www.virustotal.com/gui/file/5c388bc80bbaccb57d790dffdf61f85845f33866b1a29c372f2f9f90b5cca77d/detection

sana-eblaghiran.ml

# Reference: https://www.virustotal.com/gui/file/ce90efb8e7a4382b3615a859f39f48e60ccb1b4020bc946a4bc0afcb83c0a49c/detection

sana-eblaghiran.tk

# Reference: https://www.virustotal.com/gui/file/ce90efb8e7a4382b3615a859f39f48e60ccb1b4020bc946a4bc0afcb83c0a49c/detection

sana-eblaghiran.gq

# Reference: https://www.virustotal.com/gui/file/54c704ae09ebd703587ed2b78fcb6c3e9ba314fd9604767182886c0b4ad4f514/detection

eblagh-sanairan.ga

# Reference: https://www.virustotal.com/gui/file/98cf23378dcaed9165d852cc1186710ea39b14f66de6726c999ced8008a5d076/detection

eblagh-sanairan.gq

# Reference: https://www.virustotal.com/gui/file/c93721167305ba16a0c06f565d50ca37fd98b5455723d570942cb90264c21077/detection

eblagh-sanairan.cf

# Reference: https://www.virustotal.com/gui/file/bdd0fbb9cf4591d9007204da0608f0d43a58e03444768f2f856c67e152468132/detection

sana-adliran.ml

# Reference: https://www.virustotal.com/gui/file/b0f493fd7adc4c6f5165118c9da2cf07ca10a890ceb737c0ecbcc87d40c60f5f/detection

dklfjzlsdf.ml

# Reference: https://twitter.com/malwrhunterteam/status/1456978019273396229
# Reference: https://www.virustotal.com/gui/ip-address/162.0.232.163/relations
# Reference: https://www.virustotal.com/gui/ip-address/192.227.134.70/relations
# Reference: https://www.virustotal.com/gui/ip-address/192.227.134.82/relations
# Reference: https://www.virustotal.com/gui/file/26d7819a0f69c63fc4720720dd0c26a929ad2e77b5505c6a6b6b7102078233f6/detection
# Reference: https://www.virustotal.com/gui/file/f630893662d81f95d102ae1d4f185a5116f830fddd2ebb8e2e0f59256616233d/detection

ablaghe-sana.tk
adrilan-sana.ml
amirali56.site
amirali5665.xyz
appes-eqlab.tk
apps-eqlag.ml
aquabest.shop
black-amirpower.xyz
defacerpanel.tk
divar-appex.ml
divar1400.ml
divare-appex.ml
dklfjzlsdf.ml
eblaaghie-sana.ml
eblag-ir.ga
eblag-u-ir.tk
eblagh-09.cf
eblagh-09.ga
eblagh-09.gq
eblagh-09.ml
eblagh-09.tk
eblagh-1.cf
eblagh-1.ga
eblagh-1.gq
eblagh-1.ml
eblagh-1.tk
eblagh-47.ga
eblagh-47.tk
eblagh-55.cf
eblagh-55.ga
eblagh-55.gq
eblagh-61.ml
eblagh-61.tk
eblagh-81.cf
eblagh-81.ga
eblagh-81.ml
eblagh-81.tk
eblagh-9.gq
eblagh-9.tk
eblagh-9.xyz
eblagh-edalat-ir.tk
eblagh-elekterenoki.ga
eblagh-elekterenoki.ml
eblagh-ghazaiie.ml
eblagh-iran.ml
eblagh-pay19.ga
eblagh-pay19.ml
eblagh-pay19.tk
eblagh-sana-electronik.cf
eblagh-sana-electronik.ga
eblagh-sana-electronik.gq
eblagh-sana-online.tk
eblagh-sanairan.cf
eblagh-sanairan.ga
eblagh-sanairan.gq
eblagh-sanairan.ml
eblagh-sanairan.tk
eblagh-vx.gq
eblagh-vx.ml
eblagh-vx.tk
eblaghie-019.ga
eblaghie-019.ml
eblaghie-019.tk
eblaghie-15.cf
eblaghie-15.ga
eblaghie-15.gq
eblaghie-15.ml
eblaghie-15.tk
eblaghie-on1ine.tk
eblaghieh-online6.tk
eblaghiie-sana.tk
eblaghirsana.cf
eblaghirsana.ga
eblaghirsana.tk
eblaghiyh90.tk
eblagi-pigiri.ml
eblagie-pygiri.ga
eblagieh-ghazaei.tk
eblagihe-melat.ml
eblagye-sana.tk
eblaq-irsana.cf
eblaq-irsana.gq
eblaq-irsana.ml
eblaq-irsana.tk
eblaq-sna.cf
eblaq-sna.ml
eblaq-sna.tk
ebllaghie-sana.ml
ebllaghsisana-ir.ml
eiblaghs-ir.cf
eieblagh-ir.ml
eieblagh-ir.tk
forbidden12.tk
git7cyusid9.tk
hdfdhfudyf.xyz
iablaghs-san.ga
iablaghs-san.ml
ir-eblaghe.cf
ir-ista100.ga
iran-portal.xyz
ireblaghsamewsna-ir.ml
ireblaghsana-ir.ml
ireblaghsnna-ir.ml
irn-sana.cf
irn-sana.gq
irn-sana.ml
irn-sana.tk
irsanaeblagh.cf
irsanaeblagh.ga
irsanaeblagh.ml
irsanaeblagh.tk
jdee5ip98.tk
meli-ir.gq
meli-ir.tk
new0account.tk
oaiwj2ow.tk
online-eblaghie.cf
online-eblaghie5.ml
peygiri-12g.ml
peygiri-13p.ml
peygiri-14f.ml
peygiri-9lg.ml
peygiri-est.ml
peygiri-eyb.tk
peygiri-grc.ml
peygiri-obj.ml
peygiri-rcd.ml
peygiri-tpc.ml
peygiri-ufd.ml
peygiri-ygt.ml
peygirie-sana.tk
po-iran.ml
power405.xyz
powerx.ga
prygiri-fcd.ml
prygiri-htp.ml
pygiri-sana.ga
pygiri-sana.gq
pygiri-sana.ml
pygiri-sana.tk
rat-rat.tk
remotedefacer.link
remotedefacer.online
samaneh-sana-ir.tk
san-elbg.ml
sana-adliran.ga
sana-adliran.ml
sana-ebiagh.tk
sana-eblagh.ga
sana-eblaghiran.cf
sana-eblaghiran.ga
sana-eblaghiran.gq
sana-eblaghiran.ml
sana-eblaghiran.tk
sana-lran.tk
sana-peygiri.tk
sanaadl0iran.ml
sanaadliran.xyz
sanabv.ga
sanaeblagh-iran.ml
sanaeblagh.xyz
sanaireblagh.ml
sanaireblagh.tk
sanaji-shapak.ga
sanaji-shapak.gq
sanaji-shapak.ml
seblogh-san.tk
shaepark.tk
shaparak-ir.xyz
shaparak-is.cf
shaparak-is.ml
shaparak-is.tk
shaparak-it.cf
shaparak-it.ga
shaparak-it.gq
shaparak-it.ml
shaparak-pw.ml
shapparek-sna.tk
shop-sa.tk
shpk-sanair.gq
shprkish.ml
sna-eblaq.tk
sna-portal.com
sus-barq.ml
testsus.ml
web-lev.ga

# Reference: https://twitter.com/ReBensk/status/1463011973071659008
# Reference: https://www.virustotal.com/gui/file/ad55c7314f666de9eaece6daaa19c38ae427156c4ebd48f37f38b7a628baf60f/detection

new-mellat-bank.xyz

# Reference: https://www.virustotal.com/gui/file/bf0c75bd80bd8bb86384e6507853293651c8a5d5a807a9fecce08fbdbd4388c7/detection

sana-com-r.ml

# Reference: https://www.virustotal.com/gui/file/763b142544767af1c9a7c1a835002ee0bc1ff58012df4dcfb556b61b0c2473b7/detection

sana.pb5.ir

# Reference: https://www.virustotal.com/gui/file/38836bc6dda4bd96764ed45619a610fcabdc46aa45a20970c6d66a950eab3504/detection

mb-shaparak.gq

# Reference: https://www.virustotal.com/gui/file/b210394d530a54e7f82c0d1d025b79d3241c845e5e27e758ce5980ec2dff7436/detection

sana.mpiko.ir

# Reference: https://www.virustotal.com/gui/file/bf3a78609c2388a6f700a9b63feccf24a5b5762cc94d81afa14bff6db5a5f984/detection

shaparak-bmi.ml

# Reference: https://www.virustotal.com/gui/file/34c81abd142db1c20369a4d7d1107e0143a0d4fc011292471455c8ddb80db46b/detection

irsetpay-ir.tk

# Reference: https://www.virustotal.com/gui/file/544e30fb8c85d078cbe64467f00abdcc54dacd6a27bae609a92c691ec1c0a1b4/detection

aid-shaoarack-ir.tk

# Reference: https://www.virustotal.com/gui/file/43cc666cf6150efa0de925334f272635b7ba81d3686bcc1936fb3e02a5a2be7c/detection

amali.pb5.ir

# Reference: https://www.virustotal.com/gui/file/deca9096f682b1d4ffce4edca6ad0865ce3add0a2bc5e1144c71799004a84936/detection

polis.pb5.ir
/eblagh2/
/eblagh2/rat/

# Reference: https://www.virustotal.com/gui/file/fd1b36fadb2e72a9e1a74687fe662d11ba10fd46f069944470ea03be09791b09/detection

sana-com-r.tk

# Reference: https://www.virustotal.com/gui/file/be4c83027264c7dc798ebfcfa8d566cb462c5e75cb15e0b70f66a6e0b7f9e706/detection

avibili-irani.tk

# Reference: https://www.virustotal.com/gui/file/7a78b3ae543069d91eebcee8e559f46ebde3cf6beffdd06955263fb7d5fe13da/detection

eblagh-mellat.tk

# Reference: https://www.virustotal.com/gui/file/d5234ef9f4274c5da1097e99887240d2ba3974bc0fa4e14008c5089f2a8a0427/detection

sanaeblaghh.tk

# Reference: https://www.virustotal.com/gui/file/a338021216604ef8b1e860ee5c36ca43887011c6b4717606a7724b1daf678716/detection

eblaghie.cf

# Reference: https://www.virustotal.com/gui/file/9d7a1a011a33bb2ffdc93041b1c42b060f888a53396f9a84588233fd6c489953/detection

dadgah-sana.tk

# Reference: https://www.virustotal.com/gui/file/c714b500b76a3631746efb94976d2301140ca5ce6af79c7c196ce0673c767de4/detection

dadyarytehran.tk

# Reference: https://www.virustotal.com/gui/file/5e6f8b8b716c42abd9af0cdcd77e547f080bda24a79452117c977135d92bdd0f/detection

sarmayeegan.tk

# Reference: https://www.virustotal.com/gui/file/104a6ab4bb5d05206fcd30dcadb4dc104e427ef1edf9ecdc20790ff64f1772b2/detection

newmelat-ir.cf

# Reference: https://www.virustotal.com/gui/file/f9774c77e55d4563bd356b6ce234f745df1813db11b45f48faf51afbca518c57/detection

time-pay.gq

# Reference: https://www.virustotal.com/gui/file/511eee2b1ec591859fecf8d4f642dfee96e3d7c5e10e65b0cf4dd4b82c82634b/detection

saa-nna.ml

# Reference: https://www.virustotal.com/gui/ip-address/45.14.224.207/relations
# Reference: https://www.virustotal.com/gui/file/33deab5d65f48099afa722d8b6cc9b96fe35fde1ee9176a9e708879c7a539bd6/detection

adli-iran.cf
aid-shaoarack-ir.cf
aid-shaoarack-ir.tk
alpha-host.ir
alphahosting.ir
amali.pb5.ir
amir-shirazey.tk
app-dadgah.tk
appk-dadgah.tk
arshia-bots.ir
arshia-ne2.ir
asan-pardakht-ir.cf
asan-pardakht-ir.ga
asan-pardakht-ir.gq
asan-pardakht-ir.tk
asdfgh-sdfgh.tk
ase-shaparak.ga
ase-shaparak.ml
asq-shaparak.gq
asr-shaparak.gq
asr-shaparak.ml
avibili-irani.tk
azar-soft.ml
azar-soft.tk
b-shaparak.ml
bazdid-fa.ir
best-mizban.ir
bilalgyan2000.ir
bmp-shaparrak.gq
bomber-pro.ml
claimfreeudd.ml
dad-gaahi.tk
dad-gahi.tk
dad-yari.tk
dad-yarri.tk
dadgaah-appk.tk
dadgaatehran.tk
dadgah-sana.tk
dadgah-tehran.tk
dadgahh-appk.tk
dadgahii-tehran.tk
dadgahtehran.tk
dadgahy-tehran.tk
dadyaritehran.tk
dadyarytehran.tk
divarapp.tk
divarappk.tk
dr-iliya.ir
eblagh-mellat-ir.tk
eblagh-mellat.ml
eblagh-mellat.tk
eblagh-shecayatu-iran.tk
eblaghie.cf
eblaghie.ml
etelaat.piko-server.ir
fast-mizban.ir
hedye-vizhe-tabestan.tk
herni-bot.ir
iliagram.dr-iliya.ir
imanm.gq
instapay-ir.tk
io-shaparak-c.cf
ip-shaparak-io.cf
ip-shaparak.cf
ip-shaparak.gq
ip-shaparak.ml
ip-shaparak.tk
ir-support.pb5.ir
iran-adli.ml
iran-adlii.ml
irsetpay-ir.ml
irsetpay-ir.tk
is-shaparak-ir.ga
keno-wer.tk
lashi.shirazey.cf
lite-host.ir
lwe-shaparak.cf
lwe-shaparak.ga
mb-shaparak.gq
mci-irancell.tk
mellatbank-asanpardakht.cf
mellatbank-asanpardakht.tk
melpardakht.tk
net-train.ir
new-ebl-agh-ir.xyz
new-iran-q.tk
new-kakaz-start.tk
new-majazi-q.tk
new-mellat-bank.xyz
new-sana-eblaagh.xyz
new-sana-eblagh.xyz
new-sana-eblaghiye.tk
newmelat-ir.cf
newmelat-ir.ml
oi-rokhah-new.tk
pay-pardkths.tk
pesh-pew.tk
pikohost.ir
polis.pb5.ir
pqt-shaparak.ml
pqt-shaparak.tk
psd-shaprak.tk
roborex-bot.ir
roshana.cf
sa-na.ml
sa-nna.ga
saa-na.ml
saa-nna.ml
saana-apik.tk
saana.pb5.ir
sad-behpardakht.ga
sadad-shaparak.cf
sana-adiiiran.tk
sana-adiliran1xyz.tk
sana-adliirran.tk
sana-com-r.ml
sana-com-r.tk
sana-daadgah.tk
sana-daddgah.tk
sana-dadgah-apk.tk
sana-eblaghe-iran.xyz
sana-eblaghiye-iran.tk
sana-ie.tk
sana-new.tk
sana.mpiko.ir
sana.pb5.ir
sanaadiiran.tk
sanadadgah.tk
sanaeblaghh.tk
sanaeblah.tk
sanakdrobat.pb5.ir
sarmageggan.tk
sarmayeegan.tk
selfali.ir
serverdefacer.ml
shagarak-ir.ml
shaparak-bankmellat-iran.gq
shaparak-bankmellat-iran.tk
shaparak-bmi.ml
shaparak-ftz.ml
shaparak-kq.ml
shaparak-lbl.ml
shaparak-meli.ml
shaparak-mellat-eng.tk
shaparak-melllatbank-iran.xyz
shaparak-mi-ir.ml
shaparak-phg.gq
shaparak-rtg.cf
shaparak-rtg.ml
shaparakes-0.cf
shaparakm.gq
shapark-bmp-ir.cf
shapark-bmp-ir.ga
shapark-bmp-ir.gq
shapark-bmp-ir.tk
shapark-irnm.cf
shaparrk-tj.ml
shaparrk-tj.tk
shaprk-pep-ir.cf
shaprk-pep-ir.ga
shaprk-pep-ir.gq
shaprk-pep-ir.tk
shaqarek.tk
shegayatname-eblagh-ir.tk
shirazey.cf
shirazeybomber.tk
shop-kal.tk
shop-levi.tk
shop-sap.tk
srw-pey.tk
support-iran-net.xyz
support-iran-sana.xyz
support-newsana.xyz
time-pay.gq
time-pay.ml
time-pay.tk
timesaz.tk
titelegram.ir
tract-iran.ir
trust-wallet-g.cf
trust-wallet-ge.cf
trusts-wallet.xyz
vcm-moodle.ml
viz-panel.ir
web-sh.tk

# Reference: https://research.checkpoint.com/2021/smishing-botnets-going-viral-in-iran/
# Reference: https://www.virustotal.com/gui/ip-address/185.178.208.134/relations
# Reference: https://www.virustotal.com/gui/file/1512de28f47ee802f2bd31575a47a1caa2c27f2cb5fb1c219d49301b75fbd923/detection

account-tamin-ejtemai-ir.cf
adleiran-ir.tk
adlliran-ir.ml
adllirani.ml
adllliran.ml
benkday-ir.top
blaghmalet-shapark.tk
caloprkds.ml
divaar.xyz
du-shaparak.tk
eblagh-sana126.cf
eblaghonline.tk
edalatiran.cf
edalatiran.ga
ekop.shop
googleadvercap.ml
ibligo.com
iraeblagh.tk
iranadll.ml
myeblaghye.tk
oliverdnssop.cf
oliverhome.cf
oliverhome.ml
papaoliver.com
sana-adliran.site
sana-panelr6s.cf
shprk-melli-ir.cf
taminaccount-ir.ml
texrec.tk
meraf-c128a.appspot.com
api.texrec.tk

# Reference: https://www.virustotal.com/gui/file/4b32fb019d73fad4d44c1b68ff7ec96158902014298458eec47de39e3b3aa8bd/detection

caco333.000webhostapp.com
shafarak.cf

# Reference: https://www.virustotal.com/gui/file/2ba905addab2c210d79aec0b4b185d6ed2e3fc48d55951b5668d8345c65d178e/detection

beh-pardakht.xyz

# Reference: https://www.virustotal.com/gui/file/64d9bdd869c24fa758e9e76d28bc9d399eb91c707eb9ce30aeb776cdb0a01f80/detection

edalat-app.com

# Reference: https://www.virustotal.com/gui/file/b12f057af6679df0d99606e5ae95b08004955a58b176866d67984477dc38d008/detection

nme-top.cf

# Reference: https://www.virustotal.com/gui/file/45ac78f881ff30531e95f24f003c03249bf24dece268a57a65b5f6609f423a02/detection

pec-shapalrak.gq

# Reference: https://www.virustotal.com/gui/file/966d71ed3c149eed6d0e8d412b9e464b38a2012630a94888a10d3fcbfbce6dc1/detection

http://45.147.231.11
/reza/send.php

# Reference: https://www.virustotal.com/gui/file/83f69d44a33c2033972c33c59b0a28bfacf62421a20a916b7c77be3955fc3aa1/detection

liizradvip.xyz

# Reference: https://www.virustotal.com/gui/file/9c4df97e482b228d09f4759d5a181c9bbb200ae3771150c064b6799363a39aea/detection

eblagh-post.tk

# Reference: https://www.virustotal.com/gui/file/0cb5c5eeed9afa49d4dce801777c1ae8dcb16577a3c16c76c85653acfd745f64/detection

iran-sanaeb.tk

# Reference: https://www.virustotal.com/gui/file/94e30d9bc60022c07262d8002e414cca6f3898ec4c32c95c849cefa14b0ad77a/detection

sana-eblaghieh.ml

# Reference: https://www.virustotal.com/gui/file/218545fe27ac30d6983639e2a5764b0a4477b14ecbaac269005e97661ada2318/detection

shaprak-ir.gq

# Reference: https://www.virustotal.com/gui/file/8e6d6e431186f96ddaab73767acac79cc722d203d5e34772b92063d4ba942e51/detection

shaparal.cf

# Reference: https://www.virustotal.com/gui/file/86d59b6bd8df0ba45c57e8ddab03c14e085a6a7772c92d33be776060d9365aca/detection

shaparak-prdakht.ga

# Reference: https://www.virustotal.com/gui/file/f3e4454ec7a4e4b51f0644de956e19c74ca02938ed265b3e4056298f1d0a1d90/detection

shapatak-ir.ga

# Reference: https://www.virustotal.com/gui/file/d61f6025b0dcb7ef6afa57f12c50c6a60bc6111c7a236e8381743fcfe2dd7082/detection

paymen-pay.ml

# Reference: https://www.virustotal.com/gui/file/fab6c6624bdc39db39ab88c7a90129e881ddeded89a19b2c5289fbc242a1a93b/detection

texrac.cf

# Reference: https://www.virustotal.com/gui/file/d0e7180eea4d4aa1e3a43bcc02978d1fa2fde44d18d92a5e95ddfb9a61bf5a53/detection

kiaoiiq910.xyz
sana-adliran.me

# Reference: https://www.virustotal.com/gui/file/c648ecdba5a0adb1056d4af36ce03b4d2ad56c87ed207b174e14184772b877e9/detection

bhwii80181.xyz

# Reference: https://www.virustotal.com/gui/file/ee046d94783aca4ec5620265a214d5488a12020e1b7f872b1471344792686884/detection

shaparaks-ir.tk

# Reference: https://www.virustotal.com/gui/file/b33414351b19a5589989768b6991565759a9e15e28d7dfedd97636a97738a37c/detection

smsihjje.cf

# Reference: https://www.virustotal.com/gui/file/020a2722e446851fef19963ae5da860269ee1bacd33c03a4837c0c385d07b184/detection

ebv-eblagh.xyz
/Eblagh/eblaghimport.php
/eblaghimport.php

# Reference: https://www.virustotal.com/gui/file/d1718e7292bbf77dd9191d23fad7a5ce1df4875331b6ba1634511544a651b80b/detection

mellat-pay-ir.ml

# Reference: https://www.virustotal.com/gui/file/601902a025b929c0294a5a1b0cbfa84b9f896fbce8fe82b51e416aa5c93d0e9b/detection

ebl-eblagh.tk
/mellat/payment.mellat/
/payment.mellat/

# Reference: https://www.virustotal.com/gui/file/13eddbf151f89bd2b1c4618817d20a5701c5b47ed14372d81e62bbd0d600423e/detection

shaparaks-ir.gq
zrin-pal.tk
/data/40226/sms.php

# Reference: https://www.virustotal.com/gui/file/0025225ae2ac093d2a8455305b4d7eddeb9ff457758c9d5a7c862f2bc1063629/detection

sana-irans.xyz

# Reference: https://www.virustotal.com/gui/file/b78d92ebddbc53cf3b364f70562f9213322eb921096c48648b8009d8612d1361/detection

nafasakhar.000webhostapp.com

# Reference: https://www.virustotal.com/gui/file/5a871bd80f4ff27cfd6c59f003decd5d6babee3aeee559f65536ee1cd043eefd/detection

shaparakks.gq

# Reference: https://www.virustotal.com/gui/file/e7d5370480d07e58d885170194ead261b80fe14e42e794e6ff1079a4c2f64564/detection

http://135.181.168.202
sana-adlirans.ml

# Reference: https://www.virustotal.com/gui/file/fc7c6c25d64e289b1f7ebe76c663e61c0171e0f4ad116b7053da4444f7203fa8/detection

iran-sanaadl.tk

# Reference: https://www.virustotal.com/gui/file/a0ea40eaf470b59b54fd19caced1cb832e10812906fc2bdecd4011a678cb1c62/detection

cod-change.cf

# Reference: https://www.virustotal.com/gui/file/969faae7a97a7b5d6572efe63c0d8427815590e9d86d68b26b093ad924c268b2/detection

trust--wallet.ml

# Reference: https://www.virustotal.com/gui/file/9c3e564dd99a0548cd7a42018f01cdb091b00528bef7b3603aea24ddf99b7e51/detection

shaaperak-ir.tk

# Reference: https://www.virustotal.com/gui/file/d9104bbc8043b4b8936741b48063bf577c55143be171cf62ef497da9ec492543/detection

sanairani.cf

# Reference: https://www.virustotal.com/gui/file/396d356760f08725dfc94eea3f687e422f342ea1d5bdb231df40d19c40d0ac1f/detection

bpm--shaparak.cf

# Reference: https://www.virustotal.com/gui/file/a6d464731085a091a76d14fe890ead926acdf72de300093d3876f4764fb687cf/detection

trust-marketa.tk

# Reference: https://www.virustotal.com/gui/file/1805648b238686cff9aa201e22ec25d1390fe518ebb04f98aef0d236f05ca845/detection

shapajak.gq

# Reference: https://www.virustotal.com/gui/file/2af1c66cd2ad38759788b07acde4e1781de3938c979aa4ebc245693624d6e108/detection

eblagh.xyz

# Reference: https://www.virustotal.com/gui/ip-address/192.3.154.61/relations
# Reference: https://www.virustotal.com/gui/file/e5373be93e11e8735cdde14e78c87abcbeaa2b0d3893724ddc971c5640b6cab9/detection

adliran-eblagh-ir.ga
adliran-eblagh-ir.gq
adliran-eblagh-ir.ml
adliran-eblagh-ir.tk
adliran-ir1.cf
adliran-samane-ir.cf
adliran-sana-ir.tk
adliran-sana-iran.cf
adliran1-samane.tk
adlirna-ir.tk
api-charge-bot.cf
bas-pay-ir.cf
bas-pay-ir.gq
bas-pay-ir.ml
bas-pay-ir.tk
bqm-shacparak-com.tk
chargerobot.tk
colz-vps.cf
download-edalathamrah-com.cf
ebalgh-ir.tk
ebiagh-ir.tk
eblagh-internet-ir.ml
eblaghir-sana.gq
eblaghir-sana.ml
edalat-hamrah-ir.tk
ghost3282.tk
ha-edalat.tk
ha-sana.tk
hir-san.tk
ili-oori.tk
internet-bankmellat-ir.tk
internet-mellatbank-ir.tk
ir-idpax-iran.tk
lnternet-bankmellat-ir.tk
lsp-pey.cf
mellatbank-iran-com.ga
mylicense.cf
og-req.tk
op-seq.tk
p-coin.tk
p-net.tk
p-vps.tk
pay-idpy.tk
ps-red.ml
ps-sighe.tk
salamat-ir-gov.tk
salamt-gov-ir.cf
saman-sana-ir.cf
sana-adliran-ir.ga
saz-pay.tk
shaparak-venoss.tk
shaparak-veroncs.tk
shaparak-vorons.tk
shaparakvenos.tk
shapark-mellat.gq
shop-shacpatak-py.tk
sighe-buy.tk
sigheyabi-com.tk
sopp-pey.cf
sorp-pey.cf
ssn-eblagh.tk
tr-wallet.tk
www-paylogin-com.cf
www-slamat-gov-ir.cf

# Reference: https://www.virustotal.com/gui/file/7b8babce594c8294b75d5b61ac4f9a5aec24c29a8ea294caf81bfc70d3c3398a/detection

epay-banki.ga

# Reference: https://www.virustotal.com/gui/ip-address/146.59.254.188/relations
# Reference: https://www.virustotal.com/gui/file/00fc19ea7ea18f6ce5d7a2e377cce48e7caa18ca62fa1d97109dd58805c1bbb4/detection
# Reference: https://www.virustotal.com/gui/file/fef9b60c08b225776460f98213f2343c39858451c125b307c404c742a06d6735/detection

amir-rxhmxni.ir
api-xcr.tk
bots-me.gq
bots-me.tk
eblaq-ir.cf
eblaq-ir.ml
eblgh.cf
eblgh.ga
eblgh.gq
eblgh.tk
epay-banki.cf
epay-banki.ga
epay-banki.gq
g-register.ir
iran-lancer.com
rush-link.gq
sana-gov.xyz
tron-wallet.ga
typing-rush.cf
typing-rush.gq
typing-rush.tk
weblink-sana.ga
weblink-sana.gq
weblink-site.cf
weblink-site.ga
weblink-site.ml
weblink-site.tk
xcr-bot.tk
zohreh-ahmadi.ir

# Reference: https://twitter.com/malwrhunterteam/status/1466836273256181761
# Reference: https://twitter.com/midnight_comms/status/1466971054941904896

eblgh-14000.xyz
salambarrahbar.xyz
/rat/user/nabat/

# Reference: https://twitter.com/malwrhunterteam/status/1466888626571259908
# Reference: https://twitter.com/midnight_comms/status/1466967003189682179
# Reference: https://www.virustotal.com/gui/file/b05418cab378f7c438c440110c7b61371b0d674a80cfbf5a962d06b34d913d95

adelliirann.tk

# Reference: https://twitter.com/malwrhunterteam/status/1466822463057186821
# Reference: https://twitter.com/midnight_comms/status/1466965433467248643
# Reference: https://www.virustotal.com/gui/file/2d3454ce72fbd12699262cee5ab05a068436ddafda04a49fa7a05dc48cee6605/detection

ir-46549.xyz
ir-56163.xyz
edalat.ir-46549.xyz
edalat.ir-56163.xyz

# Reference: https://www.virustotal.com/gui/file/c89b52a6bb50b96ad1d1fcb2c335b534731a5691c7a3aae49b7f7afc33624a01/detection

remote-vip.tk

# Reference: https://www.virustotal.com/gui/file/0ad7826c1de74bc0708b381741daa2ac6b87c8a8f3f38e0b4b0a202df19c09f3/detection

test-remote.tk

# Reference: https://www.virustotal.com/gui/ip-address/37.187.132.157/relations
# Reference: https://www.virustotal.com/gui/file/85b4c2bc2f97c10ed94276d5fe166ec5dfa3e8d0d8c7ed237f64e141affb5732/detection

e3blaq.com
ebiagh.com
eblaq.net
iblaqh.com
rat-1342.xyz
sana-ebiaghir.xyz

# Reference: https://www.virustotal.com/gui/ip-address/162.0.217.30/relations
# Reference: https://www.virustotal.com/gui/file/0a688d1f72d322a18a8ad2efc44c0387ea8f138449559dcd667f0a962b65d497/detection

appsanadownhere-ir-tk.xyz
landingissahna-tk.xyz
sabtsanna-tx-com.xyz
sahnayeman-tk.xyz
thisissahna-tk.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1469772282805555206
# Reference: https://www.virustotal.com/gui/ip-address/194.147.142.95/detection
# Reference: https://www.virustotal.com/gui/file/ec337b5cfc3500034c5f42443774bcbb20b9d1666296d82d37c245cdf1f891d2/detection

12gig-net.tk
12usnet.tk
30gig-net.tk
adiiran-ir.cf
adl-eblagh.ga
adl-eblagh.tk
adl-eblaghiran.cf
adl-eblaghiran.ml
adl-irin.cf
adliran.tk
adliran1.tk
adliran2.tk
adlirani.tk
adlisanaa.ga
amo-reza-login.cf
amo-reza-login.tk
bedi24.ga
claud-zax.tk
cloud-fa.tk
customer-01.tk
customer-02.tk
customer-10.tk
cyber-police.gq
cyberpolice.gq
download-maya.tk
eadl-ir.tk
eblagh--sana-ir.tk
eblagh-adiiran-ir.ga
eblagh-adiiran-ir.ml
eblagh-adliran.ga
eblagh-admiraani.tk
eblagh-ed.ml
eblagh-fata-ir.tk
eblagh-iran-sna.cf
eblagh-iran-sna.gq
eblagh-iran-sna.ml
eblagh-iran-sna.tk
eblagh-sanair.gq
eblagh-sena.cf
eblagh021.ga
eblagh1-electronic.cf
eblagh1-electronic.ga
eblagh2-adlirani.tk
eblagh2-electronic.ml
eblaghi-site.ml
eblaghi-site.tk
eblaghirsana.gq
eblaghy-irni-ir.tk
eblaghy-sana-ir.ga
eblaghy-sana-ir.tk
eblaghye-ir.gq
eblaq-fata.gq
eblaq-sana-ir.tk
eblaq021.ml
eblaqie.xyz
host-free.ml
ir-ablagh.ga
ir-pardakete.gq
iran-hamdel-sh.tk
iranu-adleblagh.ml
iranu-adleblaghi.cf
iranu-adleblaghi.ml
iranu-adleblaghi.tk
kospar.cf
kospar.ga
kospar.gq
kospar.ml
mellatbehpardakht-iran.gq
moshtari-2.tk
moshtari-3.tk
moshtari-4.tk
moshtari-5.tk
myket-ir.cf
net12us.tk
pakket-ontvangen.ga
perfect-uc.cf
peygir-iran-ir.cf
peygir-iran-ir.ml
peygir-iran-ir.tk
peygir-sna.tk
peygiri-rs.ml
peygiri.gq
peygirshi.pw
police-eadl-iran.tk
police-iran.ml
poxirn.ga
pygiri-iran.cf
remoteapk.gq
samaneh-sana.tk
sana-app.com
sana-eblagh-iran.cf
sana-eblagh-vjc-ir.cf
sana-eblagh-vjc-ir.ga
sana-eblagh-vjc-ir.ml
sana-eblagh-vjc-ir.tk
sana-eblagh11.cf
sana-eblagh11.ga
sana-eblaghye-ir.cf
sana-iran-eblagheyi.tk
sana-m-ir.cf
sana-peygiri.cf
sana-peygiri.ga
sana-peygiri.gq
sana-peygiri.ml
sana-talanir.tk
sana.tk
sanaa-adliran.tk
sanair-eb.gq
sanairen-wv.cf
sane-adliran.tk
sena-ir.tk
server-fox.tk
server-vip.site
sex-chat.gq
shaparak-12gignet.cf
shaprk-bmb-ir.ml
shaprk-iran-ir.ga
shaprk-iran-ir.ml
shaprk-iran-ir.tk
shaprk-meli.ga
shekayat.gq
shekayt-sana.cf
shekayt-sana.gq
sigheyab.ml
webamo-reza-login.tk
webcloud-fa.tk
webeadl-ir.tk
webeblaqie.xyz
webperfect-uc.cf
websana-m-ir.cf
websana-talanir.tk
webserver-fox.tk
zax-taha.tk
30gig-net.amo-reza-login.cf
eblagh-admiraani.amo-reza-login.cf
eblaghye-ir.customer-10.tk
eblaghye-ir.gq.customer-10.tk
peygirshi.customer-10.tk
sana.adiiran-ir.cf
zax-taha.customer-10.tk

# Reference: https://www.virustotal.com/gui/file/67ccdd6b89a0418a243a3ab188a7977328f623e87f95b7eb8fcb9f41a2f8f581/detection

ebanking-ir.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1475573184011255808
# Reference: https://twitter.com/midnight_comms/status/1475575581685256198
# Reference: https://www.virustotal.com/gui/ip-address/176.9.212.56/relations
# Reference: https://www.virustotal.com/gui/ip-address/194.147.142.235/relations
# Reference: https://www.virustotal.com/gui/file/eab8e5dfcdc8e3c85f1e0796d0773c7a3a51e357a025be734c79ce680b1e6c3e/detection

ebblaghh3.ga
eblagh-electeronik.gq
eblagh-electeronik2.ga
eblagh-electeroniked.gq
eblagh-ir.co
eblagh-irn.ga
eblagh110-sna.tk
eblaghiie-sana.cf
eblaghsana110-ir.tk
eblaghssna-ir.tk
elobagpeygiri.cf
fata-iran.cf
fshekayat.ml
geblage3.ml
goysl.ml
internet-12giig.ml
mellatt-shop.ml
peygiri-eblaghie-sana.tk
pge-shapark.tk
qeblaghe3.ml
remote-best.tk
sghp-melli.tk
shop-melli-iran.tk
shop-melli.ga
shop-melli.tk
shop-mill.ga
shoping-mill.ga
sighe-daff.tk
sighe-shoop.ml

# Reference: https://www.virustotal.com/gui/ip-address/45.155.173.151/relations
# Reference: https://www.virustotal.com/gui/ip-address/51.254.108.216/relations
# Reference: https://www.virustotal.com/gui/file/72379f71aad2a7bed17d4f91ed79c61214cd250a81e59c93b29c80ec0cf11a4f/detection

abl-irann.tk
af-shaparak.tk
app-sana.com
ara-host.xyz
bkihsjvjvdjgdjvdjvvdj.ml
bots-me.ga
bots-me.ml
bpn-shapatak.tk
bqm-shaprk.ml
clashsupercell.tk
cryptobiit.tk
cybertm.ml
daraserver.ir
deinserverhost.xyz
eblagh-pbp.ml
eblagh-pep.ml
eblagh-pep.tk
eblagh-saba-fata.tk
eblagh-sana-fate.tk
eblagh-sena.tk
eblagh-senal.tk
eblah-sana-fata.ml
eblah-sana-fata.tk
eblah-sans-fala.ml
ems-api.ml
eocic.ml
ezshoping.ir
fast-creat.ir
fater313.ir
fgvhbjnkmnbhgvhj.tk
gifti-trus.tk
gihjdgvbj568.tk
gite-tros.tk
godrat.xyz
hamsaryabi-maya.cf
hamsaryabi-maya.tk
hero-server.ir
httpwebsite.cf
iran-suport.tk
jet-host.ir
lemonrobot.ml
lotusgaming.ir
master-host.ml
master-host.xyz
megahosts.ir
metiwz.ir
mmmnbjhxojcjcjv.tk
monster-security.ml
mr-hp.ml
ms-api.ml
mweb.ml
newmizban.site
newmizban.xyz
nexgift.xyz
night-server.ir
panel-server.xyz
payepai-com.tk
phonix-host.xyz
piggiryy-ir1.tk
pocoserver.net
pocoteam.ml
power-server.ir
power-server.tk
qayehbolaghi.xyz
royaleweb.tk
rtxapi.tk
sana-adl-iran.ml
sana-s.ml
satashop.ir
satasource.ir
self-rezno1.tk
sevenmizban.ir
shaparak-ipc.tk
sighe-yab.ml
signorshop.ir
sing-in.gq
smomti.tk
trustwallet2022.cf
turk-mizban.tk
typing-rush.ga
webfgvhbjnkmnbhgvhj.tk
webtrustwallet2022.cf
webzarinpay.cf
x-pardakth-1400.gq
zarin-server.ir
zarinpay.cf
zarinpay.gq

# Reference: https://www.virustotal.com/gui/file/4997f65b0d78456ac881aefe477aa7d47e2ac96756530bdb6ca7b0718429d01b/detection

hamdamyad.gq
litehost.site
host2333.litehost.site

# Reference: https://www.virustotal.com/gui/file/ad30bbd9430472cb06a8be1c6117952036942117717e92800344ff764157d8d9/detection

pasha.alphahosting.ir

# Reference: https://www.virustotal.com/gui/ip-address/116.202.184.197/relations
# Reference: https://www.virustotal.com/gui/ip-address/116.202.190.150/relations
# Reference: https://www.virustotal.com/gui/file/573e36366ed930637cdaf22e8c20da8768cab4fda6c9f2c61885891c57d54872/detection
# Reference: https://www.virustotal.com/gui/file/6c044ba80ba093251ca5f6c4967b514b97a681dca347e830849952c7a6f16037/detection
# Reference: https://www.virustotal.com/gui/file/c2e156051b84bf0db2045ef79c20c7e995e0b22bae8279df9ee8940f13f52587/detection

banck-shaparack-ir.tk
dn-shaparak.ga
dn-shaparak.ml
dn-shaparak.tk
ds-shaparak.ml
ds-shaparak.tk
pablo-service.tk
pes-shaparak.ml
pes-shaparak.tk
senayar.xyz
sep-novinpardakht.tk
sinatarh.tk
sobhanphp.tk
sp-shapark.cf
sp-shapark.ga
sp-shapark.ml
sp-shapark.tk
yt-shapatak.cf
yt-shapatak.gq

# Reference: https://www.virustotal.com/gui/file/5a672adb90ca4730966d2a8ed131b022a152564ff31b5871bd4b1437b2bbc493/detection
# Reference: https://www.virustotal.com/gui/file/b249f7c8b7026668195878e5a68fe74d38d927c5ceb6a339217127a03c68f223/detection

sana-apk-ir.cf
sana-apk-ir.ml

# Reference: https://www.virustotal.com/gui/file/a2b32b8875da1331ddfd2c70ce3f1ba12da1680375dff5c5b37866b30603f581/detection

sana-1adliran.cf

# Reference: https://www.virustotal.com/gui/file/be890a3a42bc79fd0dd7993dd32c564f37a6caaa67bddf886d23a1446d6f5af8/detection

00098.tk
shaadparak.gq
rat.00098.tk

# Reference: https://www.virustotal.com/gui/file/ef138f6ad939e7e3df93c42499265f06b004ce85afa2b9d9345ad7c06d337a1d/detection

client-eblaghe.ml

# Reference: https://www.virustotal.com/gui/file/3d77255a247fb9b22589fad1e92ba11e3a4cb882e893b8e805c23aab41bc8623/detection

sumerr-ir.tk

# Reference: https://www.virustotal.com/gui/file/78ad1d47c9e690a0bf0d5ea87a5622915f78388b915f413440f8989648e3d85f/detection

snowiby.ga

# Reference: https://www.virustotal.com/gui/file/e398a8bd3b98437a3cf52eb0f303ee0d4363ed10341a1a43f30fc835aba7c370/detection
# Reference: https://www.virustotal.com/gui/file/5b4da6081760628f379caa6bb585100382348397533baca1b29a4012d2dd9beb/detection

danalica.ito.gov.ir/dcore/file/js/tracker.php

# Reference: https://www.virustotal.com/gui/file/3b674f320cac7d953fd7026e65bb3e974f43b788b80b3a85c2716389960661b2/detection

shapajak-ir.ml

# Reference: https://www.virustotal.com/gui/file/dc8c42626edf4bf0b9cacc9c21d682ca32e56ed697cb229415ba29416706fc6f/detection

shapatak-ir.ml

# Reference: https://www.virustotal.com/gui/file/fdc37a0e99b53580d83e63a6f49e2c985c0cb2a3996905e7a14af62dc5f493e7/detection

icm-mellat.ga
Icm-mellat.ga

# Reference: https://www.virustotal.com/gui/file/590278726f4ee4c2db9f2afaf8c11e62dc09acd6d1368fdef448e2ec6a244818/detection

b2-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/14e946c66487102454376e04b17cf2d5ad192dd5d7542274ee294f95ca3ab686/detection

b2b-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/b31b6d93080735b25eaff4a66f0b2dc93f6cfd5efe7053199dfb5413090737a1/detection

b5-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/7816eab3b6021633ab79d11beeb6e98f3bc6dbc80aec01f8fd0bab8aaa11679f/detection

b9-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/3fb52b569c110dc3cd552fb37cf6e13f6758104bcb538eaee41cdda101a6452a/detection

bf-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/9cfc5d3cd6d87361ad4b1da6d29f208d03c31794f301caa865146a813274f211/detection

dl-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/9be85cac1a76caf2ca66a7e613e3ec5c40b657ef5701eee60ea74c454f5f722d/detection

shafarack.ga

# Reference: https://www.virustotal.com/gui/file/ebab499e9dbfd737d69cad9bac37e5a68053f55d5ccae53dbf72d9561a7a845d/detection

shaparaks-ir.ga

# Reference: https://www.virustotal.com/gui/file/659b835b73ccb0341c7f97cfc66f959ae1192c0c2a2ae982e29f3cc6aab1079d/detection

shhaporak.cf

# Reference: https://www.virustotal.com/gui/file/35ddb00109601324423de9ed903e1aa81e164b9b62cbcf461fbd58bdfe852b13/detection

shaparuk.ga

# Reference: https://www.virustotal.com/gui/file/f645368d2cdc68a74f927822ef6590f4bf9e4ae0d82909c13a91c5d70505865a/detection

api.texrcc.tk
dp-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/ce0b1c5e5ccb5e540c04b71a314b4c04c370985937c340c9e699052bb652515f/detection

shapkarak-ir.cf

# Reference: https://www.virustotal.com/gui/ip-address/198.144.189.93/relations
# Reference: https://www.virustotal.com/gui/file/fa4524025b56dbccee06126c18b40a6105709b869345899606da20ec26129db5/detection

35yu5u.ml
5r5hjd.gq
airdrop2021.cf
api-error.cf
api-error.ga
baro-pay.tk
bas-pay.ga
basepay.ga
beso-pey.gq
biso-pey.ga
biso-pey.ml
daillytron-cc.ml
diktator-api.tk
diktator-error.tk
diktator.cf
diktator.tk
e45jrwe.ga
ehjet54.gq
error-api.ml
error-diktator.tk
et764ue.cf
kanie-pey.tk
lkhyfytd.ga
ratkiriri.ga
ratkiriri.tk
rykoedt2.gq
rykoedt2.ml
rykoedt2.tk
saro-pay.cf
saro-pay.ga
saro-pay.ml
saro-pay.tk
sero-pay.cf
sero-pay.ga
sero-pay.ml
sero-pey.cf
sero-pey.ga
sero-pey.gq
sfro-pay.ga
sfro-pay.gq
sfro-pay.ml
sfro-pay.tk
sfro-pey.gq
sfro-pey.ml
sfro-pey.tk
snro-pay.cf
snro-pay.ga
snro-pey.cf
sps-shaparak.tk
stro-pay.cf
stro-pay.gq
stro-pay.ml
stro-pay.tk
stro-pey.cf
stro-pey.ga
stro-pey.ml
stro-pey.tk
trusttwallet.cf
uniouswap-com.ml

# Reference: https://twitter.com/malwrhunterteam/status/1473406036497383425
# Reference: https://twitter.com/midnight_comms/status/1473459603073470464
# Reference: https://www.virustotal.com/gui/file/e07d155c663e8deddc0b8843de0acaddad620a15ac7d9e02397807466fb8e58a/detection

http://45.147.230.25
trustwalllet.cf
mta0.moedazmail.com.br

# Reference: https://twitter.com/malwrhunterteam/status/1473663409992445955
# Reference: https://www.virustotal.com/gui/ip-address/45.14.224.32/relations
# Reference: https://www.virustotal.com/gui/file/9efbf303b035bb02cf5c611ed010816c04d7b91916bf9976e694ad2e246abacb/detection

http://212.114.52.201
http://45.147.230.25
abl--irann.ml
abl--irenn.ml
abl--irran.ml
abl--irren.ml
ablag.ga
ablag.tk
ablagie-adliran.tk
addludksd-sds.ml
adiran-eblagh.gq
adiran-eblagh.ml
adiran-eblagh.tk
adl--irann.ml
adl--iren.ml
adl-peygiri.ml
adl-sana-eb.ml
adlilran.xyz
adliran-ebiagh.xyz
adliran-sana.site
adliran-sano.xyz
adliranian.xyz
adlirn-ir.cf
adll--irren.ml
adlliraniian.ml
adlran-sana.ml
adlransna.ml
adrlin-site.ml
aedll.ga
benzin-ir.com
biag-sana.ml
bqm-shaparak-ir.xyz
cena-sait.cf
csynat661.xyz
dadgah-web.cf
digitalvigo.gq
dodgah-sana.cf
ebalgh-rasmi.tk
ebfamli.ml
ebilag.tk
ebilegh.tk
eblagh-adlran.ml
eblagh-ir.com
eblagh-iran.com
eblagh-lran.ml
eblagh-peygiri.ml
eblaghe-iran.xyz
eblaghe-rasmi.cf
eblaghe-site.cf
eblaghee-sana.gq
eblaghiyefta-ir1.ml
eblaghiyefta-ir4.ml
eblaghiyefta-ir5.ml
eblaghye-sena.ml
eblaghye-site.cf
eblagie-adiliran.tk
eblagie-adliran.ml
eblagye-sena.ml
eblaqe-sana.ml
eblegh-iranian.ml
eblfasaeda-ir.ml
eblfpamlei-ir.ml
eblfsaeda-ir.ml
eblgh-sana.gq
ebliagh.tk
ebliegh.tk
ebllaghe-sana.ml
edaiat.com
edalat--wab.cf
edalat--web.cf
edalat-wab.cf
edll-ir.xyz
efatimli.ml
ersal-payam.xyz
faeblaghis.ml
gov-eblagh.cf
gov-eblagh.gq
gov-eblagh.ml
gov-shaprak.ml
hdbshsj44.xyz
ir-adl-iren.ml
iradll.ml
iran-eblagh2.tk
iran-edi.com
iran-hamdel-sh.cf
iran-hamdel-sh.ga
iran-hamdel-sh.ml
iran-khodro.ml
iran-pot.tk
iran-sanaadli.site
iran-tap.gq
iranis.xyz
ireblaghix.xyz
is-sigheq.tk
kuofeesmon.ml
main3erver.xyz
mellat-sheaprkq.tk
morning-housey.xyz
mysaba.tk
new-siqe.gq
newyeargift-paycompany.ml
nlserver.ml
opshpo.tk
pancake-swap.ml
paygiry-sena.ml
paysmentra.ga
pey-dadsetani.ml
pey-eblaghq.ml
pey-eblaghq.tk
pey-eblaghw.cf
pey-eblaghw.gq
pey-eblaghw.ml
pey-eblaghw.tk
peygiri-apk.ml
peygiri-arf.ml
peygiri-dadgostari.ml
peygiri-dci.ml
peygiri-eblagh-new.gq
peygiri-eblaghye.tk
peygiri-itr.ml
peygiri-sak.ml
peygiri-sms.cf
peygiri-ytr.ml
peygiri.cf
peygiri.ga
peygri-ebleg.cf
peygry-sena.ml
proxy-null.cf
pygiri-iran.ga
randomsize-12.ml
sada-adlran.ml
saheb-dar.xyz
saite-sana.ml
saite-sena.ml
saman-sna.cf
saman-sna.ga
saman-sna.gq
saman-sna.ml
saman-sna.tk
samane-eblgh.cf
sana-adilran.ml
sana-ebl.ml
sana-eblagh-iran.cf
sana-eblagi.cf
sana-eblagi.ga
sana-eblagi.gq
sana-eblagi.ml
sana-eblagi.tk
sana-eblgh.tk
sana-eblogi.gq
sana-iran-ir.tk
sana-iran.online
sana-iranis.xyz
sanad-irani.xyz
sanaeblag.tk
sanafatk.ml
sanaire.cf
sanan-iron.ml
sanan-iron.tk
sanar-irani.xyz
sanat-irani.xyz
sanna-larn.ml
saya-gh.ml
sena-adrliins.cf
sena-adrlins.cf
sena-ira1n.tk
sena-iren.cf
sena-peyggri.cf
sena-peygri.cf
sena-sait.cf
sena-sayt.cf
sena-sita.cf
sep-shaparak-pay.cf
seq-shaqarak-ir.xyz
shaapaarak.tk
shaparak-ipc.tk
shaprak-xer.tk
shaprk-bmb-ir.ml
sighe-yab.gq
sighe-yabi.site
sighehalal.ml
siman-ersal.xyz
site-eblaghe.ml
site-sena.ml
snatrt.ml
soltaniiisirr.xyz
starpar.ml
telegram-hakc.ga
test-dargah.tk
thenull.cf
trust-walet.gq
trustswalt.ml
update-shprk.ml
xe-shaprak.tk
zeoxtm.ml
zeoxtm.tk
zr665.xyz
adl-sana-eb.sanan-iron.tk
adlransna.sanan-iron.tk
adlrdan-sana.sanan-iron.tk
eblagh-adlran.sanan-iron.tk
eblaqe-sana.ml.eblaqe-sana.ml
sada-adlran.sanan-iron.tk
sana-eblagi.main3erver.xyz
sana-eblogi.main3erver.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1474789191397556225
# Reference: https://www.virustotal.com/gui/file/19cfb063d8d43bced68cc3ebfef029bb7a39b7d7a8a6b2b3ba2889fa5cef87ed/detection

dxxx.bar
eblagh-2200.xyz
sna-eblagh.com

# Reference: https://www.virustotal.com/gui/file/47f4ff8cfbf3043635217fdd6e47ea11764be66bb78be0203b88357750786ab3/detection
# Reference: https://www.virustotal.com/gui/file/97cdf8035b74e212b6da44f8af75a4540421349c58668e77d6aaedbc714c5639/detection

cxxx.bar

# Reference: https://www.virustotal.com/gui/ip-address/185.61.152.67/relations
# Reference: https://www.virustotal.com/gui/file/8eb3b6ac76d37f5080711260e0ecff4b5f2443795c0181ca4101a5c9bbf08699/detection
# Reference: https://www.virustotal.com/gui/file/82ebe56b08c5d2810b3870e5124df2f23ae49a0a1f1e5f4293cba0d9aa3e43e3/detection

adleiran.xyz
adleran.xyz
adlian.xyz
adliran1.xyz
adliran2.xyz
adlirno.xyz
adliron.xyz
adlliran.xyz
adlor.xyz
adlrn.xyz
cvv2.xyz
divaor.xyz
divar-man.xyz
divar.bond
divar.cfd
divar.fun
divar.monster
divar.store
divarapi.xyz
divarh.xyz
divarm.xyz
divarman.xyz
divarnew.xyz
divaro.xyz
divarp.xyz
divarpay.xyz
divart.xyz
divarz.xyz
divaur.xyz
divear.xyz
ebiaghi.xyz
ebiaghie.xyz
eblagh1.xyz
eblaghiat2.xyz
eblaghiran.xyz
edalati.xyz
edalatiran.xyz
edalaty.xyz
ghazaiat.xyz
mydivar.xyz
oxxx.bar
pishgiri-sana.com
sanagv.site
ssspp.xyz
xxxsx.xyz

# Reference: https://www.virustotal.com/gui/file/8d657d372777b2e89b5e63ced5e1ab82750a190af54fe34a6953de157dec670c/detection

dadsara-1400.xyz
hello-23123.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1473016650689622025

dadsara-1500.xyz

# Reference: https://www.virustotal.com/gui/file/4d41d251c4d1d48bb213fa84c71af4ebe1b1aa026a1628e639638cb9ec29b6a2/detection

sana-miran.tk

# Reference: https://twitter.com/malwrhunterteam/status/1359203738808893450
# Reference: https://www.virustotal.com/gui/file/a6571e7d63b10a2d323cba7f9d603a977e1c66f635ae7e40027a7a4b0a96383f/detection

shaparack-iir.ga

# Reference: https://twitter.com/malwrhunterteam/status/1349342821623459840
# Reference: https://twitter.com/malwrhunterteam/status/1350419534868578304
# Reference: https://twitter.com/bl4ckh0l3z/status/1350492882633895938
# Reference: https://www.virustotal.com/gui/file/a5657d914de9840f20bbc14b431b614dbeca5040148a569489a761a29cfbef46/detection
# Reference: https://www.virustotal.com/gui/file/53ece16de2047212ba1daba6d5dd27c7e63c7b2bcbf34b89ddce1347f590ff0a/detection

bamharmrah.site
bamimelli.xyz
my-bmi-ir.work
nablism.xyz
/melli/otp.php

# Reference: https://twitter.com/malwrhunterteam/status/1350356095831855104
# Reference: https://www.virustotal.com/gui/file/16cbbc5b747ee165de4b66fb2fc47498799bea57c2dbdb7ef09c6dc26954cec4/detection
# Reference: https://www.virustotal.com/gui/file/8416943efd3af3b11c55d9de23f2a2676c59a2154c0bb03b963ba0aab206e514/detection

hanabaf.ga
/.s/6GiG/
/.s/MelliNet/

# Reference: https://www.virustotal.com/gui/file/78c6361435a3f571db32f4a8ad0b3ab9145f7e95e4b5b781e6542b6e3f7f7c00/detection

simail.site

# Reference: https://www.virustotal.com/gui/file/5d18085f999537912f93c828adab681764f59100a0653b43fe9d408acdd9feb7/detection

amirhasani12345.gemmizban.ir

# Reference: https://www.virustotal.com/gui/file/c42e5992e34f3fed0c37ef3f4b543398f89c4c6da8b331af1bba94c7ebded596/detection

iranglobal.eliyahost.ir

# Reference: https://www.virustotal.com/gui/file/fd0226b3e50e29ed3e2b881c35730d48eadac5e78c6e1088c6c342659168a2a8/detection

keygrk.tk
mestrewas.tsohost.ir
/fuLLLLODLLLL/
/fuLLLLODLLLL/index.html

# Reference: https://twitter.com/malwrhunterteam/status/1476681714319691776
# Reference: https://twitter.com/malwrhunterteam/status/1476682317506785281
# Reference: https://www.virustotal.com/gui/file/81ecc67f4d8df2c5118173d1362a154c16c7db3b8e7314c854b2da19544ea0b8/detection
# Reference: https://www.virustotal.com/gui/file/81ecc67f4d8df2c5118173d1362a154c16c7db3b8e7314c854b2da19544ea0b8/detection

aldeliirann.ml
divarir.cf
irdivarr.cf
kospof.ml

# Reference: https://www.virustotal.com/gui/file/a29e5078ee1ada2c8214d093ed8bb7813cec787bbe889c3e5b42fed658a24f87/detection

googleadvercap.cf
oliverdnssop.cf
/XMrLucyX/panel.php

# Reference: https://www.virustotal.com/gui/file/0267316e9b91ceaec617c455bcb4c6d6cd58b2ff3b394d5c8fe1518400774e97/detection

androidglbl.cf
androidsettings.cf

# Reference: https://www.virustotal.com/gui/file/d101b590b67c6d4e0cd4f1702b04328263c06d7690f2dfbc9266236d19bebb71/detection

androidsetting.cf

# Reference: https://www.virustotal.com/gui/file/22ca0aac892096288f8045199a6bf44689d99321de9b4a549b607e4a0ccfbc31/detection

googleupdates.cf

# Reference: https://www.virustotal.com/gui/file/808f0c09e176834a8f3c0750677fbe9f6ec10caab55067cbec5c98dee300e151/detection

googleglobal.cf

# Reference: https://www.virustotal.com/gui/ip-address/216.250.249.242/relations

adliran-eblagh.site
dadsara-fa.ga
eblaghir.site
mothernonsafe.tk

# Reference: https://twitter.com/malwrhunterteam/status/1478083027607687172
# Reference: https://www.virustotal.com/gui/file/7cd1fd4fe8bcf14da32579c5f173b4fb002740d4e8673528efb8d30da7239181/detection

eblagh-sna.site

# Reference: https://twitter.com/malwrhunterteam/status/1478373104372092933
# Reference: https://twitter.com/midnight_comms/status/1478398312378155011
# Reference: https://www.virustotal.com/gui/ip-address/198.54.120.224/relations
# Reference: https://www.virustotal.com/gui/file/826e1a57d0d084138389ce67b8fbb05c7fbfd4620aad59d635914e7b73c20f06/detection

purnhub.com
toprat.site

# Reference: https://twitter.com/malwrhunterteam/status/1478661638559567877
# Reference: https://www.virustotal.com/gui/file/3161cb7aa9038db5fe6954647f96b25dc6a4968d4c500b25d6904a8774caaee6/detection
# Reference: https://www.virustotal.com/gui/ip-address/194.147.142.188/relations

abl-irenn.cf
abl-irenn.lwucqz.arsalan-serve.tk
abl-sanae.tk
abl-sena-ir.cf
abl-sena-ir.lwucqz.arsalan-serve.tk
abl-sena-or.cf
abl-sena-or.lwucqz.arsalan-serve.tk
abllgh-sanae.tk
adl-eblaghiran.gq
adl-online.ga
adl-online.gq
adl-online.ml
adl-samaneh.xyz
adl-samune.xyz
adl-san.com
adl-sanairan.com
adlir4n.ml
adliran-hmarhe.cf
adliran-hmarhe.ga
adliran-hmarhe.gq
adliran-hmarhe.tk
adliran-me.cf
adliran-me.ga
adliran-me.gq
adliran-me.ml
adliran-me.tk
adlleo.ml
ahmadnaderi.ga
ajexfx.arsalan-serve.tk
arbyvc.serverbest.xyz
arsalan-serve.tk
bargh-me.tk
bargh.sanairn-wv.ga
barghh.cf
barghir.soqquz.serverbest.xyz
barghir.tk
barghman.ml
barghmm.cf
barqhiir.cf
bcxhmk.serverbest.xyz
bjuqfn.serverbest.xyz
blaigihir.ga
btsfmr.serverbest.xyz
bzfhkv.serverbest.xyz
bztcjl.arsalan-serve.tk
coinsolutions.cf
dadgostari.online
dadgustari.link
dadgustari.qbjuwa.arsalan-serve.tk
dadsara.xyz
dakhel-rat.tk
dhfplv.arsalan-serve.tk
donyayebad.ga
downloadpey.cf
drtykh.arsalan-serve.tk
duebpa.serverbest.xyz
dxpfcs.arsalan-serve.tk
e-samane.xyz
eadll.ga
eadll.ga.fmhucx.serverbest.xyz
eadllir.fmhucx.serverbest.xyz
eadllir.ga
eadllir.tk
eblageirani.xyz
eblagge-user.cf
eblagh-adln.tk
eblagh-electronic.com
eblagh-ghanoni.ml
eblagh-ghanoni.tk
eblagh-ghanoni.tk.mrlkas.arsalan-serve.tk
eblagh-iran.online
eblagh-ire1.eefqao.arsalan-serve.tk
eblagh-qe.tk
eblagh-si.ml
eblagha.cf
eblaghe-fata-peygiri.cf
eblaghe-fata-peygiri.tk
eblaghe-user.cf
eblagher.cf
eblagher.ml
eblaghi-irani.cf
eblaghi-pigir.ga
eblaghia-ir.cf
eblaghir.ga
eblaghiyefta-ir3.ml
eblaghiyefta-ir3.ml.fmhucx.serverbest.xyz
eblaghl.ml
eblaghsna-ir.ga
eblaghyeh-sana.ga
eblaghyeh-sana.peygir-eblagh.tk
eblaghyeh.cf
eblaghyeh.ga
eblaghyeh.gq
eblaghyeh.peygir-eblagh.tk
eblaghyehm.cf
eblagie-adliran.gq
eblaq-addallat.cf
ebleg-sena.lwucqz.arsalan-serve.tk
ebleg-sena.ml
ebleghi-ir.lwucqz.arsalan-serve.tk
eblg-sna.tk
eblgh-adliran.com
eblgh-new.gq.mrlkas.arsalan-serve.tk
eblghei-adl.gq
eblgie-sana.cf
eblgie-sana.ga
eblgie-sana.gq
eblgie-sana.ml
eblgie-sna.tk
ebliagh.cf
ebliegh.cf
ebliegh.lwucqz.arsalan-serve.tk
ebliyag.cf
ebliyag.lwucqz.arsalan-serve.tk
ebliyagh.lwucqz.arsalan-serve.tk
ebllagh-paygiri.tk
ebllegh-adel.ml
eblqeie.ga
eblqeie.phncgj.serverbest.xyz
eblyagh.cf
eblyagh.lwucqz.arsalan-serve.tk
edalat-adliran.tk
edalateiran.tk
edalateiran.tk.xoagiq.arsalan-serve.tk
edalet-hamrah.ml
eefqao.arsalan-serve.tk
ehayhh.arsalan-serve.tk
eiblaghir.cf
fbi-eblag.ga
free-net.ml
free-net.peygir-eblagh.tk
freefalower.tk
freefalower.wqvzmc.serverbest.xyz
fuckyourmom.cf
gangganggang.cf
ghabz-bargh.tk
ghabz-pardakht.tk
gjoean.arsalan-serve.tk
gtddrh.serverbest.xyz
hamdam-yab-ir.tk
hamrah-adl-ir.ml
hamrah-adl.cf
hamrah-adl.ga
hamrah-adl.gq
hamrah-adl.tk
hamta.ml
hamyari-meli.ml
hamyari-meli.tk
home-sana.cf
hssotn.serverbest.xyz
hxhxhxhxhxhxh.ml
hxhxhxhxhxhxh.qbjuwa.arsalan-serve.tk
ibiloigh-ir.tk
ibioleqh.tk
ibioliqgh.ml
ihsopk.arsalan-serve.tk
iiblaigh-ir.ml
iihvyu.serverbest.xyz
iojwfg.serverbest.xyz
iokpkf.arsalan-serve.tk
iqdrno.arsalan-serve.tk
ir-eblegh.ml
ir-eblegh.tk
ir-edalet-hamrah.ml
ir-samaneh.xyz
ir-sena-ir.cf
ir-sena-site.cf
ir-sena-site.lwucqz.arsalan-serve.tk
ir-sena-web.cf
iranadl.tk
irbargh.soqquz.serverbest.xyz
irbargh.tk
irbariqh.tk
irnsna.cf
irnsna.ga
irnsna.gq
irnsna.ml
iron-srna.kgcdcr.arsalan-serve.tk
jsjjsjsjsjsjssh.cf
jsjjsjsjsjsjssh.qbjuwa.arsalan-serve.tk
jsjsjdjdjjdhxhxhhx.ga
kgcdcr.arsalan-serve.tk
king-movingostar.ml
king-movingostar.tk
kwwiyt.arsalan-serve.tk
lekgcn.arsalan-serve.tk
lesiik.serverbest.xyz
link.peygiri.online
lwucqz.arsalan-serve.tk
mellipay-ir.ml
mellipay-ir.tk
mgetet.arsalan-serve.tk
mgfklq.arsalan-serve.tk
mrlkas.arsalan-serve.tk
myket-ewano.cf
myket-ewano.peygir-eblagh.tk
nlrxin.arsalan-serve.tk
nmyfau.arsalan-serve.tk
nollkj.serverbest.xyz
ns1.ahmadnaderi.ga
ns2.ahmadnaderi.ga
nstrojan-kurd.cf
odidsh.arsalan-serve.tk
oevxkh.arsalan-serve.tk
oozysc.serverbest.xyz
panel-eblaghpolice.gq
peyegiri-shekayat.ml
peygeri.cf
peygir-eblagh.tk
peygir-sana.gq
peygir-sana.peygir-eblagh.tk
peygiri-21w.ml
peygiri-21w.zkgfzu.serverbest.xyz
peygiri-adliran.cf
peygiri-eblaghie.cf
peygiri-online.cf
peygiri-pol.cf
peygiri-pol.qbjuwa.arsalan-serve.tk
peygiri-web.ml
peygiri-web.zkgfzu.serverbest.xyz
peygiri.online
peygiri.qbjuwa.arsalan-serve.tk
peyigri-sena.ml
phncgj.serverbest.xyz
pigiry-iran.eefqao.arsalan-serve.tk
pigiry-iran.tk
ppajqv.serverbest.xyz
pvnmen.serverbest.xyz
pythonnqyery.tk
qahubj.arsalan-serve.tk
qbjuwa.arsalan-serve.tk
qiubly.arsalan-serve.tk
qlwjfd.arsalan-serve.tk
qtgbua.serverbest.xyz
qwznxz.serverbest.xyz
rate.dadgostari.link
ruugno.serverbest.xyz
saana-adliran.ga
saea.cf
saea.qbjuwa.arsalan-serve.tk
saep.ml
saep.qbjuwa.arsalan-serve.tk
saepiran.ml
saepiran.ml.qbjuwa.arsalan-serve.tk
saepiran.qbjuwa.arsalan-serve.tk
saes-peygiri.ml
saes-peygiri.qbjuwa.arsalan-serve.tk
sahmiye-benzin.tk
samanet.xyz
samune.xyz
san-new.cf
sana-ab.gq
sana-adliran-eblaghe.tk
sana-eblaghye.ga
sana-eblaghye.ml
sana-eblaghye.tk
sana-ebliran.com
sana-edalat.com
sana-electronic.com
sana-gh.ml
sana-iblagh.cf
sana-inlaghi.ml
sana-irk.ga
sana-irn.ml
sana-login.com
sana-user.com
sana-web.com
sana-xi.tk
sanaa-ui.ml
sanaa-ui.tk
sanaair.ml
sanaair.tk
sanai-cv.ml
sanair-ab.tk
sanair-ac.ml
sanairn-eb.ga
sanairn-eb.gq
sanairn-vc.ga
sanairn-wc.ml
sanairn-wv.ga
sanairn-wv.ga.sana-irn.ml
sanairn-wv.ml
sanairn.cf
sanairn.ml
scoll-payment.tk
sena-abliron.ml
sena-ablliran.ga
sena-adliran.tk
sena-edlt-ir.cf
sena-iran.tk
sena-paygiri.cf
sena-paygiri.lwucqz.arsalan-serve.tk
sena-wab-ir.ml
sena-web-ir.ml
senair.ml
server.ahmadnaderi.ga
shapaarack-ir.zhyisw.arsalan-serve.tk
sigheiron.tk
sigherir.ml
site-sena-ir.cf
site-sena-ir.lwucqz.arsalan-serve.tk
sna-eblg.gq
sna-eblgh.tk
sna-eblgh.tk.mrlkas.arsalan-serve.tk
sna-py.gq
sna-py.gq.mrlkas.arsalan-serve.tk
sna-py.tk
sna-py.tk.mrlkas.arsalan-serve.tk
snairn-vc.ml
snairn.cf
snairrani.tk
snowyka.ml
snowyta.gq
somone-eadl.ml
somone-ssa.gq
somone-whm.cf
ssena.klyiep.serverbest.xyz
ssena.ml
sv.arsalan-serve.tk
sv.serverbest.xyz
telegram-hakc.tk
terdamsk.tk
trust-wallt.tk
tuncdn.serverbest.xyz
umvyec.serverbest.xyz
vjhpta.arsalan-serve.tk
vndanq.serverbest.xyz
vwnhhx.serverbest.xyz
wallet-on.cf
web-san.com
web-sanam.ga
web-sanam.ml
web-sanam.tk
web-sena-site.cf
webadl-samaneh.xyz
webahmadnaderi.ga
webdownloadpey.cf
webe-samane.xyz
webeadllir.ga
webeblagh-ghanoni.ml
webebleghi-ir.ga
webebliagh.cf
webebliyag.cf
webeblyagh.cf
webfreefalower.tk
webir-sena-site.cf
webir-sena-web.cf
webjsjsjdjdjjdhxhxhhx.ga
webpeygiri-eblaghie.cf
webpeygiri-online.cf
websanair-ab.tk
websena-paygiri.cf
website-sena-ir.cf
websna-eblgh.tk
websna-py.tk
websomone-ssa.gq
websomone-whm.cf
wolfd.tk
wvdkyl.arsalan-serve.tk
xoagiq.arsalan-serve.tk
xoxi.cf
ylndsg.arsalan-serve.tk
yuspke.arsalan-serve.tk
ywrwgk.serverbest.xyz
zhyisw.arsalan-serve.tk

# Reference: https://twitter.com/malwrhunterteam/status/1478687276133715972
# Reference: https://www.virustotal.com/gui/ip-address/212.1.210.150/relations
# Reference: https://www.virustotal.com/gui/file/d3a0855f301f64af98b7f965725444eee7bd73e696ec8b64f272f3bfcc40284b/detection

adllir.ml
adlsana.ml
aedll.ml
eadll.cf
edlsana.ml
ir-adl.ml
irdll.ml
iredl.ml
sadl.ga
sadl.ml
sanaedl.ml
seadl.ga
sunlovelapi.xyz

# Reference: https://www.virustotal.com/gui/file/c9f05ead614ae235efc2688966e0528fcb771f1933bd64a6ebe3de79f2dc5278/detection

sd-shaparak.cf

# Reference: https://www.virustotal.com/gui/ip-address/198.23.172.233/relations

12gbnet.tk
1null-server.xyz
5ashparak.amin-hosting.xyz
5ashparak.tk
adding-pool.ml
addliran-sana.tk
addsal-portal.gq
addsal-portal.ml
adiiran-lr.gq
adiiran-sana.tk
adleey-ir.tk
adleye.ga
adleye.tk
adliran-dadgah.tk
adliran-lr.ga
adliran-lr.gq
adllran-sana.ml
adlye.gq
aghaze-nou.tk
amin-hosting.xyz
apicodsazan.gq
bamk-mellat.tk
bax-2021.cf
bax-2021.gq
bax-2021.ml
bdejehdtsjq.ga
bdejehdtsjq.gq
beh-shaparak.tk
besthobsite.tk
bmq-mellat-ir.ga
bmq-mellat-ir.gq
bmq-mellat-ir.tk
bmq-shapark-ir.tk
botbource.tk
bpc-mellat-ir.ga
bpc-mellat-ir.gq
bpm-sahaparak-ir.tk
bpu-mellat-ir.ml
bpu-mellat-ir.tk
bpz-mellat-ir.cf
bpz-mellat-ir.ml
bqi-shahparak-com.tk
bqi-shaparak-com.tk
buy-check.ga
coin-gold.cf
cqr-shaparak.tk
cup-shaparak.tk
darkteami.tk
ddos-odin.tk
dfq-shaparak.tk
diivare-update.ml
diivare-update.tk
diktator.cf
diva-r.ml
divare-update.tk
eblag-adliran-lr.gq
eblagh-sana-lr.ga
eblagh-sana-lr.ml
eblagh.tk
eblagie-adl.tk
eblq-sana-ir.ml
edliran.ga
edliran.ml
edliran.tk
ejeudgdv.cf
ejeudgdv.tk
foroshapp.net
hamrah-mellat.tk
hash-shaparak.tk
ho-black.cf
ho-black.ga
ho-black.gq
ho-black.ml
ho-black.tk
hub-shaparak.gq
id--bi.tk
instagram-panal.tk
ir-bqi-shahparak-ir.tk
ir-my.cf
ir-my.gq
ir-pardakt.gq
ir-pardakt.ml
ir-shahpalack.ga
ir-shahparaak.ml
ir-shahparaak.tk
ir-shahteck.ml
ir-shahteck.tk
ir-shalpalck.ml
ir-shaqarak.tk
ir-shatarak.ml
ir-starka.ml
ir-starka.tk
ir-starke.ga
ir-starke.gq
ir-starke.tk
ir-starki.tk
iran-film.cf
iran-kish.tk
iri-pay.tk
irmeli-shaparak-ir.tk
irn-shaqarak.tk
irwebdad-ir.cf
ishaparakai.ml
ishaparaki-sp.ml
ji-shaparak.ga
js-12.cf
js-12.ga
js-12.tk
karlean-sad.cf
klkmof.tk
koq-shaparak.ml
kqm-shaqarak.cf
lr-my.cf
lr-my.gq
lr-my.ml
lr-my.tk
max-item.ml
max-net.cf
max-net.gq
max-net.ml
melat-shaparak-pey.tk
melat-shaparakl.tk
melatt-bmi.tk
mellat-bamk.tk
mellat-shahparek-ir.tk
mellatt-shahparak-ir.tk
mellllat-shahparak-ir.tk
milati-ir.ml
my-lr.ga
my-lr.gq
nasa-portal.ml
neeet-std.tk
netarzan1399.ga
netbanmyllat.online
nobitux.tk
okexioir.cf
onilos-shaparak.tk
paigiri-sana.ml
pardakhit-bqm-ir.tk
pardakht-meliat.tk
pardakht-net.tk
paridakht-milat-ir.tk
pay-shapark.gq
pay-sharpak.cf
pay-sharpak.tk
payegiri-lr.cf
payegiri-lr.gq
payegiri-lr.tk
payment-pay.tk
payment-x-pay.gq
payments-page.cf
payments-page.ga
payments-page.ml
payments-page.tk
payments-pay.ml
payments-pay.tk
pip-pay-ir.tk
plass-rat.cf
polbgire-irani.ml
pshaparak.cf
pub-shaparak.cf
pub-shaparak.tk
puller.cf
pullercloud.ml
pullercloud.site
py-shaparak.ga
q-shaparak-xq.tk
rat-maker.tk
rd-divar.cf
rd-divar.ga
rd-divar.ml
rd-divar.tk
rot-shaparak.ml
s-shaparak-com.tk
sabt-sana-lr.cf
sabt-sana-lr.ml
sabt-sana-lr.tk
sahapark-iran.cf
sahparak-ir.gq
sahparak-mellat.ml
sahparak-mellat.tk
sahshsns.xyz
saman-shaparak.cf
sanaql.xyz
saparakk.gq
seop-shperk-iran.tk
sh-aparak.tk
shahparak-asiatek-ir.tk
shahparak-parrdakht-ir.tk
shahparak.ml
shahparek-ir.ga
shahqarek.tk
shalparak.cf
shalparak.tk
shapalaki.tk
shaparack-iir.ga
shaparak-9m.cf
shaparak-bank-iran.ga
shaparak-bank-iran.tk
shaparak-com.cf
shaparak-ir-ir.ml
shaparak-iran-ir.tk
shaparak-irani-com.cf
shaparak-laxlxu.tk
shaparak-my.ml
shaparak-my.tk
shaparak-phg.ml
shaparak-saman.ga
shaparak-saman.ml
shaparaka.ml
shaparakes.tk
shaparakie.ml
shaparakiii.ga
shaparakirr.tk
shaparakk-melat.gq
shaparek-ir.gq
shaparek.ml
shaparek.tk
shapariak-dqm-ir.tk
shapark-iran.tk
shapark-mellat.ga
shapark-mellat.gq
shaparka.ml
shaparkl-melat.cf
shaparkl-saman.ml
shaprak.tk
shaprcak-ir.cf
shaqaraki-asanprdkh-ir.ml
shaqrak.cf
shariparak-melati-ir.tk
sharparak.tk
shatrak.ga
shayparak.ml
shayparak.tk
shegeyab.cf
shegeyab.tk
sheypor-ir.ga
sheypor-ir.tk
shparacck.ml
shparacck.tk
shparack.tk
shprak-melatt.cf
shprak-melatt.tk
shprkkk-pardaz.tk
sm-tn.ga
sm-tn.tk
sms.pardakht-net.tk
so3h.tk
so3r.ml
suxc.tk
teq-shaparak.ga
teq-shaparak.tk
trast-wallet.tk
trast.cf
tru-chent.cf
tru-chent.ml
trust-walet.tk
uk-shaparak.cf
uk-shaparak.ml
update-divar.ml
update-divar.tk
update-divare.ml
updatee-divare.tk
updete-divari.ml
usa-shaparak.tk
vittato-psemjry.tk
vncodest.ml
wdivar.ga
wdivar.tk
webir-shahpalack.ga
webmilati-ir.ml
webparidakht-milat-ir.tk
x-shapwal.tk
xn--rgbga0hz3a.ga
yebaziche.tk

# Reference: https://twitter.com/malwrhunterteam/status/1480624878130810882
# Reference: https://twitter.com/malwrhunterteam/status/1480644526586966016
# Reference: https://twitter.com/midnight_comms/status/1480738242882248708
# Reference: https://twitter.com/midnight_comms/status/1480740266503905283
# Reference: https://www.purpl3f0xsecur1ty.tech/2022/01/10/eblagh-re.html
# Reference: https://www.virustotal.com/gui/file/b18bcac068e5827a139c590d44e093299bcedd852e9a64c17e8cfb7499261793/detection
# Reference: https://www.virustotal.com/gui/file/a594384630a4d9d238e07c76867edffa671c4675cbc9ed80c3ab614c2625480e/detection
# Reference: https://www.virustotal.com/gui/file/cbdd4514247474bee8a4368ad87afb97a0cf29a269efb7faf34c75c7646c63ab/detection
# Reference: https://www.virustotal.com/gui/file/b3dea70665740e1e43b50840a8db95debb19e897be433355a88328f2263c2309/detection
# Reference: https://www.virustotal.com/gui/file/816ffa57b028e9e67bd6aeeedffbbfb8c5e5ed8951689d6b1e47746618caaf70/detection

adel-sana.tk
chat18sal.xyz
mellat-bk.xyz
mytestprojects.xyz
lightzer0.xyz

# Reference: https://www.virustotal.com/gui/file/72379f71aad2a7bed17d4f91ed79c61214cd250a81e59c93b29c80ec0cf11a4f/detection

irangeimcxz.power-server.ir

# Reference: https://www.virustotal.com/gui/file/b7d67e5f5c814139ddadf9c4868d0122ed2e76908ce1cf77730c995b581e0b56/detection

panel.hero-server.ir

# Reference: https://twitter.com/malwrhunterteam/status/1480911620608086023
# Reference: https://www.virustotal.com/gui/ip-address/10.10.34.35/relations
# Reference: https://www.virustotal.com/gui/file/17e75f05bd51550f01d5e9db3809bfed37d9f5786fe92aac6e35144e20132f38/detection
# Reference: https://www.virustotal.com/gui/file/c2835809fa5c68b0e82cb62744225fd38ca99030e3453ad1f5b000710b179075/detection

ebiaq.com
ebiagh.org
eblgh.cf
eblaghe-snair.gq
eblagh-1200.xyz
peigyri-eblagh.gq
sanasamane.tk
sana-gov.xyz
sana-adsiran.tk
sana-adsiran.cf
sana-adlsiran.gq
bankmellat.gq
bmpmellimellat.tk
bpz-mellat-ir.tk
mellat.gq
mellatbanking.info
t3files.ddns.net
akhrineblagh.freehost.io
ehzariye.sana.freehost.io

# Reference: https://www.virustotal.com/gui/file/8937b057671d69b76b7449c58c28a428a56f5633e3a28db72dca63c214c72b89/detection

iranplms.ml

# Reference: https://www.virustotal.com/gui/file/f47f91db56c334c9ea265e4eaec04ca0e15832bf9dbdc33745ccc138042ab92d/detection

tejarat-benk.com

# Reference: https://www.virustotal.com/gui/file/4db5d8a9192c1139782ae237e70c052a7d7ad72f68f47567e389edf0519b2e8d/detection

livechater.tk
rayanertebat.ir

# Reference: https://www.virustotal.com/gui/file/cf6b2942374eb4977622d68b941ac148013777a34b34b2a304bf05ddce6e15c2/detection

iamdrdev.gq

# Reference: https://www.virustotal.com/gui/file/dd31fbd534196254fdcf75737f09f84b21a46d051b164e795e7add1556b2bdf7/detection

sana-adlrinom.tk

# Reference: https://www.virustotal.com/gui/ip-address/185.167.72.20/relations

shaparak.com
shaparak.digital
shaparak.me

# Reference: https://www.virustotal.com/gui/ip-address/5.255.91.5/relations

adaro.ir
adl-iran-ir.cf
adl-iran-ir.ga
adl-iran-ir.gq
adl-iran-ir.ml
adliranir-ir.cf
adliranir-ir.gq
adliranir-ir.ml
adliranir-ir.tk
ahangfollow.com
alireza-safari.ir
alopakhsh.net
amir-site.tk
arashoe.ir
avisaind.com
batweb.ir
berozlearn.ir
bmp-paya.tk
brdbeof.tk
brutish.tk
burnwood.win
buttybot.tk
cardforum.cc
cch-shaprak.cf
cch-shaprak.ga
chr-shaprak.ml
ciph3r.ir
coinexapp.tk
crackers01.com
dezmond.ir
digiatom.ir
diivar-ir.tk
diivarr-ir.cf
diivarr-ir.ga
diivarr-ir.gq
diivarr.gq
diivarrr.cf
diivarrr.ga
diivarrr.gq
diivvarr.ml
diivvarr.tk
dilvar.cf
divar--ir.gq
divar-irr.gq
divarir-ir.cf
divarir-ir.gq
divarir-ir.tk
divarir.gq
divarr-ir.cf
divarr-ir.gq
divarrir.cf
divarrir.ga
divarrir.ml
divarrir.tk
divvar.ga
divvarir.cf
divvarir.gq
divvarir.ml
divvarir.tk
divvarrir.cf
divvarrir.ga
divvarrir.gq
divvarrir.ml
divvarrir.tk
dlban.ir
dluptime.tk
eblagh-dl.cf
eblagh-dl.ga
eblagh-dl.gq
eblagh-dl.ml
eblagh-post.tk
eblagh1-adliran.ga
eblagh1-adliran.ml
eblagh1-adliran.tk
eblagh1.tk
eblaghie-dl.tk
eblaghie-ir.cf
eblaghie-ir.ga
eblaghie-ir.gq
eblaghie-ir.tk
eblaghie.gq
eblaghir.cf
eblaghir.gq
eblaghiran.cf
eblaghiran.ga
eblaghiran.gq
eblaghiran.ml
eblaghiran.tk
eblaghname.cf
eblaghname.ga
eblaghname.gq
eblaqhie-dl.gq
eblaqhie-dl.tk
eblaqhie.ga
eblaqhie.gq
eblaqhie.ml
eblaqhie.tk
eblaqiran.ga
eblaqiran.gq
eblaqiran.ml
eblaqiran.tk
eblaqname.cf
eblaqname.gq
eblaqname.ml
eblghnameh-dl.ml
eblghnameh-dl.tk
eblghnameh.cf
eblghnameh.ga
eblghnameh.gq
eblghnameh.ml
eblghnameh.tk
eblqnameh-dl.tk
eblqnameh.ga
eblqnameh.ml
eblqnameh.tk
ehsanmalekinejad.ir
emenazarang.com
enchemical-hut.ir
farpak.group
fawsi.ir
feizi-derakhshi.ir
followergram.tk
followerteam.ir
gapsec.ir
gatem.ir
gatemsotre.ir
gatemtrade.ir
getfollower.info
giahnooshamani.ir
glass-star.ir
hir-shaprak.tk
hschm.ir
htgranite.com
infiniteam.ir
ir-adliran.cf
ir-adliran.ga
ir-adliran.gq
ir-adliran.ml
ir-adliran.tk
ir-divar-ir.tk
ir-eblaq.cf
ir-eblaq.ga
ir-eblaq.ml
ir-eblaq.tk
ir-shahparak.cf
ir-shahparak.gq
iradliran-ir.ga
iradliran-ir.gq
iran-com.tk
iran-vip.ml
iranadlir.gq
iranadlir.ml
iranadlir.tk
irantse.ir
irdiivar.ga
irdiivar.gq
irdiivar.ml
irdiivar.tk
irdivar-ir.ml
irdivarr.tk
irdivvarr.ga
irdivvarr.ml
irdivvarr.tk
irpay.ga
irpay.gq
irpay.ml
irsana-ir.cf
irsana-ir.ga
irsana-ir.ml
irsana-ir.tk
ithirteen.ir
jazabam.com
jor-pa.ir
ke-shaprak.ml
larakala.ir
ler-shapark.ga
line-bot.xyz
lnglounge.ir
marlikdigital.ir
masteraxe.ir
matrixgram.com
mersichat.ir
milvpn.xyz
mjkhajeh.com
mohgivebot.tk
multivpn.xyz
my-rat.tk
mysutsujs.tk
n1vpn.xyz
net-covid-ir.tk
net-pool.ir
newodksj.tk
niracloud.ir
norouzi80.tk
norouzi81.info
norouzi81.tk
novincrop.ir
null-net-work.tk
otom.ir
pandatem.ir
persianpay.cf
power-service.cf
propay.cyou
pubgfrostfestival.ml
pythoniha.ir
pythoniha1.ir
rafa-tech.ir
ragram.ir
rayainst.com
rayainst.ir
revengine3r.ir
rlt-shaprak.gq
rubixmovie.com
rubixmovie.top
sabbas.ir
sada-shprakmelat.cf
san-esis.cf
san-esis.ml
sana-samaneh.ga
sana-samaneh.ml
shahprk.gq
shaparak-js.tk
shapra-kvnd.ml
shaprak-pop.gq
shaprak-set.cf
shaprak-set.ml
shaprakddj.cf
sheyp-oor.tk
shprakserf.ga
shprakserf.gq
shprakserf.ml
shprakserf.tk
shprakwer.ml
soft-support.tk
storm-store.ir
stylestreet.ir
tajrishpharma.com
tebetasviri.com
the-brutish.tk
thebrutish.tk
themaqs.ir
uplmaloo.tk
uplmalooo.tk
uploaduqjdqm.tk
uplymalo.tk
vastudesign.ir
venostehranior.tk
whatsappx.tk
x200.ir
xgts.ir
xnice.gq
yaldaa.xyz
ybrutish.tk
yeee.ir
yz-shaprak.tk
zarnegariran.ir

# Reference: https://www.virustotal.com/gui/file/cd3dc35a4cec05b5e3f66ae2a80a3e6bdea8ad952ed3a584927696107335f3f3/detection

iamdrdev.tk
eblaaghi-sanaa.cf

# Reference: https://twitter.com/malwrhunterteam/status/1481233824092770306
# Reference: https://twitter.com/midnight_comms/status/1481248207229181953
# Reference: https://www.virustotal.com/gui/ip-address/217.160.0.241/relations
# Reference: https://www.virustotal.com/gui/file/7cfec4dfc08443c7b1a14317625e75e2f264e64bcb22cc02ac804def54228a29/detection

samaneir-e.biz
samaneir-e.com
samaneir-e.info
samaneirn.online

# Reference: https://twitter.com/malwrhunterteam/status/1481237183981887490
# Reference: https://twitter.com/midnight_comms/status/1481245440066473988
# Reference: https://www.virustotal.com/gui/file/a25ef8f93114728b224f311e0cfcca60513e607d83672302e4edd7fb67439606/detection

ir-65163.xyz
edalat.ir-65163.xyz

# Reference: https://www.virustotal.com/gui/ip-address/5.255.91.17/relations

asiapay.cf
divar-1.cf
divarr.ml
divarr1.ml
divarsite.ml
divvar.ga
dlvar.ml
seppai.ga
seppai.tk
seppay.ml
shahpay.ga
shahprk.gq
sitedivar.ga

# Reference: https://www.virustotal.com/gui/ip-address/198.54.114.185/relations

abl-sena.gq
abl-sena.ml
abl-sena.tk
ablghee-sana.ml
ablghee-sana.tk
api-reet.tk
ebla-ghy.ml
eblagh-ir.sbs
eblao-sana.ml
samane-eblaghee.gq
samane-eblaghee.ml
samane-sanaa.tk
sana.eblagh.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1481723667037970435
# Reference: https://twitter.com/midnight_comms/status/1481729062385160202
# Reference: https://www.virustotal.com/gui/ip-address/68.65.122.100/relations
# Reference: https://www.virustotal.com/gui/file/2e4547983ed0074e46241828d09ff310122285d341c5a7705d2ebb8edbb86078/detection

adlir-eblog.ml
adlir-eblog.tk
eblagh-adlir.tk
eblagh-adliran.tk
eblagh-eblogin.tk
eblegh-ir.tk
eblogin-adlir.tk
ebv-eblagh.xyz
ebv-eblaghir.ml
ebveblagh.gq
ebveblagh.ml
ebveblagh.tk
mamaloch.xyz
trustupdatewallet.net

# Reference: https://twitter.com/malwrhunterteam/status/1431198354730622977
# Reference: https://twitter.com/bl4ckh0l3z/status/1431218876642103297
# Reference: https://www.virustotal.com/gui/file/21d7fdf3581c65a20e9199d6470de8c0f6776e86827c5c5085175fe52e2eca1e/detection

caco333.ca
vinsa.fun

# Reference: https://twitter.com/malwrhunterteam/status/1346035452894179331
# Reference: https://twitter.com/bl4ckh0l3z/status/1348324827510267909
# Reference: https://www.virustotal.com/gui/domain/karloskey.ml/relations
# Reference: https://www.virustotal.com/gui/file/5253ded3b530bbcde7f9bd8493c9d76a045670308faf15ad28b1e8c635ff9432/detection
# Reference: https://www.virustotal.com/gui/file/92e4013646e60da4c4debd6b975277acf2784352024be43ea5918abdffb0d623/detection

http://37.120.146.4
karloskey.ml
pasargaad.xyz

# Reference: https://www.virustotal.com/gui/file/45ff19a4717c556ebcb83ecff4fb09bc00bf13911f861c3a9d83e0c5462eca6b/detection
# Reference: https://www.virustotal.com/gui/file/c0d6aa4233c70e4f13d01ba858b30e27b439aaf20587de11c3705344f63aac8d/detection

uaioey.ga

# Reference: https://www.virustotal.com/gui/ip-address/162.55.9.240/relations
# Reference: https://www.virustotal.com/gui/file/440421aef5210bb1616a06e19fb6d101718ec37041fa230248fda03e930be5ab/detection

eblagh-adliran.cf
edalat.cf
edalat.ml
myrats.fun
myratsdomain.cf
myratsdomain.tk

# Reference: https://www.virustotal.com/gui/ip-address/172.67.152.80/relations

eblagh-adliran.ml
eblagh-adliran.tk

# Reference: https://twitter.com/malwrhunterteam/status/1481729387485609984
# Reference: https://twitter.com/midnight_comms/status/1481756859681943561
# Reference: https://www.virustotal.com/gui/ip-address/185.178.208.152/relations
# Reference: https://www.virustotal.com/gui/file/82d8fdcc5d3249134c0605f00d1f8272642eed3590a30a3a906047fcf301f4e9/detection

eadl-eblagq.ga
ir-plc.ga

# Reference: https://www.virustotal.com/gui/file/b9478c1dc6ea951a6c13bf9e54ccee3a06fa84fa79ad4dd1d15690beac40abea/detection

cz-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/2e8aa1230aebf32c537c3aaa17ac9de639889fc3473fbd3f9b44c6c5e05fea8e/detection

filmsexyirmovie.tk
zrin-pal.tk

# Reference: https://www.virustotal.com/gui/file/5f5804a687951ea4b7e73ab6fd00e0ea9c4894ba407b9018c0d3c3ff6442b3a3/detection

shaaperak-ir.ga

# Reference: https://www.virustotal.com/gui/file/8c69c05dd80b478f5fc43ba05f3ad8ded8d65454b7a6a87f670e32f34f7ecfe2/detection

cew-shaparak-ir.gq
pew-shaparak-ir.gq

# Reference: https://twitter.com/malwrhunterteam/status/1481944239403634691
# Reference: https://www.virustotal.com/gui/ip-address/185.61.152.66/relations
# Reference: https://www.virustotal.com/gui/file/9d8acbc2bfe9452e7db54c71369c7cfae04b61142fa7962238eb28d7aa97f217/detection

divarbuy.xyz
sxxx.bar
xnxnn.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1482466875065966594
# Reference: https://www.virustotal.com/gui/ip-address/142.44.160.158/relations
# Reference: https://www.virustotal.com/gui/file/736ac0bc2a85190869a24f0d56007c5b1be9f0820e5fc304f906aca5d0459780/detection
# Reference: https://www.virustotal.com/gui/file/62ae9a81c912b94c3ca8b65125e49efd028ebfd2feaa8f1422f7d9447c3f7040/detection

a-poshte.tk
admintak.tk
amirhsvip.ir
amp-ar.tk
armin-esmaeili.tk
eblagh-org.tk
eblogh-iran.tk
eblaghe-site.tk
kia000.tk
requd1.tk
requd4.tk
smartindiapanel.xyz
smartpanel.tk

# Reference: https://www.virustotal.com/gui/file/a913d26e095e02e52dce2dff9eafa042261df6a730ca747df23f75be7df3d80a/detection

bg-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/d42355c02586b032393444e567ac1b2dbdf48b73c38dab6e8ec2f6b185cc14e0/detection

shasparak-ir.cf

# Reference: https://www.virustotal.com/gui/file/178bfae17d66560490592a3e3ba6bd67ab05f976038e9049cb2364f58a48569a/detection

di-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/8ebc434ec9ed5703e893ee63150b2c3a6a5e811d069c1e19f603133936064966/detection

shasparak-ir.cf

# Reference: https://www.virustotal.com/gui/file/919700180d08ece9c46a3a8531664e76d4539ccbac3b96d699ab0cab043ec396/detection

dt-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/0c187d980667b3b1642d13cf395ae4798f4c5461ded0fe624a7e08bdba66e1cf/detection

shaaperak-ir.cf

# Reference: https://www.virustotal.com/gui/file/a03ecf5218a69d3c313532ae9ee84bf2520bc3262ff4c7cb19181f288ead8f15/detection

czvt.cf

# Reference: https://www.virustotal.com/gui/file/cfa0391d031ffec6f2a1b2808b789d42e2aace7d90a82bb2cafb7ab46f6be202/detection

shapkarak-ir.ga

# Reference: https://www.virustotal.com/gui/file/5d9a8cc9ca2890047700583da3fe8b1172286752f0444ad73682b2badad0547f/detection

bk-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/35c08897bee529714430ac094cb83695084963881e35022c8ddd4aebca14c136/detection

cy-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/5179c1b24e5c7d3ede1a0aa6708df5f4fb8a1297fe1d4988a8fda432110bd83d/detection

dg-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/de34355f891af505bfbb63b191f373d6e2b850823908e3ed86a0db971f450498/detection

sfro-pey.cf

# Reference: https://www.virustotal.com/gui/file/e3bce2aa78ae1b5849b6978abfb8d44f5539ef6bc1fdd09a0d1060ddf17b8ed8/detection

dj-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/19b94b57d6e2c20597c9e93fe464a0310f44542a668dd69dc33691eb24cf6183/detection

da-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/5d0e7a6c1a02af94217b8552b712d2afecb69bfe7cc8203104b6fdfd65e8edc6/detection

dt-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/6b0809a196881a51a5d792ed91a1bb658f4af3698ac8d24d99cbcde78d780c28/detection

shasparak.cf

# Reference: https://www.virustotal.com/gui/file/473137809b0d1e05bb24d649d7ca9693b3af596fc6115b464c2e9b30ad9191df/detection

dv-shaparak.tk
dw-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/40b27eb992c0e2fd2ec66882a2d582296b803469ae20946ebd2939a005be8aaa/detection

shhaperak.cf

# Reference: https://www.virustotal.com/gui/file/5605ef33136d7248f895a0f4b83ba5b611392d86913ce07a001a0c4b8e53d8a5/detection

shasparak-ir.cf

# Reference: https://www.virustotal.com/gui/file/1409a66522d146c6e7b7153598b946cf4e1cd92ac4f5419cace904f1dbd850fc/detection

shaaperak-ir.cf

# Reference: https://www.virustotal.com/gui/file/a50b49a6f34473b7a18d3ceadbbf9070e4e6ac4f7fc4039d324f71db8a99d79d/detection

shhaparak-ir.cf

# Reference: https://www.virustotal.com/gui/file/38352988ee4732257835b50201e9d6b14e88db7dd0ee78708b7cd2f9459f240e/detection

cx-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/3a787c88f2a40c3749a33861a01190eb1d89b9f1f4b16f19f026532df2554385/detection

siant.site

# Reference: https://www.virustotal.com/gui/file/dcce573b59bbf91cd64a84b0d194880d9de072745121e5b73a75c56624bf8f13/detection

shaptarack.ga

# Reference: https://www.virustotal.com/gui/file/b00ce4b86e21740275db14aa8bd475ada3d84558dbedaba3312fbe212980b1b5/detection

shaaparalk.ga

# Reference: https://www.virustotal.com/gui/file/f9d8d5f9d609e641d3b8c5fed28001af986d9b766ebc1809f231a99a0550f046/detection

fp-shaparak.tk

# Reference: https://www.virustotal.com/gui/file/5e2e6e10d2cd01b6d116c280f4256be6a5e21ec07c96d411bb8510aaa1fdba30/detection

irblaghi-ir.ga
nlsrv.xyz
arsam.nlsrv.xyz

# Reference: https://www.virustotal.com/gui/ip-address/94.130.122.187/relations
# Reference: https://www.virustotal.com/gui/file/7b130bde0c05edfa28761f3420016c7cf76c4c9af0e868e2e7d5681058f5b2e7/detection

cana-eblaghi.ml
divar-ad.tk
divar-new.tk
e-payne.gq
e-payne.ml
ir-covid19.tk
ir-ista200.cf
ir-ista200.tk
k-paynes.cf
k-paynes.ga
pom-shq.tk
royal-amlak.ir
sana-1400-ablag.tk
shaparak-pay-org.gq
shaparal.cf
sysbsgajwh.ml
divar-new.liizradvip.xyz
shaparal.domain-com.tk

# Reference: https://www.virustotal.com/gui/file/0d3ebceaa5dd15e3b38f2a9b294caea063703d53b6ed6441b396e6f0695e267f/detection

sana-eblaghi.xyz

# Reference: https://www.virustotal.com/gui/file/0d3ebceaa5dd15e3b38f2a9b294caea063703d53b6ed6441b396e6f0695e267f/detection

eblagh-qhz.cf
sana-eblaghi.xyz

# Reference: https://www.virustotal.com/gui/ip-address/45.14.224.12/relations

firan-siteroi.ml
free-base-connection.tk
ggl-pamel.ml
iraninaijwe.tk
top-eblaghieiran.ml

# Reference: https://www.virustotal.com/gui/file/eb7fbfa9800c5f0e8ff21d66b5078aa944fda29d4f3ea7c27fd67085741dbba4/detection

free-base-connection.tk

# Reference: https://twitter.com/malwrhunterteam/status/1483188960910319616
# Reference: https://twitter.com/midnight_comms/status/1483513891745419270
# Reference: https://www.virustotal.com/gui/file/3870c14cfa20a750ef3bc66fccf52c190603917d0956f833f96af99cfec3b020/detection

adl-sana-w.tk

# Reference: https://www.virustotal.com/gui/file/bca218c8d6ecdb9d6014284384518efafe16df22afaa760bbfc467447eeb27be/detection

sena-peigri-ir.cf

# Reference: https://www.virustotal.com/gui/file/d3bbe121638fa2460b24a96dbfabaa69c5b98a81c2171c835301e20e22e796cd/detection

samaneh8.com

# Reference: https://www.virustotal.com/gui/file/4ed80b06744e69d00017cf3dd616b1d2f223ba1ef463e672546477318afcd93a/detection

peygirl-sna.cf

# Reference: https://www.virustotal.com/gui/file/d76644c48b65751dfc212b2aa3e834a07944dc0a961f3f6e09dd683f63552838/detection

lreadl.site

# Reference: https://twitter.com/malwrhunterteam/status/1483919535661101061
# Reference: https://twitter.com/midnight_comms/status/1484201646863310851
# Reference: https://www.virustotal.com/gui/file/2d45fd78e6e4ab488b4280e1f8536474c6084fa9e315254e94a437d1a07202a0/detection

ceblaghxi-sanki.xyz
sna-elc.com
sna-elc.online
/ahmagh/install.php
/ahmagh/up.php
/ahmagh/ups.php

# Reference: https://www.virustotal.com/gui/file/b4acd7267da3506e139d7d349e65bbf0c0cc2d2e892e481a88f911608da7f113/detection

drgusk.tk
ir-reti.ml
api.ir-reti.ml

# Reference: https://www.virustotal.com/gui/ip-address/195.20.55.174/relations
# Reference: https://www.virustotal.com/gui/ip-address/198.12.86.54/relations
# Reference: https://www.virustotal.com/gui/file/d85376ceff770d5a23c8b08f62d3b825d040b707eadc6a11377c7c6ea0174722/detection
# Reference: https://www.virustotal.com/gui/file/aec23695695495353161a97c02770d5e9f3537df7cfc54e827537f0683349eb0/detection

irn-shaparak-ir.tk
pardakht-eblagh.tk
qaqaqa0123.cf
rep-shaparak-ir.cf
shaparakpayer.cf
shotrak.ml
vabera000.ml

# Reference: https://www.virustotal.com/gui/file/d7f331476a69a8ea74d405048b2bbe7500a76f14521c96b85e9a10fde064cb2d/detection

powker.myfr.xyz

# Reference: https://www.virustotal.com/gui/file/c326cef84e4a388639f315097fae2f21533e211fba6b1afd04cec2f6ddea9222/detection

vafersa58t.cf

# Reference: https://www.virustotal.com/gui/file/5c30199bdcaf529ea389b75562b3a89a564cc80f5641481fb61b2640d4ed2900/detection

gaaaa48fw.ga

# Reference: https://www.virustotal.com/gui/file/5095571bb6bfeaab5e5d819628d1e5f70ada7b732a87195973fb41158994c780/detection

gaa558ww.tk

# Reference: https://www.virustotal.com/gui/file/da7874d18b97893b97e870799659cf7b6ee0e29782af5c43b163e72fb3398f44/detection

ir-kosarbank.cf

# Reference: https://www.virustotal.com/gui/file/f85cfec57ee75ddfa3126f9366e95ad362989d7b869871c73bce9fad62261234/detection

ir-kosarbank.ml

# Reference: https://www.virustotal.com/gui/file/3ec09fa71f9abc12e42a5b1a6e266694e46643ac4d05d255946b2c2c131c885f/detection

fh8hwd8fa.cf

# Reference: https://www.virustotal.com/gui/file/712a66a36e7438923100128bcebab18125c591055c44bd4f3552311bc5a2f63e/detection

szm-shaparak.ml

# Reference: https://www.virustotal.com/gui/file/a57d3a3cb8ea31ea48675538613301eca8a3c49ab972426a0c6e50bd5e9e3d35/detection

ah-shaparak.cf

# Reference: https://www.virustotal.com/gui/file/ec65535740ba0f83eee88ff5f7a0dbeb875369949a42ea864cda79489f30cda9/detection

bpm-ir.ml

# Reference: https://www.virustotal.com/gui/file/4a8e4f52776de56a59f51d1531d952189631f5ae183c9de61531d4f0164d12da/detection

saeena-eblghiy-ir.ml

# Reference: https://www.virustotal.com/gui/file/38cfb100b68f63bbaf6e0c1c9976308b272e6101f29dacc35f3d6789b284d499/detection

pqm-shaparak-portal.ml

# Reference: https://www.virustotal.com/gui/ip-address/95.181.161.40/relations

account-tamin-ejtemai-ir.tk
adiley-iran.ml
al-saparak.cf
al-saparak.gq
application-eblagh.tk
asanprdaket1400.ml
asu-shaparak.ga
bmp-paya.cf
bmp-paya.ga
bmp-paya.ml
bot-learn.ir
eblagh-iranian.ga
epzy-shaparak.cf
epzy-shaparak.tk
fa-sana.ml
free-ir.tk
ir-asanpay.tk
ir-bmp-sepah.ml
ir-mellat.ga
ir-pardakht.tk
iranapps.ml
ireblaghie.ga
mellatbnk.ml
mtniirancell.ml
pgm-iranpardakht.ml
portal-adsl.tk
postbank.cf
postbank.ga
pqm-portal-shaparak.ml
pqm-shaprak.ga
sana-fa.ml
shaparak-mi-ir.cf
shaparak-rtg.tk
shaparak-services.tk
szm-shaparak.tk

# Reference: https://www.virustotal.com/gui/ip-address/198.12.85.88/relations

2030s.gq
30ia-pay.ml
ad-ir.ga
addliiran.tk
adiley-iran.ml
adiley-iran1.ml
adili.ga
adleey-ir.ml
adleey-lr.gq
adley-ir.ga
adleye-ir.ga
adleye.gq
adleye.ml
adli.ga
adliey-iran.ml
adlir-sna.ml
adliran-eblagh.ml
adlirsana-ir.tk
adlye.cf
aeeeeershaparak.tk
ahblagnew.tk
airdrop-trustwaleet.tk
americanussa.tk
apk-ebl.tk
apk-eblagh.tk
apk-pardakht.tk
asanprdaket1400.ml
bedi24.gq
best-price.ml
boofanoo-crm.tech
bpi-shahparek.tk
bullertakpar-com.ga
bullertakpar-com.ml
crm-sarema.tk
da-ga-h.tk
dad-g-a-h.ga
dad-gaa-h.tk
dad-gaa-hi.ga
dad-ir.ga
dad-saana.tk
dadd-yar.tk
daddgahi.ga
daddgahi.tk
dadga-sasna.tk
dadgaaahi.tk
dadgaahh.tk
dadgah.tk
dadsare.tk
divara.xyz
djejjdjdjs.gq
drgpec.tk
duodigital.ml
duodigital.tk
ebblagi2.ml
ebblagi4.ml
ebbllaq-sana-ir.ga
ebiaghe-snai.tk
ebl-ag1-ir.tk
ebl-eblaghey-ir.tk
ebl-ir.ml
ebl-ir.tk
eblag-adliran-ir.ga
eblag-adliran-lr.cf
eblag-adliran-lr.ga
eblag-adliran-lr.ml
eblag-adliran-lr.tk
eblageh-iran.tk
eblagh-adlir.cf
eblagh-adlir.tk
eblagh-iran.ga
eblagh-iran.gq
eblagh-iran.tk
eblagh-irani.cf
eblagh-irani.ga
eblagh-irani.ml
eblagh-irani.tk
eblagh-panel.cf
eblagh-panel.ml
eblagh-panel.tk
eblagh-s.ga
eblagh-s.ml
eblagh-s.tk
eblagh-sana-iran.gq
eblagh-sana-iran.ml
eblagh-sana-iran.tk
eblaghe-snai.tk
eblagheye.tk
eblaghi-sana.ml
eblaghir-sana.tk
eblaghq-ir.tk
eblaghs.tk
eblaghsana-ir.ml
eblaghsana-ir.tk
eblaghye-adliran.tk
eblaghye.gq
eblagie-sana-iranin.ga
eblaq-ada.ga
eblaq11.ga
eblaq12.ga
eblaq19.ga
eblaq856.ga
eblaqie-19-ir.ga
eblaqq-19.ga
eblaqqye.ga
eblghfa.ga
ebllage-iran.ga
ebllaq-ad.ga
ebllaqi-ir.ga
ebllaqsheeka-ir.tk
ebllaqwo.ga
eblogh-sans.cf
eblogh-sans.ga
ebloghs-ir.tk
eblogi1.tk
ee-melat-pay.cf
eghbaghi.ml
eiblag-ir.tk
eiblogh-sana.tk
elaq-ir.ga
elbaghsnas.tk
geeyyabii.tk
hamjens.tk
hostmmll.tk
iablaghs-san.tk
iamgay.gq
ieblaghi-ir.tk
iebloghs.tk
ir-dad-ir.ga
ir-eblgh.tk
ir-ieblagh.tk
ir-pardaket.ml
iran-addl-ir.ga
iran-adli-ir.ga
iran-dad-ga.tk
iran-dadga-ir.ga
iran-ebblaq.ga
iran-ebbllaq.ga
iran-eblage.ga
iran-eblagh-f.cf
iran-eblagh-f.ga
iran-eblagh-f.ml
iran-eblagh-f.tk
iran-eblaq-ir.ga
iran-eblaqi.ga
iran-ebllaq.ga
iran-jorm-ir.ga
iran-saana-ir.ga
iranad.ga
iranadilatil.ga
iranadldi.tk
iranadliera.ga
iranadlile-ir.ga
iraneblaq19.ga
iranirsana-ir.ga
iransana-ir.ga
iransanair-ir.ga
iransanat.tk
iranshekaya.tk
iranshekyaat.ga
iranwebir.ga
ireblaghie.cf
ireblaghie.ml
irsanairan-ir.ga
jorm-ir-ga.ga
kos-nne-fata.gq
livesxs-ir.ml
malletttrg.ml
malllet-llk.cf
melat-pay.tk
nazeem-vscode.ml
nazeem-vscode.tk
pardakht-eblaghey-ir.tk
paresh.gq
pay-eblagh-ir.tk
pay-eblaghey-ir.tk
pay-red.tk
pay-sjkrkrak.tk
pay-sjpkowak.tk
pay-sjpkrak.tk
pay2-ebyl.tk
payelza.ml
pep-shprak-ir.tk
pes-eblagh-ir.tk
pes-eblaghey-ir.tk
pes-shaparack.tk
pes-shiparek.tk
pey-shahparacki.gq
peygiri-adress.xyz
peygiri-eblagh.tk
peyman-ir.ga
qwi-shahparek-ir.gq
qwi-shahparek-ir.ml
qwi-shahparek-ir.tk
qwqwqwqwe5yuuiiu.ml
rubika-freenet.tk
saaana-dadga.tk
sad-behpardakht.ga
sad-behpardakht.ml
sad-behpardakht.tk
sad-shaparak.cf
samannesaana.tk
sana-airdroni.ga
sana-airdroni.ml
sana-alirdran.cf
sana-alirdran.tk
sana-alirdran.xyz
sana-c.tk
sana-eblaq-ir.ga
sana-i.tk
sana-ie.cf
sana-ieblagh.tk
sana-iranv.cf
sana-irn.tk
sana-irran-ir.ga
sana-n.cf
sanaeblagh-ir.tk
sanair-ir.ml
sanairana-ir.ga
sanaji-shapak.ga
sanaji-shapak.gq
sanaji-shapak.ml
sep-divar.tk
sep-eblagh-ir.tk
sep-ebyl.tk
sep-shekayat.tk
sep1-ebyli.tk
shapaark.tk
shaparak-pw.tk
shapark-tg.tk
shaprrk-zri.ml
sheekayyatt.tk
sheekkayyatt.tk
shekaayyaat.tk
shirazey.cf
shirazeyhost.tk
shpk-sanair.cf
shpk-sanair.ga
shpk-sanair.gq
shpk-sanair.tk
sigeh.tk
sjjwudidisieis.tk
sna-adl.cf
sna-eblaq.ml
soft-ezy.tk
sop-shekayat.tk
syy-pay.gq
trust-walettt.tk
trust.pay-red.tk
trustwallet-price.ml
trustweliat.ml
trustweliat.tk
utctm.tk
utyagram.ga
utyagram.ml
zir-pay.cf

# Reference: https://www.virustotal.com/gui/file/6556d68b85d691132db832318389431d46cc3fe3434c4fb438d2e8dd5beefda0/detection

robatsazking.pikohost.ir

# Reference: https://www.virustotal.com/gui/file/f5e2d1dab18a333aad29646337743fb5f039733993f08224cb1084e6ff205dea/detection

shaparak-internet-bank.cf

# Reference: https://www.virustotal.com/gui/file/d12cb0187e09ef35fc6f2acd5904c9ea4a6a2376d72408b0230cf71b042426b7/detection

meli-ir.xyz

# Reference: https://www.virustotal.com/gui/file/55ff02dd1388ccc6b471cf645a5cafef31c02b34316714e3e8ac34babc638abc/detection

yoindomin-irs.ga

# Reference: https://www.virustotal.com/gui/file/2fd928d640c4bf36fffc94ea7eca8de3a2a93ec074883a474409b49bb64a294d/detection

yoindomin-irs.gq

# Reference: https://www.virustotal.com/gui/ip-address/157.90.16.114/relations

ad-shparake-ir.cf
bci-shaparak.ml
bci-shaparak.tk
behpardakh-ir.ga
bmp-divvar.tk
dikak.ir
eblagh-electronic.tk
followerirani.tk
ir-mile.ml
iran-meiatt.cf
iran-meiatt.ga
iran-meiatt.gq
irmeli-shaparak-ir.tk
meiat-shaparak.ga
mellat-in.xyz
memberirani.tk
milat-ir-iran.tk
pardakht-bank-ir.tk
prdakht-melat-ir.tk
pyiran-shaparak.tk
sahparak-meliat.tk
shahparek-ir.ml
shailrk-lir.ml
shalioprk-ir.tk
shaliparik-ir.tk
shaolpark-bqm-milir.ml
shaparak-1nternet.ga
shaparak-1nternet.ml
shaparak-bamk-iran.ml
shaparak-bamk-iran.tk
shaparak-bmc.ga
shaparak-bmc.gq
shaparak-internet-bank.ga
shaparak-internet-bank.ml
shaparak-ir-ir.tk
shaparak-n.cf
shaparak-n.gq
shaparak-n.ml
shaparak-n.tk
shaparak-script.ga
shaparak-script.ml
shaparlik-irani.gq
shaprrak-melati-ir.ml
x-number.tk
x-shapwal.ga
yoindomin-irs.cf
yoindomin-irs.ml

# Reference: https://www.virustotal.com/gui/ip-address/88.218.17.127/relations

abl-edalat.cf
abl-edalet.cf
ablagh.site
abpa.pw
ah-shaparak.gq
al-saparak.cf
alinaghdi.ir
app-xron.gq
app-xron.tk
bot-iran051.ga
bottesthazratphp.tk
buyfrosgah.ml
cena-edalat.ml
cena-edalet.ml
cena-iran.ml
cena-iren.ml
cs-shaparak.cf
digital-ir.ml
dsdddgh.tk
eblaghe-sana-1.tk
edalat-iran-ir.ml
edalat-iran.ml
edalat-iren-ir.ml
edalat-iren.ml
edalat-saham-ir.tk
edalet-abl.ml
edalet-sena-ir.ml
edlp-d.cf
edlp-d.gq
edlp-ir.gq
edlp-ir.tk
edolat-cana-ir.tk
edolat-sena-ir.ml
edolet-sena-ir.ml
edolet-sena.tk
eghlnir.com
emcchanged.xyz
eqghbl.com
eqghlit.com
haf-kolez.ml
internet-digital.gq
internet-digital.ml
internet-digital.tk
ir-edalat-iran.ml
ir-edolat-sena.tk
ir-edolet-sena.tk
ir-iran-sena.cf
ir-iron--sena.tk
ir-iron-paigri.tk
ir-iron-paygri.cf
ir-iron-sena.tk
ir-sena-iran.cf
ir-sena-iron.tk
iran-sena-ir.ml
iren-edalat.ml
iren-sena-ir.ml
iron-paigri.ml
iron-paygri-irr.ml
iron-paygri.tk
iron-peygri-ir.cf
iron-sena-ir.tk
iron-sena.tk
iron-web-ir.cf
keshvwar.pw
makhbaz.tk
modern-digital.ir
peigisp1jqh.pw
pena7n.pw
peygirie-sna.tk
peygirshi.pw
sana-eblaghe-1400.ga
sanartir.com
sena-iren-ir.ml
sena-iron-ir.cf
sena-iron.ml
shaparak-ev.tk
shprk-iran-ir.ml
sighe-yabii.ml
taaaawe5555.ga
tajjcrete.ir
telegramself.ml
www-dadgah-ir.ml
www-dadgah.ml
www-iran.ml
www-iren.ml
www-iron-ir.ml
www-peygri-ir.ml
www-sana.ml
www-sena.ml
ze-ejrraftanet.pw

# Reference: https://www.virustotal.com/gui/file/2d9945db53c96fc8acfb19dcc51acc1945f968a53927c7af2176aef447b3fae1/detection

bizim-kala.ir

# Reference: https://www.virustotal.com/gui/ip-address/95.181.161.223/relations
# Reference: https://www.virustotal.com/gui/file/1367d326a07392e4068b5c27cf9528af8141e0f589876484209a8d065ad69db4/detection

0--0.gq
0--0.ml
1--1.ga
adele-gov.ml
adiiran.tk
adl-eblagh-onlinir.tk
adl-eblaghe.online
adl-eblaghsana.com
adl-irane.ml
adl-online.tk
adl-pygiri.ml
adl2eblagh.com
adle-irane.cf
adle-irane.ga
adle-irane.gq
adle-irane.ml
adle-irane.tk
adlebir.ml
adleiran-gov.cf
adleiran-gov.ga
adliran-sena.tk
adliran-sna.cf
adliran2-eblagh.com
adliran2-eblaghi.com
adlirane.cf
adlirane.com
adlirane.ga
adlirane.gq
adlirane.tk
adliranmane.ml
adlirann.com
adll-irani.cf
adll-lran-ir.ga
adllebir.ml
adlliren-sana.ga
adlliren-sana.gq
adlliren-sana.tk
adlliron-sana.cf
adlliron-sana.ga
adlliron-sana.gq
adllran-eblagh.tk
adlsite.ml
aedl-iran.tk
agahi-eblagh.com
ajfgfesyefg.gq
api-res.cf
apr-irn.tk
barghmb.ga
bemolallremte.tk
benzin-sahmie.ml
byjmogk.ml
dadgostar-ir.ga
dadgostar-ir.gq
dadgostar-ir.ml
dadgostar-ir.tk
dadgostar.cf
dadgostar.ga
dadgostar.gq
dadgostar.ml
dadgostar.tk
dadgostari.ga
dadgosteei.ml
dadsra-meli.cf
dadsra.tk
dbu-irn.ml
dby-irn.tk
ddgostare-tk.tk
ddgstari.tk
ddgstri.cf
divar-downloed.ga
divar-downloed.ml
divar-downloed.tk
dostiyab8w.cf
dowload-irsna.tk
downlodsana-ir.ml
downlodsn-ir.tk
downlodsna-ir.cf
downlodsna-ir.ga
downlodsna-ir.gq
downlodsna-ir.ml
downlodsna-ir.tk
dowsn-ir.ga
e-pioygir.ml
e-samaneh.xyz
eadl.online
ebl-iranian-ir.cf
ebl-irenian-ir.tk
ebl-irenien-ir.cf
ebl-ironian-ir.ml
eblaagh-sna.ml
eblagaqaz.cf
eblage-cenaea.ga
eblage-cenaea.ml
eblagh-adii.ml
eblagh-adl.online
eblagh-adle.gq
eblagh-adle.tk
eblagh-agahi.com
eblagh-eir.ml
eblagh-fq.ml
eblagh-fq.tk
eblagh-ghzae.ml
eblagh-in.cf
eblagh-in.ga
eblagh-in.gq
eblagh-in.ml
eblagh-in.tk
eblagh-login.com
eblagh-mir.ml
eblagh-mm.tk
eblagh-mtf.cf
eblagh-new.gq
eblagh-oiri.ml
eblagh-pygiri.cf
eblagh-pygiri.ga
eblagh-pygiri.ml
eblagh-pygiri.tk
eblagh-shaparak.tk
eblagh-view.com
eblagh-w.ml
eblagh-web.info
eblagh-wk.cf
eblagh-wk.ga
eblagh-wk.gq
eblagh-wk.ml
eblagh-wk.tk
eblagh110police.tk
eblagh2-adliran.com
eblaghc.cf
eblaghe-kk.tk
eblaghe-snair.gq
eblaghe.com
eblagheh.cf
eblaghge-dolat.ga
eblaghh.cf
eblaghi-irm.ml
eblaghi-irmli.ml
eblaghi-irt.ml
eblaghi-iry.ml
eblaghi-m.ml
eblaghir-ir.ml
eblaghiy-sana.cf
eblaghom.cf
eblaghy.cf
eblaghy.ga
eblaghye.ml
eblaghyeh-s.cf
eblaghyehmeli.cf
eblaghyen.ga
eblagpqw.cf
eblap-aldea.ga
eblap-aldea.ml
eblape-fete.tk
eblape-sane.tk
eblaphe-cene.tk
eblaqe-eadell.ga
eblaqe-eadell.gq
eblaqhadliran.com
eblaqie-sna.tk
ebleghi-ir.cf
ebleghi-ir.ga
ebleghi-ir.tk
eblgh-adl.cf
eblgh-adl.ml
eblgh-adl.tk
eblgh-dadsra.ml
eblgh-hmrah.cf
eblgh-hmrah.ga
eblgh-new.cf
eblgh-new.gq
eblgh-new.tk
eblghie.ml
eblgie-sna.ga
eblgie-sna.gq
eblgie-sna.ml
ebligu.ml
ebllagh-ml.tk
ebllagh-paygiri.gq
ebllagh-sna.online
ebllagh-sna.tk
ebllape-fete.tk
ebllapea-fefe.tk
ebllgh-sana.tk
edalat-eblaghi.com
edalat-hamarah.com
edalat-hamrahdl.tk
edalat-iri.tk
edalat1-eblagh.com
edalat2-eblagh.com
edalathamrah.cf
edalathamrah.click
edalathamrahe.cf
edalathamrahe.gq
edalet-hamrah.tk
edallate-hamrrah.gq
edallathmrah.cf
edallathmrah.ga
edallathmrah.tk
edalthamrah.tk
edl-iiiran.ml
edl-iran.tk
edlathamrahe.gq
elbaghe.ml
enterone.site
eol1-eblaghe.ga
erin-blilq.ml
fata-eblaghe.tk
fata-eblaghie.tk
fata-eblaghj.tk
fata-eblagie.ml
fata-eblagie.tk
fata-eblghe.ga
fata-eblghe.tk
fata-ebllagh.tk
fata-ebllaghi.tk
fata-eblogh.tk
fete-eblapea.tk
fetea-cenw.tk
gaz-gz.ml
ghvye-ddsra.ml
giftirancellapp.cf
hafezom.ml
hafezxexop.ml
hamta-mobile.gq
hamyar-meli.cf
iampedaret.cf
idal-eblagh.ml
idal-eblagh.tk
ir-ebl-iranian.cf
ir-eblaghi.ga
ir-eblaghi.gq
ir-eblaghi.ml
ir-samane.xyz
iran-edalat.cf
iran-edalat.gq
iran-edalat.ml
iran-edalat.tk
iran-irsana.ml
iran-samane.tk
iran-sanaeblagh.cf
iran-sanna.ga
iran-sanna.gq
iran-sanna.ml
iran-sanna.tk
ireblaq-sanal.cf
irn-irbilq.cf
irsana-eblagh.ga
iyegfhkjd.ml
kirkhartokosnanat.cf
kurdnameserver.tk
link-eblagh.ml
maykat.ir
nameserver.cf
norton-movingostar.cf
norton-movingostar.ga
norton-movingostar.ml
norton-movingostar.tk
ok-eblagh.tk
pancakes.cf
qouvve-qazaiie.tk
qouvve-qazayie.tk
qouvve-qazayye.tk
qovve-qazayye.ml
quvve-qazaiie.cf
quvve-qazayie.cf
quvve-qazayye.cf
rahgirisana-gov.ml
remtoe-zeuse.tk
rioblaqh-ien.cf
roboxz.ga
rubika-fil.ga
samanee-sana.ml
samaneh.site
sana-adl.cf
sana-ald.ga
sana-eblaghiyeeee.tk
sana-ebli.ml
sana-ebllgh.cf
sana-gostar.ml
sana-gostar.tk
sana-iranian.site
sana-troy.cf
sana-troy.ga
sana-troy.ml
sana-troy.tk
sana1-app.com
sana1-edalat.com
sanaa-ej.ml
sanaa-ej.tk
sanaa-wk.gq
sanaa-wk.ml
sanaa-wk.tk
sanaeblaghlyir.ml
sanaireblagh.tk
sanna-mellatt.tk
semaneadl-gov.cf
semene-eblape.tk
sena-adl.tk
sena-ald.tk
sena-ir-iron.ml
sena-ireniai.ml
sena-site-ir.ml
senai-wab.ml
senai-web.ml
setting-api-trust.ml
shapaarack-ir.ga
shaparako.tk
shaqarack-pay.ml
sheaparakf.tk
shekayat-iran.tk
si-gh-e.tk
sld-ebllaghie.ml
slo-edliran.ml
smnlq.ga
snaeblaghir.tk
snair-eblagh.ml
snair-eblagh.tk
snowyka.tk
snowyna.tk
sqdir.ga
ssana-ebllaghe.ml
svt-irn.tk
t-wallet-airdrob.ml
t-wallet-apa.ml
tk0r-ebllaghe.ml
tog-eblloghe.ml
trust-gift-airdrob.ml
trust-org.ml
twalletbonus.tk
uo-rahgir.ml
vhy-irn.tk
wallet-api-docks.ga
web-sana-ir.ml
www-adliran-ir.cf
www-eblagh-ir.ml
www-sana-ir.ml
www-sena-ir.ml

# Reference: https://twitter.com/malwrhunterteam/status/1487049183207075842
# Reference: https://www.virustotal.com/gui/ip-address/208.91.104.146/relations
# Reference: https://www.virustotal.com/gui/file/71eff95073a5fcd5f270f4aaba72d90460304bdb71fd4d32844bf38ea6b4a11d/detection
# Reference: https://www.virustotal.com/gui/file/70f6af40cd8e90e4d5d5339d03e35b9067d5840131fe6c98b945861c65d771c4/detection

aadl-iran.cf
aadl-iran.ml
aadl-iran.tk
aadll-iran.ml
abdullah.cf
abdullah.gq
ablag-u.cf
ablag-u.ml
adi-sfir.ml
adii-iran.ga
adii-iran.tk
adil-cen.email
adil-irqm.tk
adilait.ga
adilapp.digital
adilisnm.ml
adilr-com.cf
adilr-com.email
adilr-sn.cf
adir-sana.email
adir-wb.email
adl-link.cf
adl-pay-1400.ml
adli-tech.ml
adli-web.email
adlibln.email
adlir-fir.ga
adlir-web.email
adlira-sn.tk
adliran-dadagah.gq
adlirani-ir.cf
adlirn-sn.email
adlisana.ml
adlisnai.email
adsanae.ml
adsgiz.email
aedie.email
aedl-iran.ga
aedl-iran.gq
aeslde.email
ahmadi.tk
air-sna.email
airdrop-gp.ga
aktareh-sana.ml
all-edgar-cayce.com
app-peigiri.xyz
asaigwndbwh.cf
asdana.xyz
asdilcv.ml
asnal.email
asnal.ml
asnaval.email
asnel.email
asnl.email
asnli-sn.email
balqhsn.email
bem-shekayt-ir.tk
blagh-com.cf
bmi-edi.tk
bq-bmi.cf
bq-sn.ga
c0llab-land.link
check-edalat.ml
check-edalat.tk
d-payment.cf
dadsara-irin.tk
dail-qa.email
dhusiyebie.gq
dinvtuger.ml
divar--update.tk
divar-download.me
divar-downloed.cf
divar-downloed.ga
divar-downloed.ml
divar-downloed.tk
divar-login.cf
divar-login.ga
divar-login.gq
divar-login.ml
divar-login.tk
divar-online.ga
divar-open.cf
divar-open.ga
divar-open.gq
divar-open.ml
divar-open.tk
divar-pay-ir.gq
divar-uepdte.ga
divar-uepdte.ml
divar-uepdte.tk
divar-updatea.cf
divar-updatea.ga
divar-updatea.gq
divar-updatea.ml
divar-updatea.tk
divar-updaten.xyz
divar-updato.tk
divar-updeti.cf
divar-updeti.ga
divar.email
divarapp-download.cf
divarapp-download.ga
divarapp-download.gq
divarapp-download.ml
divarapp-download.tk
djvisicm.ml
dr-rem2.tk
drio-sn.ml
dum-irn.xyz
eadil-com.email
eblageh-1400.ml
eblageh-iran.ml
eblagh-efa.xyz
eblagh-mn.cf
eblagh-mtf.cf
eblagh-mtf.ga
eblagh-mtf.gq
eblagh-mtf.ml
eblagh-mtf.tk
eblagh-novin.xyz
eblagh-pro.xyz
eblagh-qhz.ml
eblagh-rina.gq
eblagh-rina.tk
eblagh-roy.cf
eblagh-roy.ga
eblagh-roy.gq
eblagh-roy.ml
eblagh-roy.tk
eblagh-saman.cf
eblagh-saman.ga
eblagh-saman.ml
eblagh-saman.tk
eblagh-sanairr.ga
eblagh-sna1.tk
eblagh.email
eblaghah.ml
eblaghre.ml
eblagi-u.ga
eblaqh-sn.email
eblaqhi.email
eblegh-ir.site
ebllaapea-sana.tk
ebllagh-sana.tk
eda-lat.cf
edallat-saham.tk
edallat.co
edialat.email
edie.email
edli-wb.email
eedl-iran.tk
eidalait.tk
eidalat-web.email
eidalat.email
eidalit.email
eidalt.email
erimblqhi.email
erinsn.digital
esnbalq.email
estkhdam-kar.ml
exn-dfil.ga
farasana.ml
fastssdserver.tk
fatae-eblaqyea.tk
fdio-ernm.tk
fdiom-dfim.tk
fvn-wer.tk
gerl-dfil.tk
gugjsyge.ml
hamta-ir.ml
hamtaa.ga
hejab.tk
iam-dialt.tk
iblqsni.email
idalat.email
idalliat.tk
im-ed.tk
im-eidlt.ml
im-erdalay.tk
install-ratking.ml
install-ratking.tk
ion-df.ga
ir-dalit.tk
ir-eblagh-sad.tk
ir-link.tk
ir-nm.ml
ir-saham.ml
ir-sana-hoviyat.cf
ir-sana.xyz
ir-shprak.xyz
ir-sn.cf
ir-xyz.tk
irbilohq.ga
irdailt.email
irdalat.ml
iren-sna.tk
irin-erml.tk
irldalat.tk
irn-duim.xyz
irn-dum.xyz
irsnl.digital
iry-ofd.ga
it-bnf.cf
it-bni.ga
jrc-kyoto2.org
kapark-ir.ga
live-sexsy.ml
ll-shapark.tk
login-sana.tk
logistical.monster
lsana.ml
mayket-ir-tk.tk
mig-ads.ga
modernie2020.tk
mrin-ibn.cf
newsion-oi.cf
nixselphtest.tk
ofogh-koorosh.tk
on-sana.xyz
otpdfkxc.tk
otpfamsdkf.ml
p4zserver.tk
panel-eblaghy.tk
panel-ratat.tk
panel-ratr.tk
panel-ratta.tk
pay-pamant.ga
pay-vn.tk
paygieiyy.tk
paygiriyughh.tk
paygiry-aief.tk
payment-sana.tk
pesareshoja.tk
pesarshoja.tk
peygiri-app-ir.tk
peygiri-eblagh-ir.tk
peygiri-org.online
peygiri-portal.ml
pigirii.site
pishgiri-app.me
poyasana.ml
pulsana.ml
qdj-irn.tk
qo-zi.ml
qsanae.ml
rdil-ir.email
rem-hugo.ml
rih-ern.tk
rikn-dsn.tk
ril-dri.tk
rimot-ml.ml
rimot-ml.tk
rterterg.ml
sabt-ahval.tk
sabtahval.tk
saham-edalat.tk
saham-ir.tk
saham-ir1.ml
saham-iran.ml
saham-iran.tk
saham-meli.ml
saham-meli.tk
saham.email
sahami.email
sahamir.ml
salamt-beh1.ml
sana-adilm.tk
sana-adl.me
sana-adlya.tk
sana-com.tk
sana-fax.xyz
sana-fgo.cf
sana-fgo.ga
sana-fgo.ml
sana-fgo.tk
sana-goev.me
sana-gostar.cf
sana-gostar.ga
sana-gostar.ml
sana-gostar.tk
sana-gozar.xyz
sana-ir.ga
sana-login.me
sana-nom.cf
sana-nom.ga
sana-nom.gq
sana-nom.ml
sana-nom.tk
sana-panal.tk
sana-peigir.me
sana-piget.tk
sana-pishga.tk
sana-prot.cf
sana-prot.ga
sana-prot.gq
sana-prot.ml
sana-prot.tk
sana-prot.xyz
sana-save.ga
sana-server.xyz
sana-tor.ga
sana-uni.ga
sana-uni.tk
sanaeae.ml
sanaf.ml
sanagov.ml
sanaia.ml
sanairan.email
sanako.ml
sanaoa.ml
sanata.ml
sanaua.ml
sanaus.ml
sehge.ml
self-rez1.ml
sena-on.email
shagarak-ir.tk
shami.ml
sianat.tk
sianatnet.tk
sianl.ml
sighe-federal.tk
sighe-online.tk
sighei.cf
sigheyabir.ml
sihamim.cf
sihge.cf
sihgeir.tk
simcart.ga
sinsona.tk
sn-ed.ml
snal.tk
snaleblq.digital
sndir.email
spicyod.tk
teck-web.ml
trustsetting.tk
vtp-uio.cf
web-edalat.email
web-idalat.email
web-sn.ml
wer-asnl.email
wrbir.ml
xzc-vbn.tk
yadalat.tk
yiu-zil.ml
zcm-rim.cf
zzzvncodest.tk

# Reference: https://www.virustotal.com/gui/file/7e2ba298f06277c8a94d9c456e33ae41fc005d520884fec018a7bf29f781cc40/detection

rat-1223.xyz

# Reference: https://www.virustotal.com/gui/ip-address/46.4.197.237/relations
# Reference: https://www.virustotal.com/gui/file/9e18ff6b88adabadaff6103a9baf0e025d35f27f5c6b8b4a47b6dada40fd5b80/detection
# Reference: https://www.virustotal.com/gui/file/9e18ff6b88adabadaff6103a9baf0e025d35f27f5c6b8b4a47b6dada40fd5b80/detection

kutahyaisgood.xyz
mytestprojects.xyz

# Reference: https://www.virustotal.com/gui/file/d096a6e8e530b31167d985d044e05b1a79d194475e7f88b63868648af8545d68/detection

rk-shaprak.ga

# Reference: https://www.virustotal.com/gui/file/4f42c41b45f462a3ce8f2397bdce8f3e24972fd62dfec539190e2a8430d494f8/detection

dem-pwer.tk

# Reference: https://www.virustotal.com/gui/ip-address/46.4.197.237/relations

araghijat-kashan.ir
dgr-shaprqk.ga
divar-shaprakc.tk
eblagh-internet-ir.tk
forosh-kala.tk
frs-shapark.ga
gay-yabi-iran.cf
hotan-payment.xyz
internet-98.xyz
ir-madarebakhtak.tk
ir-saman.tk
ir-shalpoal.tk
ir-shalpolak.tk
iran-rf.com
lcn-shaprak.tk
m-akhgargodaz.ir
mellat-segkbx.ml
mellatnet-ir.ml
pey-park.cf
pirmensuy.tk
posti1.xyz
saberghadimi.ir
sahaparak.tk
sana-lran-com.tk
sem-parsan.tk
shap-pewt.tk
shatel.xyz
shhaparkii.ga
shomal-cityeert.tk
shomal-papiount.tk
tejarabnk.xyz
up-kiteseen.xyz
upkit.xyz

# Reference: https://www.virustotal.com/gui/file/1dd5b90d208a476bf7fbc0f4e9429088dd0f663487657354dbb9288c1215f208/detection
# Reference: https://www.virustotal.com/gui/file/4deab5a6b65c6359809259d1764e3a7443b9f0f4161af77448e850467921cc20/detection

sh-k-rem.tk

# Reference: https://www.virustotal.com/gui/file/b59bcb7588a51557cf48b20734afa2531b756399853e5b34420992e51bbf7556/detection
# Reference: https://www.virustotal.com/gui/file/9227a9615569eba65e2d86930a33a4b1de257459a25de064a6d2eb25be124ef7/detection

sesverffvar.co.vu
toxic-remote.xyz

# Reference: https://www.virustotal.com/gui/file/527bc6b3382e6c780822922d2bc36ae2cfc5a013df48432b056cbb2700bcb3f9/detection

hahadev.tk

# Reference: https://www.virustotal.com/gui/file/5aab1fc870638c506b2eb2cf4de042ab90d30530d3a856d9a14856128ca0d3bc/detection
# Reference: https://www.virustotal.com/gui/file/1b0bfd8fc03035f3ffb737461e41368b5bd8b81021b87e8016b5b304fdb0369f/detection

nipald.tech
qovve-qazaie.tk

# Reference: https://www.virustotal.com/gui/file/f37a685d6162125f6ab48f29b392841c7a1d385b723e7690053c7f5d3fbece9a/detection

teodor.click
trustwailette.tk

# Reference: https://www.virustotal.com/gui/file/e5d8929f07a55966e3bcd6e79603acefe65175895e902912ff525972a2629345/detection

eblaghye-iran.tk

# Reference: https://www.virustotal.com/gui/file/e5993a0cc0ec2a9cf0d51474d9621ce2d263cef87619c86f170dff316783ac38/detection

baccxaz.tk

# Reference: https://www.virustotal.com/gui/file/dd32bee8613974fe5b8b21af2b2e61852d158bfa6641ed5fd7f3c83cf43a036a/detection

thisiskia.tk

# Reference: https://www.virustotal.com/gui/file/d6cef1fd235750646f53aee70849bfb79c2bfb8271ca8488e807aa4c94044e48/detection

teodor.iromizban.ir

# Reference: https://www.virustotal.com/gui/file/d233685af1b13191219cd3e0425cf5af324e11ae90fcd932b569338389e48ac3/detection

ir-melibank.tk

# Reference: https://www.virustotal.com/gui/file/b6eb2c1a5d829e20119dc6f53bdb366f5e5cf873f696ff575951808a681d3e85/detection

dadgostari.link

# Reference: https://www.virustotal.com/gui/file/26774e1c32e13407cbac4fc2a53c7dcbd1e2ed0511ae14fc83cffc247b7fe9f0/detection

shasparak-ir.tk

# Reference: https://www.virustotal.com/gui/file/c9ac805ffedd739eb3556a80e1fd4a9978f230643da03e6a975f3f3d69a7421e/detection

sana-irplran.gq

# Reference: https://www.virustotal.com/gui/file/b9a8e4c3800ca0939c83cf508ba0fcea23623724d8361e356b422c7081304965/detection

adl-sana-peygiri.tk

# Reference: https://www.virustotal.com/gui/file/b3cf2924e55753f29860e30e9bf48783011dc75a83d01fd4c1164b099297d9e9/detection

dadsetani.online
portal.dadsetani.online

# Reference: https://www.virustotal.com/gui/file/9775d15769d12340899adee58f55e7c9d825e56e1930c39d0629c3fe568a8601/detection

anlghie.com

# Reference: https://www.virustotal.com/gui/file/85970d790096ec8023eab216342878bfc1b468e78ce99a25cb47f73d85c6bdd5/detection

pardakht.subnitro.xyz

# Reference: https://www.virustotal.com/gui/file/61c00faa048750696d34e2a786c604232de27a7513b03fa8265288b7a57ac33f/detection
# Reference: https://www.virustotal.com/gui/file/2eea4e883a6b7aa955ee1de815da157f769d04777ece24a4695f58b86dd1e8dd/detection

devamir.nlsrv.xyz
api.devamir.nlsrv.xyz
remote.devamir.nlsrv.xyz

# Reference: https://www.virustotal.com/gui/file/5f3990cf6f84473805d24f5d020b7ba3bb58861e0a15c2fdd872925b68909bfc/detection

adl-webeb.com
irandl.de

# Reference: https://www.virustotal.com/gui/file/395387f97126d0ccc16240d7ad1e21ef2121861a8953d73a87976f99c7e51836/detection

divarlenjan.ir

# Reference: https://www.virustotal.com/gui/ip-address/64.44.139.170/relations

adlliran.cf
dadgah.online
dadgoostari.site
dadgostari.site
dadsetani-online.gq
dadsetani.online
dadsetani.xyz
dadseteni-online.ml
eadliran.ml
eblghi-irp.ml
konkoor.online
sanairani.online
shekayat.online
shekayat.site
shekayat.space
teodor.host
adl.dadgostari.site
adliran.dadgostari.site
bot.nipald.tech
eblagh.dadgostari.site
peygiri.dadgostari.site
pigiri.dadsetani.online
rat.dadgostari.site
sana.dadgostari.site
test.dadgostari.site

# Reference: https://www.virustotal.com/gui/ip-address/185.178.208.182/relations

sana2v-ir.ml

# Reference: https://www.virustotal.com/gui/file/e45065a3368e68c58ead61832714c98672ef64d124763a45aaaec51c848a7dc5/detection

shapalack.gq

# Reference: https://www.virustotal.com/gui/ip-address/95.181.161.144/relations
# Reference: https://www.virustotal.com/gui/file/e85302bab5c106ce3fcd30fd527929c83b1a068240313bd21267934b6fc45c55/detection

adl-mi.xyz
adl-sana-1400.cf
adl-sana-ir.ga
adl-sana-pay.ml
aitdayidayifw.tk
dex-network.tk
dowapp-sna.tk
eblagh-hh-h.ml
eblagh-hh-h.tk
edailet.xyz
edallat-bi.tk
edallet.xyz
edllat.xyz
edllir.xyz
er-sn.ga
eri-mni.tk
fataeeblagh.tk
fr-in.ml
ir-dadgostari.gq
ir-dadgostari.ml
ir-qmi.ml
irn-qm.tk
jstfakykwcoyf.tk
kkl-irn.tk
live-sexsy.tk
orn-bmi.ga
police-adlsana.cf
qm-hi.cf
ratttt.ml
samanres.tk
sana-allrdronll.ml
siqe-yabi.ml
trust-api.ml
ucgcuugcugcuufuf.tk
www-peygiri-ir.ml
www-sanna.ml
ratroid.xyz

# Reference: https://www.virustotal.com/gui/ip-address/46.4.98.114/relations

30panel.ml
a-h-karimi.ir
amirh-rezaii.ir
api-rasatm.tk
dehkadeh-salamat.ir
epay-bank.ga
epay-bank.ml
epay-shaprak.ga
estelam-ir.ml
hadaf-host.ir
imen-shaparak.ml
imen-shaparak.tk
ir-melibank.tk
ir-sana.com
ir-sepahbank.tk
lr-sana.ml
mellat-sodt.cf
mellat-sodt.gq
mmd-alizade.tk
nme-top.tk
reza-hacker.tk
sajadfarshidi.ir
sana-gps.ir
sana-online.ga
saaaanaa.ir
sanagps.ir
sanaradyab.ir
sanat-polymer.ir
sep-bimarzx.tk
sep-mellat-pay.ml
service-majazi.tk
bot.nlsrv.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1495843293116215299
# Reference: https://www.virustotal.com/gui/file/82e60036bc67844e755e156af8073da9a85e2c456064655e785e97b8bf19e1d7/detection

dolat-sahm-ir.tk
sanaavir.ga
/rat-webpage

# Reference: https://www.virustotal.com/gui/file/8e27b8c5fbe82062b24041f5ca6fbcedee2ea7fddd5295faa12a5f817eefb3fb/detection

cefouccqw.tk
sanaweb-ir.gq

# Reference: https://www.virustotal.com/gui/file/304e3f2147cfb766cff07a2be24a806ed0e26775986ba76d29de1d082bdbc898/detection

sana-ewdliran.tk

# Reference: https://www.virustotal.com/gui/file/3023afb6e8c8eb8a70d5e103081d4bbb29562ac4b0c889cb7af7749726168b19/detection

sanaducir.ml

# Reference: https://www.virustotal.com/gui/ip-address/51.68.204.165/relations
# Reference: https://www.virustotal.com/gui/file/58e9a36836d627c01a833a617fc9a5eed81a8e0ed2b0d0d3677852ce9ca49c79/detection

eg-tk.tk
eblage-sn.tk
chat-web.tk
dadsetani-online.tk
eblage-sn.tk
ablagh-in.tk
ablaghie-samene.tk
black-scam.cf
siqeh-vip.tk
ablagh-on.cf
siqeh-vip.tk
claim389-xyz.ml

# Reference: https://twitter.com/malwrhunterteam/status/1501528659018063872
# Reference: https://www.virustotal.com/gui/file/28afc35f57f8efd59ded0d7e17239b46d1167a8e411b699374c611eea7308893/detection

semanehe.tel

# Reference: https://www.virustotal.com/gui/ip-address/64.44.139.142/relations

adl-irane.tk
adliran.in
ald-iren-sena.ga
dadgoostari.online
fata.adliran.in
fewrt-ater.tk
khalifa.host
norton-movingostar.ga
cyber.dadgoostari.online
server.khalifa.host

# Reference: https://www.virustotal.com/gui/ip-address/83.149.110.150/relations

apprimote.ml
mummy-remote.tk
remote-best.xyz
vip-toxic.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1448942274692386821
# Reference: https://twitter.com/malwrhunterteam/status/1450115138535710723
# Reference: https://twitter.com/malwrhunterteam/status/1450171823010861058

adlliran-ir.tk
du-shaparak.tk
my-divar.xyz
/kurddarv/
/ratsms.php

# Reference: https://twitter.com/malwrhunterteam/status/1460311901041213442
# Reference: https://www.virustotal.com/gui/file/662c25851648793ef276f6da53bd57e6375ec2f219b9d47a510c10b2ade9ac52/detection

bpm-shaparck.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1510268204567961611
# Reference: https://www.virustotal.com/gui/ip-address/95.181.161.170/relations
# Reference: https://www.virustotal.com/gui/file/8f77d7e50fae594dd1d8925c98d775b2ce681a3a4336b85cd66d086803d1aa3c/detection

adiiran.cf
adiiran.ml
adilrni.digital
adliiran.email
adlilran.digital
adliraneb.digital
adliranpa.digital
adllran.digital
amoo-godret.ga
coinsolotions.tk
cointrust.tk
daad-sara.digital
dad-saraa.digital
dad-sarae.digital
dadd-sara.digital
daddsara.digital
dadgostary.digital
dadsara.email
ddadsara.digital
eblaghri.cf
eblaq-sna.tk
ed-adli.digital
edalat-hamrah.digital
edalat-saham.digital
edalat-sod.digital
edallat-hamrah.bike
edallat-hamrah.digital
edallat-hamrah.org
edallate-hamrah.bike
eddl-ir.digital
er-snmi.cf
erin-bql.tk
erinsn.digital
firm-ern.tk
gay-irani.tk
gmx8z.tk
goin-dr.cf
hack-pedart.tk
hamta-peygiri.digital
iranfaloweer.cf
iraniamil.digital
kardar-manzel.ml
kardarmanzel.ml
mm-peygiri.tk
nameserver0.tk
new-sas.ml
new-sas.tk
peygiri-ausy.tk
peygiri-hiir.tk
qoirnm.tk
ratzx0572.tk
remote-godrat.tk
samane-sana.digital
samane-sanam.tk
sana-mp.tk
sighei.cf
sinalei.digital
sirnad.digital
snataji.digital
trustsolution.tk
vop-shaparak.tk
xxx-com.ml
yaranedolati.online
iranfaloweer.sana-mp.tk
samane-sanam.sana-mp.tk

# Reference: https://www.virustotal.com/gui/file/58e9a36836d627c01a833a617fc9a5eed81a8e0ed2b0d0d3677852ce9ca49c79/detection
# Reference: https://www.virustotal.com/gui/file/4ea85b171c4c3f6d4ef8831860bb5f9a81f06be9394941ffd400b8bb14be42e4/detection

sianat-iran.ml

# Reference: https://twitter.com/malwrhunterteam/status/1514674246689206276
# Reference: https://www.virustotal.com/gui/ip-address/137.74.247.226/relations
# Reference: https://www.virustotal.com/gui/ip-address/95.181.161.78/relations
# Reference: https://www.virustotal.com/gui/file/585a58a92e4cd71abbb7aedd297f263c934439f903759b00d546a9cc2d460ce1/detection
# Reference: https://www.virustotal.com/gui/file/986940169e3976b20541389128431c13198ff9898c0e5e4189702288fb53cb9b/detection
# Reference: https://www.virustotal.com/gui/file/502db17a210e226d4b2a842f1e51bfb8381b6b34e3f3743a4e1bb103b558b41b/detection
# Reference: https://www.virustotal.com/gui/file/88a7fb687bdf99aa5a6ac457b3a6f51c8a6bff3768e0dacc48ae725e51d7d770/detection
# Reference: https://www.virustotal.com/gui/file/73d97171058f68af8877fbafc06bcd24adc11b4917c382caf831ad76ba2e8825/detection
# Reference: https://www.virustotal.com/gui/file/3ecbabb1c5f89eb79e6fc29088b3da192011573b8c905ee7726729079882e97c/detection
# Reference: https://www.virustotal.com/gui/file/1941165af140ad4ffe5a009077c58e632b161b6324760db6722a116305b84257/detection
# Reference: https://www.virustotal.com/gui/file/d802fe9b0cc7144197d85bfea2d3df95accf76106fe1e8c4d3cbbd337fc090c4/detection

aamirb.tk
adliran-lr.digital
adlirani.uno
amqwpoho.cf
badgirl.ml
davidsexy.tk
deldadyar.tk
ebailgiesna.digital
ebalasghksna-lir.ml
ebalasghsna-lir.tk
ebalasglhksna-lir.ml
eblaghsna-ir.tk
eblfhsna-air.ml
eblfhsna-air.tk
edalsanair.tk
ireblgh-isai.tk
jesusdastan.tk
kardarmanzel.gq
khodrosellir.tk
kirkoloft.tk
lezatsara.tk
pancakeswap.ga
pay-peygiri-vv.gq
peygir.digital
samanese.digital
sanab.digital
sanairan.email
sani-spn.digital
sarapkishlm.ml
seksoloz.tk
seyedhastam.tk
shprkishi.ml
sigeirn.ml
siggeyab.ml
sighe-hooilo.tk
sighebazan.tk
sigheirn.tk
sigheyabiyar.tk
sigheyaran.ga
sigheyaran.ml
sigheyaran.tk
sinbelq.digital
singin-adela.ml
singin-adelan.ml
trustsolution.tk
walletrust.tk
wallettrust.ml

# Reference: https://twitter.com/malwrhunterteam/status/1516138822563942400
# Reference: https://www.virustotal.com/gui/file/0d5ce5d95ccc63171bf093846fc5cded61fa139ec46b537e41e61dff02d0214c/detection

classicbody.ir

# Reference: https://www.virustotal.com/gui/ip-address/148.251.66.48/relations
# Reference: https://www.virustotal.com/gui/file/1c18842c99ab0e13e3cef1055be8d1644263bd5057c979fc1f6c581271eb614a/detection

gahertp.ga

# Reference: https://www.virustotal.com/gui/file/577f8851e85fcf3801bef2595910fd5cde82dd01678d17a5692007a77743cd1c/detection

bb-shaperak.gq

# Reference: https://www.virustotal.com/gui/file/610f11051f26e24785907da5fcf5437e4f6ee7b26a7d30073dabd15774339033/detection

adlir.site
irlink.uno

# Reference: https://www.virustotal.com/gui/file/c4164474725bc57dbd6687491555e50ffec6fd850dd458af8d7455ddf1944b54/detection

sana-ireblagh.ml

# Reference: https://www.virustotal.com/gui/ip-address/185.178.208.183/relations

airdorop-terkk.ml
eadl-iran.ml
eb-snn-ir.xyz
edilte-lr.today
plc-melli-sana.tk
samane-lr.digital
samaneh.digital
samanehi.today
sanaa-adliran-ir.tk
sharparak.cf
sharparak.ml
sharparak.site
v-eblaghe.ml

# Reference: https://www.virustotal.com/gui/ip-address/116.202.132.155/relations
# Reference: https://www.virustotal.com/gui/ip-address/185.224.129.204/relations

ablag.cf
ali-hm.tk
edlir.ga
poye-set.tk
sana-sork.ga
sana-sork.tk
sato-valahir.tk
shiila.tk
sigheh-iran.ml
sina-bot.tk

# Reference: https://www.virustotal.com/gui/file/391ae849d06813632cf071de3ce061583a2d57e8ed2b49687c895077c064e85c/detection

bqm-im.ml

# Reference: https://www.virustotal.com/gui/file/c41613463e4a30720b880c9b7927f85f18e769e9af086d4c8aa25f55377cc483/detection

sahamety.ml

# Reference: https://www.virustotal.com/gui/ip-address/185.7.33.56/relations

aatrau.ml
aatrau.tk
adll-iiran.cf
aidl-iran.tk
aodl-iran.tk
ardl-iran.tk
bqm-ir.cf
d-payment.tk
dartstsjk.ml
dghsdhdf.tk
ebelighahy.ml
eblaghe-da.tk
eblaghe-er.tk
eblaghu-sana.tk
edaiat-ir.gq
edalat-lr.ga
edalat-lr.ml
edallat-saham.gq
edallate.fun
eedl-iran.ml
emamatbnd.tk
ghkljbpl.ml
hamta-ir.tk
ir-hamta-t.ml
ir-onlineir.ga
iran-sana-ir.ml
iren-qmi.ga
it-bint.tk
kaqaz.ml
live-sexsy.ml
otpfamsdkf.tk
peygiri-simcart.tk
peygiri.tech
radl-iran.ml
rat-install.cf
rathathu.ml
rem-kirkoloft.tk
rezaking19083.tk
rimot.ml
sabtahval.ml
saham-adlt.tk
sahamedalat-ir.ml
sahamety.cf
sahamety.ga
sahamety.gq
sahamety.tk
sahmieff.tk
san-new.tk
san1-new.tk
settestyy.ml
shekayate-ed.cf
sighep-bmb.ml
webardl-iran.tk
webcoinsuloton.tk
webir-hamta-t.ml
webiran-sana-ir.ml
webit-bint.tk
webradl-iran.ml
webrat-install.cf
websahmieff.tk
y-divar.tk
yksjsuns.tk

# Reference: https://virustotal.com/gui/ip-address/23.235.232.236/relations

adalat-app.lol
adalat.lol
adaltiran.lol
adliran.pics
app-eblagh.lol
divar.pics
eablgh.autos
eadalatu.me
eadlat.xyz
eadlt.blog
eadualat.ml
eadualat.tk
ebilagh.blog
ebilagh.lol
ebilangh.lol
eblaegh.lol
eblagh-org.lol
eblagh.homes
eblagh.pics
eblaghi.lol
eblaghiu.lol
eblaghj.lol
eblaghl.lol
eblaglh.lol
eblagoh.lol
eblaigh.com
eblaigh.lol
eblajgh.gifts
eblangh.lol
ebleagh.mom
ebliegh-gov.autos
ebllagh.lol
edalat.autos
eunlagh.lol
novin-pay.lol
peigiry.autos
peygiri.lol
peygiri130.lol
peyguri.buzz
peyjgiri.buzz
peytgiri.buzz
samaneh.blog
samaneh.pics
sana.pics
sanaen.digital
seana-ir.buzz
update-divar.lol

# Reference: https://www.virustotal.com/gui/ip-address/194.36.191.196/relations
# Reference: https://www.virustotal.com/gui/file/02e3c37acc6d9f1c4352f5203a101ae02958333c61a8773487f807b256926781/detection

bghana.online
dlivar.mobi
dlivar.pics
duivar.blog
eablagh.lol
ebilaigh.lol
eblaghc.lol
eblaght.lol
ebluagh.lol
ebolagh.lol
edalat-pay.xyz
eiblagh.lol
eublagh.lol
iran-adi.blog
iran-dadl.mobi
iran-sna.ml
iran-sna.mobi
iran-sna.tk
orgsna.cf
orgsna.ga
orgsna.gq
orgsna.ml
orgsna.tk
sana-irj.tk
sanago.me
sinanem.tk
sininame.tk
sinoname.tk
sna-news.mobi
sna-org.digital
sna-pro.digital
sna130iraeian.com
snaio.cf
snaio.ga
snaio.ml
snaio.tk
snaorg.cf
snaorg.ga
snaorg.ml
snaorg.tk
snioun.tk
snoinu.tk
sunina.tk
cf.sininame.tk
ga.sininame.tk
gq.sininame.tk
ml.sininame.tk
tk.sininame.tk
dlivar.mobi.sininame.tk
dlivar.sininame.tk
duivar.sininame.tk
eablagh.sininame.tk
ebilangh.sininame.tk
eblagh.sininame.tk
eblaghc.sininame.tk
eblaght.sininame.tk
ebluagh.sininame.tk
ebolagh.sininame.tk
edalat-pay.sininame.tk
eiblagh.sininame.tk
eublagh.sininame.tk
iran-dadl.sininame.tk
iran-sna.sininame.tk
iran-sna.tk.sininame.tk
mobi.sininame.tk
orgsna.cf.sininame.tk
orgsna.ga.sininame.tk
orgsna.gq.sininame.tk
orgsna.ml.sininame.tk
orgsna.sininame.tk
sana-irj.sininame.tk
sanago.sininame.tk
sinanem.sininame.tk
sinoname.sininame.tk
sna-news.sininame.tk
sna-org.sininame.tk
sna-pro.sininame.tk
sna130iraeian.sininame.tk
snaio.cf.sininame.tk
snaio.ga.sininame.tk
snaio.ml.sininame.tk
snaio.sininame.tk
snaorg.cf.sininame.tk
snaorg.ga.sininame.tk
snaorg.gq.sininame.tk
snaorg.ml.sininame.tk
snioun.sininame.tk
snoinu.sininame.tk
sunina.sininame.tk

# Reference: https://www.virustotal.com/gui/ip-address/162.55.170.81/relations
# Reference: https://www.virustotal.com/gui/ip-address/167.235.56.216/relations
# Reference: https://www.virustotal.com/gui/file/5b3b612e0b32c57fd5469337b809cdd85cc92ca2b5ad45fcb136d083f4b5897e/detection

api-tel.xyz
daad-sara.lol
daadsara.mom
dad-saara.lol
dad-sara.lol
dad-sara.mom
dadd-sara.lol
daddsara.mom
dadsara.mom
dadssara.mom
ddad-sara.lol
ddadsara.mom
eblagie12.vin
edaallt.mom
edalaat.wtf
edalat.lol
edalat.mom
edalat.wiki
edalati.mom
edalati.wiki
edalitan.mom
edallat.lol
edallat.mom
edallat.wtf
eddalat.lol
edi2001f.xyz
edilat.mom
eedalat.lol
eedalat.mom
eedalat.wtf
iedalat.wtf
iranmeli.vip
iransaman.vip
livesex-iran.tk
redalat.lol
samaniran.vip

# Reference: https://www.virustotal.com/gui/ip-address/178.162.159.1/relations
# Reference: https://www.virustotal.com/gui/file/91fe8567ab09036639c495436867dc2e923fd631e25f51bd66e8bcae3a1de7d1/detection

bbb-dl.ir
blaze-api.site
bmq-shaparak.ml
digimajaz-bot.ir
herni-bot.ir
hidden-bot.tk
homaion-bot.ir
onlne-shop-bot.ir
panel-bot.xyz
qma-bot.ir
saiaair.site
shaikhaliii.tk
shaparack-iir.ga
shaparack-iir.tk
shapark-qp.tk
shapparak.tk
tame-salamati.ir
wedlost001.ir

# Reference: https://www.virustotal.com/gui/file/7888e4e7e9211f9fd771a5962f57d450879dcb1bf1672131ce6dc2cb460c7333/detection

fjzgsgsbusnak.gq
ueblaghocdgh.xyz

# Reference: https://www.virustotal.com/gui/ip-address/104.21.84.235/relations

eadalat.lol

# Reference: https://twitter.com/midnight_comms/status/1531037250275794945
# Reference: https://www.virustotal.com/gui/file/fcf3723de67b948068e4bb61edb18448648242e8be2a9e1548e2eef1ddd8049c/detection

app-lurd.xyz

# Reference: https://www.virustotal.com/gui/file/ba746e66e40bb7f888d5b0d5ebe185a45fd3a8343f1739c77943198a5b34a3aa/detection

scandarremote.xyz

# Reference: https://www.virustotal.com/gui/file/072b8d78574d6820c14781e47dbdaa00bdc1c9b79641e620c58948c22821224c/detection

lordremote.xyz

# Reference: https://www.virustotal.com/gui/file/1302e12ee2fe4425ffc370ed06d0983aa8de87d323d0ddf3fc86b463a68b1c49/detection

defeserremote.xyz

# Reference: https://www.virustotal.com/gui/file/55ba423284602722e8212f15899a5b40eab5fe69616d8b98e45a75e65b484d57/detection

estelame.boutique
mummy-vip.xyz

# Reference: https://www.virustotal.com/gui/ip-address/185.73.115.138/relations

sarane-nan.ml
taqva.cf

# Reference: https://www.virustotal.com/gui/ip-address/45.148.145.51/relations
# Reference: https://www.virustotal.com/gui/file/306cb23b6a95150dafd066e693210223f25753b2ee81f25c75e3ae319125cbd5/detection

0o0o0o00o.cf
adealat.xyz
adilq.com
adl-qmo.xyz
adli-wetin.ml
adlilran.cf
adlilran.ga
adlilran.gq
adlilran.ml
adlilran.tk
adlio-dir.xyz
ads-edif.ml
adualat.stream
adz-dfx.ml
aedalat.xyz
asdfgh-qqez1.tk
asdilt.com
asn-ijn.cf
asn-nqm.ml
bandar-bamdar.ml
bmiorn.cf
dadgh.lol
dadreci-ir.com
dogah.lol
dost-ir.ga
eblaghty.xyz
eblaghye-ediiran-gq.gq
eblaghyi.xyz
edarlat.xyz
edig-gof.cf
edilotsn.cf
edisn.xyz
esirdl.makeup
faffffffffmilyhsvsjsbsgs.tk
familylijnaikomsrjsg.tk
fkljwrw.com
ghsna.com
go-adlatcyon.cyou
gobtozendegi.tk
help-live.ml
hemtaw-ir.gq
hgad-ir.com
hmtlran22.tk
httphttpshttp.ga
httpshttpssl.cf
httpshtttpsslman.ga
i-dadres.com
i110-0o.ga
iedlati.cf
ir-bgft.tk
iran-ca.cf
iran-pas.ml
iran-pot.ml
irankhaldaliraniranghoreshshiran.tk
jshsyy.cf
jsnxjejsjsksks.ml
lichereuueueue.gq
livesexia.cf
markazi-tc.cf
markazi-tc.gq
markazi-tc.ml
mayket-iran.ga
mayket-iran.ml
mislon.ml
mountaining.tk
novin-adalat.click
o010101010j.cf
p0rdakhti.cf
paeygiri.com
peygieri.com
peygirei.com
peygiri-panel.cloud
peygiyri.com
polwer.xyz
portalesn.com
portkalesn.xyz
prakqme.tk
prc-ir.com
putifar-gangan.gq
q0i1-zx0m-01010js-https.ga
q0z1tb4im5p.ga
rayan-sana.xyz
refahe.xyz
remot-hell.ml
remot-seyedi.ml
rimot-tst.ml
salon-dl.tk
samaneyha.cf
samanosmani23.ml
samiram-mame.ga
samiram-mame.gq
samiram-mame.ml
samiram-mame.tk
sanator.lol
sandilom.ga
sarane-nan.cf
sarane-nan.com
sarane-nan.gq
sdfion.xyz
sdghim.ml
sdilen.co.uk
sdilsn.co.uk
sdinmg.cf
sedil.wiki
senea.cf
senea.ga
senea.gq
senea.ml
senea.tk
ser-opo.tk
serdlin.tk
serlinr.cf
siaqwe.ga
sighai.cf
sighe-iran-ir.cf
sighe-iran-ir.ga
silion.xyz
siljmr.ml
sissn-1om.ga
slidrin.wiki
sn-adl-eblqsnilopn0.ga
snaedil.com
sndirm.cf
snildl.co
sopi-edg.ml
star-new.lol
taqva.cf
tfdrtdtfdjk.ml
ufisna.com
up-dadsara.com
webedarlat.xyz
webpolwer.xyz
wern-asdfm.ga
wert-asxbn.tk
yno-peygir.cyou
yunbanm5.ga
ns1.o010101010j.cf
ns1.samanosmani23.ml
ns2.o010101010j.cf
ns2.samanosmani23.ml

# Reference: https://www.virustotal.com/gui/ip-address/95.181.161.254/relations
# Reference: https://www.virustotal.com/gui/file/17f154479152a372be70d5441246a6e85e71a32cdce0e470065b031bb3715c86/detection

remote-best.cf
ad-lie.ga
ad-qm.xyz
adil-iren.cf
adir-li.tk
adkholrey.ml
adl-conteir.ml
coinsolution.tk
fir-gh.ml
gfhfghghhgfj.tk
goir-go.ga
hamta-iran.gq
hemayt-rayane.ml
htmta-iran.ml
htmta-iranmmmm.ml
ir-adli.ga
ir-foir.tk
nw-rea.tk
pn-eblegh.ml
qmi-adl.xyz
shop-rdix.ml
tabchi-arsllan.ml
tikwebir.cf
vzartir.cf

# Reference: https://www.virustotal.com/gui/ip-address/95.181.161.209/relations
# Reference: https://www.virustotal.com/gui/file/e93dd572c08dd5402fb3a34dd7015c521fbfa0e9daba9dedb7955782f0ca167d/detection

adl-center.in
adl-center.online
adl-snae.tk
adlirn-sana.ml
bargheman-ir.ml
dadgstreie.gq
dark-rem.tk
ddsra.ga
ddsra.ml
djvisicm.ml
dr-saz.cf
ebiligiieh-sanap.ml
ebiliqie-irsna.ml
ebl-edallate.tk
eblagh-da.ml
eblagh-er.ml
eblghiehe-irsna.ml
ebliqiehe-sanaps.ml
edl-center.nl
edu-center.eu
edu-center.us
hamdam-yab-ir.cf
hamta-fan-ir.ml
insta-log.ml
ir-ablaghie.ml
ir-dadgostari-sana.ml
ir-follwertik.ml
kart-melii.tk
melat-ir.ml
newe-eblghe.tk
semaneh.uk
shop-sap.ml
sianat-meli.cf
sighe-hallahs.cf
sighe-ir.ml
sigheg-on.ml
siyanat-ir.ml
snafta-ir.tk
snapkomak.tk
trustwallet-im.ml
vacsan-ir.tk

# Reference: https://www.virustotal.com/gui/file/e50d15ea51e487272e017b5ec39f8278e02a879496a1ff26a037c77179420de0/detection

commo.ir

# Reference: https://www.virustotal.com/gui/ip-address/91.223.82.6/relations

addlern.digital
adianqo.uno
adilapp.digital
adilran-ir.ga
adilran-ir.gq
adilran-ir.tk
adliran-ir.space
adliran-meli.site
adliran-site-ir.cf
adlisna.uno
adllity.zone
arizydigitall.tk
bqmi-ern.tk
bqmi-ernx.cf
d-payment.cf
d-payment.ga
diwarha.tk
ebliqhs.tk
edalat.email
edalatir.ga
edalatire.tk
edilat.digital
edilti.uno
ediltie.tk
ediltoi.uno
ediltoiq.tk
edlsanhj.tk
edlsanop.email
edrsmf.uno
eidalat.zone
eidalatd.uno
elatadesan.ml
elatadesan.tk
esamam.me
fetasnb.ml
i-shan.ir
inelat.uno
ir-edisn.tk
iran-eblagh-ir.cf
iredsln.tk
isnial.digital
king-mester.tk
mediadll.tk
neew-sha.gq
new-saq.ml
new-see-iran.email
payment-sana.ml
payment-sana.tk
pom-new.xyz
pom-shq.com
pom-shq.ml
rat-remote-kingscam.tk
samaneye-sana.ga
san-neew.cf
san-new.gq
san-pomw.cf
sernide.tk
shapark-eblagh.ml
sihge.ga
sna-edlt.tk
snaied.uno
snedalm.tk
tabgi-host.tk
vair.uno
vamir.digital

# Reference: https://www.virustotal.com/gui/file/580651faba9fe0f9d188b721697e6f560211155d816708078b5c2852bbacf856/detection

rimot.xyz

# Reference: https://www.virustotal.com/gui/file/c438a3794207612fb6a04234db93ea0d6afbd6c5533e058657e011d5571d2cd9/detection

farmspn.ml

# Reference: https://www.virustotal.com/gui/file/11a6eda2e4c3e2184983c70995c206bdab8d0cc84595d3cde047db6071606652/detection

irantafb.tk

# Reference: https://twitter.com/malwrhunterteam/status/1536447238611804160
# Reference: https://twitter.com/midnight_comms/status/1536464844194447360
# Reference: https://www.virustotal.com/gui/file/b2ee8266233bd20b3b477fb36a69b07c6043cdb0192c844d88c49e606cc1381b/detection

alidizstartf.xyz
indastanabade.xyz
/RezaDivar/GetLink.php
/RezaDivar/PingDevice.php
/RezaDivar/RegisterDevice.php
/RezaDivar/UpdateDevice.php
/RezaDivar/UploadSms.php

# Reference: https://www.virustotal.com/gui/file/1a8342f79b002ff8b3140f27d54a9cb2962d2a6d946e9339b779838aef81ac54/detection

ad-shaparak.gq

# Reference: https://www.virustotal.com/gui/ip-address/185.73.115.158/relations
# Reference: https://www.virustotal.com/gui/file/fb77a0e0ce719877c7104d2206eca9800ae390ea441996af2ca1aa03c6baa35f/detection
# Reference: https://www.virustotal.com/gui/file/f763535f6137bf4295c494e205d31a2b8c0fa271dbbfd9aacd4a5186db849b22/detection
# Reference: https://www.virustotal.com/gui/file/ad0ccd8886ee7d594047c7aa59eeca8a1671e0eba84ad9029424fa849da15033/detection
# Reference: https://www.virustotal.com/gui/file/85dcb883d0a3b75d18069d46d6b891603436f22744b0f3dde4ccc290dc90a079/detection
# Reference: https://www.virustotal.com/gui/file/6e9bafe47ceaeda715015f1439ef83402ee7273fbf920ca7ea14c2e95128664d/detection
# Reference: https://www.virustotal.com/gui/file/60d4847d936d9f8f26bc6f86b506bc17c2c28b23cc4610a94fe622bd6a91fd89/detection

defeserremote.xyz
wprowprorlflr2w.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1539612228051165186
# Reference: https://www.virustotal.com/gui/ip-address/192.227.158.58/relations
# Reference: https://www.virustotal.com/gui/ip-address/45.148.145.156/relations
# Reference: https://www.virustotal.com/gui/file/1aebaec4e84c940f63d5c1186e8b6ad1d7beb79f2b4c9ff12c523e309be09f3d/detection
# Reference: https://www.virustotal.com/gui/file/fda58e1a679fe1797dcd06048eb58dbf65c0b58e254ae552a87449a906d22341/detection
# Reference: https://www.virustotal.com/gui/file/cc5c482d8afc11d06c5f270126a1665ce3a40e64b975e3255deac9fef82dd175/detection

abnsdf.ml
abpoll.ga
abpoll.ml
abpoll.tk
acdpe.cf
acdpe.gq
acdpe.ml
acdpe.tk
adalet.ml
adcgdr.ml
adcgdr.tk
addbzna.ml
adelane.ml
adesri.cf
adesri.ga
adesri.gq
adesri.ml
adesri.tk
aetqwoi.tk
ahnzb.gq
aisioiie.ml
aisioiie.tk
alikinghell1.tk
amasip.tk
amestar.cf
amestar.ga
amestar.gq
amirturk.tk
amirwex.tk
amsdp.tk
ap-sighea.ml
apidas.ml
apksi.ml
aponk.ml
apouch.ga
apouch.gq
apouch.ml
apouch.tk
app-edlle.tk
apps-ebie.tk
apps-edle.tk
apps-sna.tk
areuri.cf
areuri.ga
areuri.gq
areuri.ml
aryuio.ga
aryuio.tk
asiosi.gq
asiosi.ml
aswei.ml
aszwi.ga
aszwi.ml
ausuc.cf
ausuc.ml
avnmz.tk
awf87t7igaufhgajh.tk
awfihwfhfwook.tk
awfrywafgh.tk
axcver.ga
axcver.ml
axcver.tk
azoiro.gq
azpwe.tk
barqq-ir.tk
barrq-ir.ml
bauskc.tk
bich-remot.cf
bk-to3el.xyz
bobew.gq
bobew.ml
brghmn2.tk
bsrak.tk
cchckecermmdapi.ml
cecioe.cf
cecioe.gq
cecioe.ml
cecioe.tk
cionic.cf
cionic.tk
cna-eblagh.tk
crate-wallet.tk
dabnzm.gq
dajajsjsshah.tk
dalxna.tk
dapbek.gq
daporn.gq
daudgah.cf
daudguh.ga
daudguhi.ml
daudguhi.tk
daunbs.tk
daymon.tk
divan-keshvar.ga
ebaun.ml
ebblqh-ir.tk
ebl-agie.ml
eblagh-asi.tk
eblagh-ir.ml
eblaghbn.tk
eblghlran2.tk
ebllagh-ir.ml
edalate-ir.tk
edie-ir.xyz
edipk.builders
edla-ir.xyz
edle-ft.tk
edle-ir.builders
edle-ir.xyz
edle.beauty
edlpk.builders
ehzarey.cf
ehzarey.ga
ehzarey.gq
ehzarey.ml
ehzarey.tk
ehzareye.ml
ehzareye.tk
epirk.tk
eqpwo.tk
etepat.ml
fast-follower.tk
ffuxhikmmjin.gq
fopami.ml
givelran2.tk
gyybie.ml
haamta-ir.ml
hampa-co.tk
hellofucker.tk
hellofuycer.tk
huslav.ga
huslav.gq
huslav.ml
huslav.tk
idrat.tk
iniawfhkfrfwa.tk
inkoial.ml
interrnetarzan.ml
iopqo.cf
iopqo.gq
iopqo.ml
iozexc.ga
ir-dsaz.tk
ir-snnaa-shprk.cf
irann.tk
isi-sharpak.cf
katds.tk
kaznsm.tk
khone-khaly.tk
kissybi.gq
kosnanatagekartnazani.tk
laeiebx.tk
laopls.gq
livealirezadalqak.ml
livedse.tk
livedsexy.tk
liveeeeemshikasrmoj.tk
liveeeemola.ml
liveemolayiietdhx.tk
livemashiiihi.tk
livemollayi.ml
livemollayimsh.tk
lives-sex.tk
lseueyeueueiei.tk
luvejsjskskeek.tk
madarsagmmdf.tk
masterrcraft.ga
maxgame.ml
nahubn.ml
neqw.ml
neqw.tk
nerios.cf
nerios.ml
newtm.xyz
neziwo.cf
oabhsm.tk
obneie.tk
obsah.tk
odlran2.tk
opwc.tk
paychsaz2.tk
payment-tokan.ml
piehcz.tk
pokya.gq
pokya.ml
remot-koniy.tk
remoteclowns.ml
remotepppo.ml
remsai.gq
remteseyedasal.ml
roewz.cf
roewz.gq
sabibd.tk
sabnme.tk
sahame-edait-ir.tk
samane-barq.cf
sapor.tk
saunbz.tk
sazman-bargh.tk
seghehmdl2.tk
setting-wallet.ga
settingwallet.ml
settting-wallet.tk
sexe-live.tk
sexjaj.tk
sexlivei.ml
sexlives.tk
sghe-ap.tk
sghe-hmdm-2.tk
shakvay.tk
sharj-r.tk
shaypor2.tk
sig-e.tk
sigh-e.cf
sigh-ham.ml
sighae.tk
sighe-ap.tk
sighe-app.tk
sighe-b.tk
sighe-epn.tk
sighe-hlo.tk
sigheai.tk
sighean.tk
sighey.tk
sigheyae.gq
siko.tk
sikokillerbet.tk
sjsshss.tk
snadebl.gq
spauab.xyz
stting-wallet.ml
supere-karlos.tk
suportwaiiet.com
syghe-i.tk
taobda.tk
terkswap.ml
thekingofbet.ml
trqlbn.gq
trqlbn.ml
trqlbn.tk
trust-setting.ml
trust-wallet.ga
ubskam.ml
ukedg.ml
unbiak.tk
unskam.gq
upaygir2.tk
upirre.ml
upirre.tk
userda.gq
usrnbsj.tk
uvbzna.gq
viopm.gq
viopm.ml
viopm.tk
vipcodel.ga
viponio.ga
viponio.ml
viponio.tk
volaka.tk
vopawio.tk
vorod-dudgah.tk
vwexi.ga
vwexi.gq
web-trustwallet.tk
webamsdp.tk
wiprh.tk
wiqlr.mom
wisna.tk
wrbir.tk
xarmy.cf
ybalfm.tk
ycakd.gq
yoyrego.tk
yzxch.ml

# Reference: https://www.virustotal.com/gui/file/0110aec813c4c0d75ad2d18491b80ba6affcabb9e7d553fb0d1e9d9cf5bac981/detection
# Reference: https://www.virustotal.com/gui/file/52931ebf8a5192ba328d64eac9c2fb275c19013c04891b33f8d124713eafc1b3/detection
# Reference: https://www.virustotal.com/gui/file/b4b0e5d1170f8c6085860845437b861dde757a34620fddee1d258d9df97f1d28/detection

rimote.xyz
welaogh.shop

# Reference: https://twitter.com/malwrhunterteam/status/1544056230863376387
# Reference: https://twitter.com/midnight_comms/status/1544365460602245121
# Reference: https://www.virustotal.com/gui/ip-address/46.23.109.149/relations
# Reference: https://www.virustotal.com/gui/ip-address/88.218.17.127/relations
# Reference: https://www.virustotal.com/gui/file/eff8594aa83411948b1e2211795f22064dec6b43fab36f08a053fbdda4b8c68f/detection

app-me.host
vip-app.cf
afsrg.com
azknc.com
dhnma.com
fjzuv.com
gmhaj.com
hsfdf.com
hsjcb.com
hskcm.com
hsnch.com
jkjdfs.com
jsgcb.com
jvdmn.com
jwhic.com
kdgck.com
kdhcj.com
ksbxu.com
ldrgh.com
mduxb.com
mmd-shz.tk
nshch.com
nsyud.com
oagsk.com
sdefrt.com
shnmz.com
shpaz.com
shpqz.com
shqpz.com
wtfdm.com
wtfhb.com
wtfzx.com
pay-shaparrak.tk
azknc.fjzuv.com
dhnma.shpqz.com
kdgck.shpqz.com
kdhcj.fjzuv.com
ldrgh.sdefrt.com
nsoagsk.hsjcb.com
nsyud.ksbxu.com
oagsk.hsjcb.com
shnmz.ksbxu.com
wtfzx.jwhic.com
/amir/rat.php
/amir/url.txt

# Reference: https://www.virustotal.com/gui/ip-address/213.202.212.117/relations
# Reference: https://www.virustotal.com/gui/file/68698c809d4e45f4fa2fc509fe9593f195f7465d66af76dd6dbd49aa0cedec5e/detection
# Reference: https://www.virustotal.com/gui/file/0a4be97009c473126589c22b8840f9c6be714f2893a5b408525d3fa57a5b3d7d/detection
# Reference: https://www.virustotal.com/gui/file/29a6bac0884a2a5bece982cd034af2da0cf4b33429873781c6a5511471f82bc1/detection
# Reference: https://www.virustotal.com/gui/file/3d42afb6b462868b42373c35fbd0b3a687961b135c840bc126d9fc4cb8954d44/detection

abdullahbtw.me
accouninthanlsc.tk
accountsfn.xyz
addbzan-ir.tk
adl1ran.cf
adllran.tk
alanoitaliano.pl
alfa-service.tk
aminpardazan.tk
amnpardazesh.gq
astroxhosting.com
automxh1s.site
b9hclub.games
baharpardakht.tk
bakawap.gq
barannama.tk
barnamesazan.tk
bastehsaman.tk
batlantiquebrci.com
battlegroundmobileindiaredeem.gq
bax-d.tk
bax-e.tk
bax-g.tk
bax-i.tk
bax-q.tk
bax-t.tk
bax-u.tk
bax-w.tk
bax-y.tk
baxbot.tk
baxsbot.tk
benamshop.cf
bestmobi.ml
bestmobi.tk
bgmieventofficialstar.xyz
bigdhon.com
bitshop-e.cf
black-coder.tk
bosnigozar.tk
botpardazan.tk
bottelegram.tk
boulwardgozar.tk
bpm-saraparak.ml
br3-sid.ml
circuzo.tk
circuzo365.tk
circuzohost.tk
cloudingbot.tk
codeshop.ga
codeshopvip.tk
control.tec-info.tk
copyrightcompanies.tk
cosmoismylove.tk
cpacenet.tk
cracked-game.com
crazyanimalcactus.ninja
cubepixel.host
customer-assistant.online
demopurpose.tk
demoweb1234.ga
digi-web-lev.gq
dnrr.tk
doithegiarefree.tk
dvfb.toitulam265.tk
eadlhamrah.ml
eb-webramz.ml
eblafuq.tk
eblaghie-online-ir.cf
eblaghie-online-ir.ga
estoneexchange.com
evertony.ml
filimoir.ml
findetehran.tk
fixemee.ddns.net
flacebook.ml
flashsub.tk
fm.sanujanc.tk
forzshop.cf
friends-forever.tk
gali-onlineban.tk
gali-sec.tk
galiciainthks.tk
galikc1.tk
galiser.tk
gautampro.tk
ghequa.gq
gjh71dk6dj5hlfklj.com
glembu.com
globalradarconnect.net
goldenhost8.tk
heek.ml
hellalgaran.tk
hopbot.cf
hosseindel.tk
hquancutes1tg.gq
ianparodi.com
includemi.com
instatech.me
ir-online-live.ml
ir-online-live.tk
iranarz.cf
iranliveonline.tk
iranteh.tk
jabook.tk
jm-digital.store
kartexbin.ml
kcartbit.ml
keyvipvn.tk
khansaabsmm.tk
kiakia.tk
killshop.tk
knowledgesharingblog.tk
kontakto.tk
kookoogaming.tk
kotob.ga
kotobi.ga
ldfollowers.live
ldfollowers.tech
linksub.tk
liveasistance.xyz
m-mahdi.tk
m71l.com
mahnamebot.tk
mainsmmcom.tk
matinkkkkk.tk
maxservir.tk
meerna.me
memedesimo.tk
mo-xz.tk
mpanel710.tk
mpranotewebku.tk
mrkiler.tk
mydigitalcart.gq
myketnambur.cf
mysoc.tk
namberownpool.tk
naranx.tk
neginrezaei.tk
neginrezaeiii.tk
neweblagh-sana.tk
newsalwys.com
nottyx.xyz
omega.alanoitaliano.pl
omidsazan.tk
onlineban.tk
osgtm.ml
owoo.tk
paigiri-iran.tk
paigiri.tk
parawarjaintia.tk
pardakhtbot.ga
pardakhtehran.tk
pardakhtgaranamn.tk
pardakhtgaranemomtaz.tk
passandazanefarda.tk
pastiglieperdieta.tk
paybill.dynv6.net
poblo-yar.ga
poolestanee.tk
poolkcart.ml
popcorns.cf
popcorns.ga
popcorns.gq
popy.tk
postyz-sana.gq
potoncita.com
psigiriy-iran110.ga
quanmxhthainguyen.tk
rayannama.tk
rem-doost.tk
remote-end.tk
remote-ku.gq
rockads.tk
roshdestan.tk
saderatearzi.tk
samaans.tk
samanebox.tk
samanenour.tk
samanparak.cf
sanaa-qo-ir.ml
sanujanc.tk
sanujans.tk
sanujasvps.tk
say-parapak.ga
sazmanneh.ml
scars.gq
secgali.tk
seenkia.tk
selaminko2345.gq
seo-studio.ga
seopanel.ga
shahkarefarda.tk
shahparyan.cf
shaparak-bpzz.cf
shaparak-ir-meli.tk
shlarak.ml
shoes-farda-shmal.tk
shomarestan.tk
shop-kal.ml
shop-kal.tk
shop-sap.cf
shop-sap.gq
shopdat09.tk
shopdatvina.gq
shopgamevip.gq
showtak.gq
shzremeb.tk
sidhant.ga
sidhant.ml
silvudv.tk
silvudvsd.tk
sivccert.tk
slqgl-ir.cf
socialexchangedemo.cf
splexhosting.net
splexmail.ml
ssecure.online
ssiveldv.tk
sslfree.tk
stacx-dev.tk
subdath.fun
subhongquan43.xyz
sulvedvs.tk
tec-info.tk
tehranpardakht.ml
tehranpaydar.tk
tehranshoping.tk
testearb.tk
theniclesty99.gq
thongtinuytin.gq
tijwal.ga
tiketshop.tk
tiktokdl.sanujanc.tk
toitulam265.tk
trustwallet-eng.tk
tstdelbara.tk
ttstbex.tk
twood.tk
userhat.cf
usershoping.gq
valct.tech
validservice.tk
vanilla.lol
vatanestan.tk
vatansazan.tk
virtualryzentools.tk
vivekshop.ml
vodsbot.ga
vqhteam.xyz
vqhteamtlbot.ga
web-sh.cf
web-sh.ga
web-sh.ml
web-sh.tk
webaddbzan-ir.tk
webalanoitaliano.pl
webalfa-service.tk
webamnpardazesh.gq
webbarannama.tk
webbarnamesazan.tk
webbastehsaman.tk
webbattlegroundmobileindiaredeem.gq
webbaxbot.tk
webbaxsbot.tk
webbigdhon.com
webbitshop-e.cf
webblack-coder.tk
webbosnigozar.tk
webbotpardazan.tk
webboulwardgozar.tk
webcloudingbot.tk
webcodeshopvip.tk
webcopyrightcompanies.tk
webcustomer-assistant.online
webeadlhamrah.ml
webeb-webramz.ml
webeblaghie-online-ir.ga
webfilimoir.ml
webforzshop.cf
webfriends-forever.tk
webgautampro.tk
webglembu.com
webglobalradarconnect.net
webgoldenhost8.tk
webheek.ml
webhellalgaran.tk
webhopbot.cf
webhquancutes1tg.gq
webir-online-live.ml
webir-online-live.tk
webiranarz.cf
webiranliveonline.tk
webiranteh.tk
webjm-digital.store
webkcartbit.ml
webknowledgesharingblog.tk
webkotob.ga
webkotobi.ga
webldfollowers.live
webmahnamebot.tk
webmaxservir.tk
webmpranotewebku.tk
webmysoc.tk
webnamberownpool.tk
webnewsalwys.com
webomidsazan.tk
webowoo.tk
webpardakhtehran.tk
webpardakhtgaranamn.tk
webpardakhtgaranemomtaz.tk
webpassandazanefarda.tk
webpoolestanee.tk
webpoolkcart.ml
webpopcorns.ga
webpopy.tk
webpotoncita.com
webrabetgozaran.tk
webrem-doost.tk
webrockads.tk
webroshdestan.tk
websaderatearzi.tk
websamanebox.tk
websamanenour.tk
webseo-studio.ga
webseopanel.ga
webshahkarefarda.tk
webshiro.tk
webshlarak.ml
webshomarestan.tk
webshowtak.gq
webshzremeb.tk
websiteface.tk
websplexhosting.net
websubhongquan43.xyz
webtec-info.tk
webtehranpardakht.ml
webtehranpaydar.tk
webtestearb.tk
webthongtinuytin.gq
webtijwal.ga
webtstdelbara.tk
webttstbex.tk
webuserhat.cf
webvatanestan.tk
webvodsbot.ga
webwebshiro.tk
webyavaraneomid.tk
webyooz-shop.tk
webzuuniverse.space
well-fargo-account-protection.tk
wells-protection.tk
xbdksklslskdjd.tk
xseeyoux.tk
yavaraneomid.tk
yooz-shop.tk
youseftechno.tk
zackworld.ml
zathiheo.tk
zaypaihtetportfolio.tk
zoxo.tk
zuuniverse.space

# Reference: https://www.virustotal.com/gui/ip-address/20.77.43.47/relations
# Reference: https://www.virustotal.com/gui/file/de6ca9b6c535bbaeec7ca37500e80f2dc7dc1e1933d21837a02caeb05e196a4f/detection

aadltiran.boutique
adallat--1401.tk
adl-14001.ga
adlt-iran.boutique
aidl-iran.boutique
asdllran2.tk
awior.ga
bahpadrmz.tk
dadgahieir.cf
dadgahieir.ml
dssd-cdwssssfj.ga
eadll-iran.cf
eadll-iran.ga
eadll-iran.gq
eadll-iran.ml
ebiagh.boutique
edalateire.tk
edalatire.ga
edltiran.boutique
edlxe.tk
eedl-iran.gq
eladate.ml
elanmask.boutique
estelame.boutique
exartn.cf
exartn.tk
godret-shah.online
gsoxnxow.gq
gy-ey.tk
iranine.xyz
iranion.boutique
iranion.gifts
iranion.lol
iredalat.tk
live-webb.cf
mey-myket.tk
mykt-nt.tk
odl-iran.cf
odl-iran.tk
padan-zeb.tk
pakadpakd.tk
panel-ratra.gq
panel-ratta.cf
peygirir.ml
peygirir.tk
plakdxkw.tech
radl-iran.cf
radl-iran.ga
sana--pxswhlkvg.ml
sanaadlin.tk
sanebillagh.boutique
shparkorg.tk
shprkinfo.tk
shrjpaynashnal2.tk
siigecom.tk
webaadltiran.boutique
webadlt-iran.boutique
webaidl-iran.boutique
webasdllran2.tk
webawior.ga
webdadgahieir.ml
webdssd-cdwssssfj.ga
webeadll-iran.cf
webeadll-iran.ga
webeadll-iran.gq
webeadll-iran.ml
webebiagh.boutique
webedltiran.boutique
webedlxe.tk
webeedl-iran.gq
webelanmask.boutique
webestelame.boutique
webexartn.cf
webexartn.tk
webgy-ey.tk
webiranine.xyz
webiranion.boutique
webiranion.gifts
webiranion.lol
weblive-webb.cf
webmey-myket.tk
webmykt-nt.tk
webodl-iran.cf
webodl-iran.tk
webpadan-zeb.tk
webpanel-ratra.gq
webpanel-ratta.cf
webradl-iran.cf
webradl-iran.ga
websana--pxswhlkvg.ml
websanaadlin.tk
websanebillagh.boutique
webshparkorg.tk
webshprkinfo.tk
webshrjpaynashnal2.tk
websiigecom.tk
webwipob.tk
webwrbir.tk
webwrblr.tk
webyarane-iran-ir.tk
wipob.tk
wrbir.tk
wrblr.tk
yar-ir.ml
yar-ir.tk
yarane--ir.online
yarane-iran-ir.ml
yarane-iran-ir.tk

# Reference: https://virustotal.com/gui/ip-address/5.135.243.203/relations
# Reference: https://virustotal.com/gui/ip-address/51.91.188.132/relations

1000ghe3.ir
213.academy
accu-optic.com
accunavsensor.com
afcivil.ir
afzoneh-nevis.com
afzoneh-nevis.ir
ajoreazadi.ir
alibabaproducts.ir
alibaghaeinia.ir
alimahjour.com
alimoghaddas.ir
alvandro.ir
amirkhosravan.ir
amlakkhas.ir
andishmandaniran.ir
appleidsell.ir
aryanbime.com
asarkharid.ir
asarpro.ir
asiyabani.ir
basaeer.ir
bornasanat-co.ir
bshmoghadas.ir
chamannejadian.ir
cncmegamaker.com
coldshop.site
coldshops.gq
cpanel-license.xyz
cslesani.ir
dollshousemoein.ir
dr-bidar.com
ecotak.ir
elmjoyanjavan.ir
faramovie.ir
fastpnet.xyz
foamara.com
ghara1400.ir
hassansadkhosravi.ir
hastiposh.ir
hosseinirad.de
hostasa.ir
hw-shop.ir
iust-educent.ir
jahesh-co.com
kamalafarin.com
kamalafarin.ir
kaminaz.ir
kamvardina.com
khalafian.ir
learnasan.ir
lorian.ir
luxiilo.ir
mahdiasgallery.ir
mahdinazifi.ir
manbegam.ir
medad.site
mehdidindar.ir
mfh-co.com
milcp.xyz
milvpn.xyz
mkejani.ir
mmjmarket.ir
mozeiri.ir
mr-alizade.ir
mrdindar.ir
n-asar-rr.co.ir
namalakp.tk
negarpardazesh.ir
nethostingtalk.ir
next-in.ir
nokhbeganqods.ir
pasarwood.com
performoffice.com
pranssmatic.ir
projectoverflow.ir
proprojectbot.ir
rahashopp.ir
saqarmarket.ir
say-parapak.ga
schoolmanagementsystem.ir
selinbeauty.site
sepehrkalatehran.ir
serverpix1.fun
serverprox.xyz
shakibservice.ir
shecharisma.com
shegma.ir
shiapajooh.ir
shiapajoohi.ir
shmh-edu.ir
shmh-majazi.ir
sport3news.ir
storeantik.ir
tamalakp.tk
telhostk.fun
telshap.ml
toysun.co
toysun.ir
web-burger.ir
webasa.ir
webcoldshop.site
webelmjoyanjavan.ir
webhw-shop.ir
webiust-educent.ir
webmrdindar.ir
webnamalakp.tk
webprojectoverflow.ir
webserverpix1.fun
webserverprox.xyz
webtelhostk.fun
weco.style
woody-handmaids.ir
yaparak.ml
zagrosco.org
zagrosgroup.co

# Reference: https://github.com/ti-research-io/ti/blob/main/ioc_extender/TF_SMSspy.json

adal1401.tk
adl-eran.cf
adl-eran.hgjgjg.tk
adliiran-sena.cf
adliiran-sena.ml
afrod-saina.hgjgjg.tk
afrod-saina.tk
dadgahieir.tk
dadghameli.com
dalateda.com
diltelr.ga
eblaagh-lr.ml
eblagb-adliran.ml.followern2.tk
edallateire.xyz
followern2.tk
halpopen-ir.tk
iran-eblagh-ir.cf.king-mester.tk
iran-eblagh-ir.cf.mester-sew.tk
kimo.vip
linkstrtaj.ga
mester-sew.tk
myadliran.com
ns1.p-server.top
ns1.server-shirazzi.ga
ns2.p-server.top
ns2.server-shirazzi.ga
ns7.p-server.top
ns8.p-server.top
p-server.top
pay-shaparrak.iranzamin.telegramrobot.xyz
rubikas-otp.ml
s1.kimo.vip
server-shirazzi.ga
tika.su
webbpm-saraparak.ml
webkimo.vip
websay-parapak.ga
webxwebapp.xyz
xwebapp.tika.su
xwebapp.xyz

# Reference: https://twitter.com/midnight_comms/status/1549450490743701504
# Reference: https://www.virustotal.com/gui/file/0578a3b8f36fb4cfd254f3db43179a0e7c3aa5c74b86a294159431a88fcf6d20/detection
# Reference: https://www.virustotal.com/gui/file/8774dfe8c18fc06d11c81ffedf55a3918e35ba1128f794374458a77c65a1dfb5/detection
# Reference: https://www.virustotal.com/gui/file/d3ded5770f6d5bea284c35916b6d2e8f5d1da5296824bb81bf1668e80fc77762/detection

delineme.xyz
sentry.phinix.dev
/Lurd_fish/Received.php

# Reference: https://www.virustotal.com/gui/file/e1a5d8c84214bf92f2975b754dbcaf6a22f99922ce9a2e2a5ed8f54ddba7b473/detection
# Reference: https://www.virustotal.com/gui/file/a3a12eb8471e9e7d0eac396c2159c388ef174efc9329dd826c087138d24362dd/detection
# Reference: https://www.virustotal.com/gui/file/9532fd91836bcde6fe4ddd83028f09cc3c18408739b55a47e99fa14e9f32e81f/detection
# Reference: https://www.virustotal.com/gui/file/52da8f74cbec475d162206784bdaff2ec58edda02974f70204019ac1aaaa42af/detection

abialghhi.com
abiiwiili.com
abiwilq.com
abiwliqih.com
edalaata.xyz

# Reference: https://www.virustotal.com/gui/ip-address/85.17.9.222/relations

adleld.xyz
ebblaghye.xyz
eddialatt.site
edialat.xyz
eldalatt.site
instagram-free-follower.xarmy.cf
mehrad.in
bammelli.eddialatt.site
bot.xarmy.cf
eldalatt.edialat.xyz
wallet.xarmy.cf

# Reference: https://www.virustotal.com/gui/ip-address/85.17.9.249/relations

abdiwiq.com
abdlaa.com
abialajh.com
abillagiihi.com
abimoi.com
abiwiigk.com
abiwk.com
abliwiqh.com
abweiqh.com
abwieib.com
adiqiw.com
adirlern.com
adlae.xyz
adleern.com
adlesena.com
adsamane.com
aedliiatdb.com
amanatei.com
amvalia.com
apliaaqh.com
asnade.com
auladgahe.com
balochsag.com
biwiqi.com
bmellibam.uno
bqiwia.com
cb24ir.click
cp-remote.site
crzdest.com
dadgahe.com
destoreme.com
dialaar.click
dolatemy.com
doloperc.com
dorosete.com
e98ir.online
eabqlai.com
ebiliwila.com
eblagyeh.xyz
ebsnea.com
ed-av.uno
ensanae.com
entrler.com
ep24ir.click
es24ir.click
euadal.com
hajirani.com
id24o.shop
inbaramh.com
io5e.shop
io5o.online
ir24oe.click
ir2e.site
ir98e.tech
isb42e.shop
majoliz.com
menmoei.com
merfanz.com
mersers.com
mserises.com
mtasliher.com
nemasin.com
nemishoe.com
nexelearn.online
o24sb.shop
reserche.com
samaneir.com
samenjan.com
seblaghia.com
seblapiq.com
semeena.com
semsedls.com
simanei.com
slameni.com
snebiwi.com
stefaze.com
tentensin.com
txiblagihq.com

# Reference: https://www.virustotal.com/gui/file/69b7cba636ef03dcdb5e2692e4cdaece0a65807496c1719ece10a079c4311621/detection

rayanertebatat.net

# Reference: https://www.virustotal.com/gui/file/6c9c34ae6ac575b3bc0668287de1a85b55b835f04dc4ff835f1164c22951ac0e/detection

rayanertebatshab.com

# Reference: https://www.virustotal.com/gui/ip-address/192.227.134.72/relations
# Reference: https://www.virustotal.com/gui/ip-address/198.144.189.66/relations
# Reference: https://www.virustotal.com/gui/ip-address/45.148.145.138/relations
# Reference: https://www.virustotal.com/gui/file/8b10d29548d66e9ff9d9241505e09b24425e38453991a41ea3836ca2c3223a06/detection

aaaawwww.ml
ad-lirean.tk
adelirn.com
adthcetggy.tk
aeblagherto.tk
akh-joonam.tk
aliraaaan-ir.tk
asdlin.tk
asltk.tk
auvdthcetggy.tk
azerakhah.cf
azerakhah.gq
bame-irani.ml
bank-ke.tk
bazpoorsi.tk
bazpors.cf
bazporsi.com
bazporsi.tk
bbarq-ir.ml
beheshti-mikham.cf
beheshti-rimoote.tk
betuuwcwjogey.tk
buvdthcetggy.tk
buvtsnmtk.ml
campus-kirai.tk
chiyt7uyryu.tk
cuvdthcetggy.tk
dadashambesmelah.ml
dargahpardakht.tk
darghah-joon.tk
darkioneshno.tk
dgjgr.tk
dollarnet-app.ml
dollarnet-app.tk
doset-daram-fata.tk
drgsz-x.ml
drsazihstdie.tk
dsfdfsdsdgd.tk
dyraghstm.tk
eabalaghiryt.tk
eabalahir.tk
eabalahiryt.tk
eabalghiryt.tk
eablgh.ml
eblag-ir.ml
eblagh-markaz.tk
eblaghie.ga
eblaqh-adliran.tk
edalat.builders
edalatum.ga
edalatum.gq
edalatum.ml
edalatum.tk
edaltiir.ml
edialna.tk
edinaa.online
energy100.xyz
energy101.ga
energy102.ga
energy144.tk
energy200.xyz
energy33.xyz
energy3838.tk
energy44.xyz
energy500.tk
energy54.tk
energy843.tk
engei-ir.ml
enonoesnodr.tk
enrgy322.tk
estart-ghadid.tk
eujdhdheiwhegdjfodohd.tk
f7t8t7iij.tk
fata-kon-mekhad.tk
fgjgql.tk
fiil-nakonta.tk
fiilter-nakonin.cf
fordarga-fill.tk
fuvdthcetggy.tk
fyuiiioogh.tk
gdue83bje.ml
ghcdroncsi.tk
ghoran-tv.ml
god-sahaqaeak-ir.tk
hajibesaz.tk
hamdam-yab-ir.gq
hamta-ir.ga
hdsgvkufnoye.ml
he772bje8h.ml
hoopsana.ml
iehraz-adliran.tk
iehraz-adm-ir.tk
ilove-mmad.ml
iran-net-ir.tk
iran-sighe-ir.ga
irmayienwk.tk
isr-shaparak-meilii.cf
isr-shaparak-meilii.gq
isr-shaparak-meilii.ml
isr-shaparak-meilii.tk
jfdkueschi.ml
jiramm-ftanoni.tk
jon-man-fill-nakon.ga
jooorj-konmedeh.tk
joorj-koni.tk
joorj.xyz
jsjsisisi.tk
jsjsususisk.tk
karkon-jonman.tk
kdisiifksjskkalakd.tk
keetab-dars.tk
khak-tosaret.cf
kharabam-fill-nakon.tk
khdajshsh.tk
kianoerniosn.tk
kiram-to-fata.tk
kiramto-fta.tk
kirramtohame-fta.tk
kisiremot.ga
kisiremot.gq
kisiremot.ml
kisiremot.tk
kjh75dd8dy875r.tk
kon-mokham.tk
konlagh-filnakon.tk
koonifta-zeus.cf
kos-mikham.cf
kospalak.tk
kospedarpari.gq
kuvtmnskt.ml
live-592.tk
live-hps.tk
live-live.cf
live-live.ga
live-ttg.tk
live-vedivoo.tk
live-veigami.tk
live-vile.ga
liveneokshin.tk
livesexxy.cf
livesexxy.ga
livesexxy.gq
livesexxy.tk
liveum.ga
liveum.ml
malayt-pardakht.cf
masih-arash.tk
mazenoec-ir.ml
maznonasli.tk
meansmsk-ir.tk
medive.ga
medive.tk
melato-mogam.tk
melli-bam-ir.ml
melli-bam-ir.tk
melonetoneshr.tk
mezonemezoem.tk
milat-ir-iran.tk
mli-inosen-ir.tk
mohsentstt.tk
molayikisihs.ml
molayimhaji.ml
mrx-rmt.ml
mrx666.xyz
msighe.ml
msksksjs.tk
muosic-kade.ml
mydargahsazgoogle.ml
myumlive.cf
myumlive.ga
myumlive.ml
myumlive.tk
nazanin-rimot.tk
nazanin-saham.tk
nazi-khoshgel.tk
nazi-ziba.tk
nenenmoseone.tk
net-meli.ml
net12gigmahmoharam-ir.tk
netfreeovin.cf
netintrnetins.tk
new-acc.cf
new-acc.ga
new-acc.ml
new-acc.tk
newdominok.tk
newpigre.tk
newserverm.tk
nncdtuuhf.tk
notificationi.tk
nrenomseomzs.tk
nuxksksiqt.ml
nvehsnovoo.ml
nwnwnwnwnnwwnnwnwnwnwnwnnwnwnwnwnnwnwwn.tk
otp-fam.tk
paygiri-online.ml
pedaletgholdam.ml
pedarsag-fillnakon.tk
phata.tk
pi-shaparak-meili.tk
pi-shaparak-meilii.tk
piejshsywws.ml
pigiridivar.tk
pigiridivari.tk
pishgiri-fata.cf
pishgiri-fata.tk
polldar.ml
pr-shaprk-meilii.ml
pr-shaprk-meilii.tk
pyiiiryhemmsl.ml
rat-ferdos.tk
ratiovinn.tk
ratovinn.cf
rdcggdsx.tk
remot-rat.tk
remoteclowns.ml
reyovinn.cf
rimot-anita.tk
rmmakergoogle.ml
sa-heamdariu.cf
sa-na.ml
sa-naa.ml
saa-na.ml
sahaamdar.tk
saham-dar-melii.tk
saham-daran-meli.tk
saham-darane.tk
saham-daraniran.tk
saham-edaalt.ml
saham-meli-iran.tk
sahamdar-iir.tk
sahamdaraan.tk
sahamdaran-ir.tk
sahamdaran-meli.ml
sahamr-daran.tk
salam-bereson.cf
salamat-tv.ga
samane-hamta-ir24.ga
sana-24ir.tk
sana-adilan-ir.tk
sana-adlirann-ir.tk
sana-ir-mliii.tk
sana-saman-ir.tk
sanairmobil.com
serverjoorj.tk
shapark.ml
shaparrak.cf
shaparrak.ga
shaparrak.tk
shapparak.ml
shaprak-ir.tk
shaprak-msjqiqwoq.cf
shaptak-shhawuiqiqiqq.cf
sighe-engh.ml
spcarnosnmcn.tk
sr-god-meilii.ml
sr-god-meilii.tk
ssighhemykt.ml
suvdthcetggy.tk
tahmasboiewn.tk
tbchi100.tk
tbchi50.tk
test-fordarghah.cf
test-mikonam.tk
tititititiititititiitititititiitititititit.tk
tof-to-fataa.tk
tof-to-konet.tk
toolboxx-saham.tk
tr-sulotions.ml
trsulotions.ml
trust-swup.ml
trust-walllet.ml
trustsulotions.ml
ufcutsxhiutdxg.ml
uiuiuiuiuuuiuiuuiuuiuiuiu.tk
umlive.gq
umlive.ml
vfwnvw2.tk
vkcbzgsyfu4u.tk
wdfdafdsadg.ml
webbazpors.cf
webbazporsi.tk
webeablgh.ml
webedinaa.online
webenergy100.xyz
webenergy101.ga
webenonoesnodr.tk
webiran-net-ir.tk
webisr-shaparak-meilii.ml
webkeetab-dars.tk
webnrenomseomzs.tk
webnvehsnovoo.ml
webpr-shaprk-meilii.ml
websa-naa.ml
webspcarnosnmcn.tk
webtof-to-fataa.tk
webtof-to-konet.tk
webtr-sulotions.ml
webyqyqyqyyqyqyqyqyqyqyqyyyqyqyyqy.tk
wuiwidudiei.tk
xar-fata.tk
xifzurxgkxf.ml
xznm-ason-ir.ml
yaallahyoum.tk
yaraneh-meli-iiran.tk
yaraneh-melii.tk
yaranneh-mahishati.tk
yarrane-meli.tk
yeudheueb.tk
yqyqyqyyqyqyqyqyqyqyqyyyqyqyyqy.tk
yr8u3virhhe.tk

# Reference: https://twitter.com/MalGamy12/status/1562967009381720064
# Reference: https://www.virustotal.com/gui/file/b18c21501da3eef12f8369ff3a73a3e9275594962ac76aa75e2da66c08d1343d/detection

rabetgozaran.tk
/6bX97UdW/rat.php

# Reference: https://www.virustotal.com/gui/ip-address/92.249.45.112/relations
# Reference: https://www.virustotal.com/gui/file/d86da41bbac1a8c9e04313f0db3c76ab661692e83c218b673e038cb75e42994e/detection

cosmiad.xyz
cosmidi.xyz
ebalat.sbs
eblaqie.sbs
jhone.link
lickers.tk
safedays.ml
/sep/rat.php

# Reference: https://www.virustotal.com/gui/file/ee130db290c431c15602855f2beeec768d73ae70b64a152bc51f3f0171be30ae/detection

evadlie.com

# Reference: https://www.virustotal.com/gui/file/de33e6dbd96021368e99cee200726599b1c2f8c1720b47bfc763942895837ce2/detection

ubebsni.page

# Reference: https://www.virustotal.com/gui/file/179b90a9566cadbaed5d9252513e0e67de40aa2d430b4658aa3629d53d5d161c/detection

jighju.com

# Reference: https://www.virustotal.com/gui/file/0411d0ab80171bf29a481608d60d4ad55f193b9bbb64c0520df2e4da941ed031/detection

glaknohjujm.ml

# Reference: https://www.virustotal.com/gui/collection/40a007fa13122d99dfce3bdb931611de37bb6b055fec6d6d2e3daac17618db65

185.235.43.67:8080
188.34.186.189:7073
adliran-sana1s.com
adliran-sps.cf
adliran-sps.ga
adliran-sps.gq
adliran-sps.ml
adliran-sps.tk
adliraniqw.cf
adlirantesla.gq
adlliranvw.tk
adlsana-ir.tk
adlsana.live
adrilnem.botvip.xyz
b4ir.sbs
bazpoorsi-markezi.tk
botvip.xyz
celebonparposha.ir
covax-ga.gq
d1.kimo.vip
dad-sarai.mom
dadsara19.baby
dansho.tk
direct.safone.tech
divar21665.xyz
eazy-samanehh.xyz
eblagh551.tk
eblaghie-sanas.cf
eblgh-sanae.tk
edalat-sana.mom
eddallatt.ml
edlat-hamrah.mom
edlat-sana.ml
edlat-sana.tk
er-dadsara.gq
ewblaqqieh.org
fexmantui.cf
glycloud.ml
glycloud.tk
insaz-samane.xyz
li-frin3ds-dlt.ml
li-link.herokuapp.com
lin2.link
maryket-in.tk
nazi-naz-nakon.tk
nervoushastam.xyz
nima-12.ml
omid-xbot.herokuapp.com
payamsocialimon.site
pep-saman-bmb.tk
pigi-ed.tk
pigre-edti.tk
py.tgdl.cf
qtourq.ir
re-service.ml
re-service.tk
saaiy19.mom
saberoi.gq
saham-darmelii.site
saham-darrmelii.ml
saham-edalatam.tk
saham-supoortto.ml
sahamdarisod.tk
sana-black.click
sana-blacka.tk
sana-digital.ml
sana-eblgh-gov.tk
sana-emeil.ml
sanablagh.mom
sanai151.mom
sanai19.baby
sanaiys1.mom
sanapaoamla.ml
sanavw.tk
shaprkk.tk
siejjejysyhss.ga
sms-dynamite.tk
te1files.ddns.net
tgdl.cf
the-end.ga
ueblghukm.gq
upir.ir
xfdl19.mom
xn--mgba8ac3gkj19e.ga
xn--mgby1cr00cvg.tk

# Reference: https://www.virustotal.com/gui/file/3cf954003a8aec7e0a08fb5926975cfb45a0bda948e75603fb570d6b89fc538a/detection

luiveusk.ml
xn--mgb2dlba59cthb.ga

# Reference: https://www.virustotal.com/gui/file/cfdbd0328c5e10eaba3a083e7bc6969d7891d1c4157042f33024e382bbbc0909/detection
# Reference: https://www.virustotal.com/gui/file/c2379cbc2ac2098f3435b3bb5ca8c03d86dcd30f1d1bf3311fe79b15443f3c2e/detection

jooki.tk
remotes.ga

# Reference: https://www.virustotal.com/gui/ip-address/23.95.191.199/relations

1401-06-26.ga
1401-06-ead.ga
ablisloove.h2h2h.tk
ablisloove.tk
adl----ir.ga
adl--ir--fta.tk
adl-ftak.ml
adl-ftak.tk
adl-iran-----fta.tk
adl-iran-qq.tk
adl-irans-ft.tk
adl-qq-fta.tk
adleiran.cf
adleiran.h2h2h.tk
adleiran.site
aredashkose.h2h2h.tk
aredashkose.tk
arekoobse.cf
arekoobse.h2h2h.tk
botclowns.h2h2h.tk
botclowns.tk
deletedshod.h2h2h.tk
deletedshod.tk
dl-app.h2h2h.tk
doostyabi-reza.h2h2h.tk
doostyabi-reza.tk
eblage.lol
eblaghye.lol
echadelivecom.tk
edalet.vip
ediran.vip
edlaghie.vip
edldjdag.mom
electronicsana.h2h2h.tk
goftamkezbe.h2h2h.tk
goftamkezbe.tk
gooyesh.h2h2h.tk
gooyesh.tk
h2h2h.tk
hatmandash.ga
hatmandash.h2h2h.tk
jooki.h2h2h.tk
kh-ale-reza.h2h2h.tk
kh-ale-reza.tk
koobs.cf
koobs.h2h2h.tk
kosnntddosbzani.ml
kosped.cf
kosped.h2h2h.tk
loove.h2h2h.tk
loove.ml
lovebazi.h2h2h.tk
lovebazi.tk
maka12peigiri.tk
makoahqqo8n.ml
moqir.tk
moshahede.guru
moshahede.lol
nadashkezb.h2h2h.tk
nadashkezb.tk
ns1.makoahqqo8n.ml
ns2.makoahqqo8n.ml
ooblagh-ir.h2h2h.tk
ooblagh-ir.tk
oqpqpqpqk.tk
pankiindirect.tk
pedarmmdok.tk
peygiri.uno
poiler.ml
porqer.h2h2h.tk
porqer.tk
protters.h2h2h.tk
protterse.cf
qnrim.h2h2h.tk
rayega.h2h2h.tk
rayegane.cf
remoteclowns.ml
remotes.h2h2h.tk
reza-kose.cf
reza-kose.h2h2h.tk
rmtm33.tk
s-ana.h2h2h.tk
samairan.vip
samanae.vip
samaneiran.co
sana-electronic.h2h2h.tk
sana.h2h2h.tk
sanna.h2h2h.tk
sieghlonthcstg.ml
sighlonthcstg.ml
sighlonthcsttg.ml
taeminejemaii.h2h2h.tk
taeminejemaii.tk
truaaatestwaaeoqlt.ml
trust-wallettool.ml
trustwallet-site.tk
wabit.cf
weqil.ga
widehjeejjeeewsdh.tk
wikot.ml
wikot.tk
wimeg.tk
wingo.cf
wipab.gq
wipoh.ml
wix-100.tk
wpiot.ml
yaaalaha.tk
yaalafwhof.tk

# Reference: https://www.virustotal.com/gui/ip-address/116.202.172.45/relations
# Reference: https://www.virustotal.com/gui/file/9c3e0fa862609d1ec431d12b66dcbfea76cbca7e36f9714eea810eadf7c564c5/detection

bot-remote.tk
dl-nimbaha.cf
eagle-sources.cf
farmande-live.tk
iranpanele.ir
mehran.server-mr.tk
mmd.server-mr.tk
nimmm2.server-mr.tk
nimmm3.server-mr.tk
nobitex-ir.tk
oghab.host
oghabhost.xyz
oghabhosting.ir
remote-ir.tk
reza-babaei.ir
s46.server-mr.cf
server-mr.cf
server-mr.tk
site-newultra.remote-ir.tk
site-newultra.tk
t13.server-mr.tk
t14.server-mr.tk
t15.server-mr.tk
t16.server-mr.tk
t17.server-mr.tk
t18.server-mr.tk
t19.server-mr.tk
t20.server-mr.tk
usk.oghabhosting.ir
web-live.click

# Reference: https://www.virustotal.com/gui/ip-address/85.10.193.11/relations

amir.gq
amirhossein.tk
apicrypto.cf
ar-team.ir
etrs1.ir
hamid.server-mr.tk
holo-ir.tk
iliyateam.ir
luiveusk.ga
luiveusk.gq
mmd-bilbo.ml
mory1.server-mr.tk
newstatemobile.ir
nimm.server-mr.cf
nimm2.server-mr.cf
nimm3.server-mr.cf
nimmm4.server-mr.tk
nimmm5.server-mr.tk
oghabhost.cf
parsaesfandyari.xyz
pishrorahliv.com
redexshop.ir
s1.server-mr.cf
s3.server-mr.cf
s4.server-mr.cf
s47.server-mr.cf
s48.server-mr.cf
s49.server-mr.cf
s50.server-mr.cf
s51.server-mr.cf
s52.server-mr.cf
s53.server-mr.cf
s54.server-mr.cf
s55.server-mr.cf
s56.server-mr.cf
s57.server-mr.cf
s58.server-mr.cf
s59.server-mr.cf
shoppack-ir.tk
support-shop.ml
t12.server-mr.tk
thesirsamir.com
tron.apicrypto.cf
ucstr.ir
ueblghukm.cf
ueblghukm.ga
ueblghukm.ml
ueblghukm.tk
xxlip.tk

# Reference: https://www.virustotal.com/gui/ip-address/85.17.9.160/relations

adalathamrah.tk
adilran.online
adleeiran.uno
adleiran.ml
adleiran.ml.dadghameli.com
adllalr.lol
adllalr.online
adlllran.online
bmb-plovaek.adalathamrah.tk
bmb-plovaek.tk
bmb-plovaek.tk.adalathamrah.tk
dadesra.com
dadesra.dadghameli.com
dadsralr.online
dadsrea.dadghameli.com
dadsrea.wiki
divarchat.com
ebieaqie.com
ebleaaqie.org
ebliaow.uk
ebliaqh.com
ebwiaqie.com
edlirran.uno
ewlaqhie.org
goleroz.dadghameli.com
goleroz.ga
hamta-ntsw.uno
hamtareg.online
l0l.site
qazaey.dadghameli.com
qazaey.wiki
r-rabit.adalathamrah.tk
r-rabit.cf
r-rabit.cf.adalathamrah.tk
residegi.org
samairani.dadghameli.com
samairani.ml
sanalran.site
sanwgov.uk
secovai.dadghameli.com
secovai.xyz
shakavya.org
shparak-ir.tk
sighehw.cf
webadlllran.online
webdadsralr.online
webl0l.site
whm.l0l.site
yarane-meli.dadghameli.com
yarane-meli.ml

# Reference: https://www.virustotal.com/gui/ip-address/46.23.109.32/relations
# Reference: https://www.virustotal.com/gui/file/1b4fd1821fc6196980e8d6cd67735d296eea26fd20f97d88cea57743c7868a83/detection

airanian.tk
aonmeo.tk
domaiininapp.tk
e-mxz.tk
eoernm.tk
iri-domainmote.tk
iri-samniya.tk
irmsx.tk
kunenanaehy-mashiirani.tk
lavat.fun
msertc.tk
s-nin.tk
sendmeinfo.tk
soelxs.tk
weopma.tk
wfhiahwfihwal.tk
ns1.kunenanaehy-mashiirani.tk
ns2.kunenanaehy-mashiirani.tk

# Reference: https://www.virustotal.com/gui/file/93858ba9c9fb6e5ff3b74bfaf8b950143723fae22f6eef56359b9d5368a0e983/detection

clickbot.site
topapi.xyz

# Reference: https://www.virustotal.com/gui/file/7220b1bbbef245ae8500b3b18bdaa12f68ecb600403cfd8008cce4905efb784d/detection

bastebandi.xyz

# Reference: https://www.virustotal.com/gui/file/46a8660671b8b28f218e90470c11b8dbfc59af478a1ffc9ea7dbc4b90299596d/detection

ebiag-sana.ml

# Reference: https://www.virustotal.com/gui/file/87a74ffbfac95b76731f5e48c5bb62b764aa01a8f221eb4ed2bf1e86f8034b0e/detection

eblg-ir.ga

# Reference: https://unit42.paloaltonetworks.com/malicious-newly-observed-domains/
# Reference: https://www.virustotal.com/gui/file/e9ad04ae0201307e061cdae350c392a6b4537876991b2c97857ea71086fa0496/detection

payment-downlaods.ga

# Reference: https://www.virustotal.com/gui/ip-address/202.87.31.194/relations
# Reference: https://www.virustotal.com/gui/file/2cc55abb99b91f85b6cf67ccdb8a83335e5c9d2a3d8f391b6e11b5e9d8c0accf/detection

shapareak-ir.tk
shaparuk-ir.tk

# Reference: https://twitter.com/malwrhunterteam/status/1584986780943912960
# Reference: https://twitter.com/MalGamy12/status/1585000133602988032
# Reference: https://www.virustotal.com/gui/file/b375e54d6ff5a18d2b90d19be594cedfe1b5393984c1aefa04e4601ba7136820/detection

alidizbayadbiad.tk
/Eblagh/PingDevice.php

# Reference: https://twitter.com/malwrhunterteam/status/1586324265573683203
# Reference: https://www.virustotal.com/gui/file/61efcce633c395d575bae1f4a2ae8b292a71500c171a4e1d1e8ea279155a27d1/detection

irdvsves.cf

# Reference: https://twitter.com/malwrhunterteam/status/1433520441029693443
# Reference: https://twitter.com/bl4ckh0l3z/status/1433539975119704068
# Reference: https://www.virustotal.com/gui/file/403b31100dfe13f9dbf5d45c87710ade1dd6138902c449844ff4ea3f50815840/detection

irvacsine.com
kos-nnt.shop

# Reference: https://www.virustotal.com/gui/ip-address/23.95.197.195/relations
# Reference: https://www.virustotal.com/gui/file/c58760e8c0e5e25c89ae8098d3593a4d4f3e4dfe2de1b7a321aa2757608c3fc7/detection

abl-iren.xyz
abl-peygiry.cf
abllagh-sna.ml
ad-erln.xyz
ad-iran.xyz
ad-jran.xyz
ad-liran.xyz
adel-iren.gq
adeli-iran.ml
adeli-iran.tk
adi-lran.xyz
adi-ran.xyz
adiel-irane.ml
adil-iran.online
adil-irane.click
adil-irane.ml
adiran-meli.ml
adl-e.xyz
adl-i.xyz
adl-iran-ir.xyz
adl-iran-peygiri.ga
adl-iren.tk
adl-mel.xyz
adle-ir.ml
adle-ir.tk
adliran-eblaghe.ml
adliran-service.cf
adliran-service.ml
adliran-service.tk
adliran-sna.ga
adliran-sna.gq
adlirane.site
adliranin.cf
adliranin.tk
adlirnin.tk
adllran-ir.gq
ald-iiran.xyz
aldiram.click
bank-iran.ml
blaighir.ga
divar-e.xyz
divar-hl.xyz
divar-melli.xyz
divar-shp.xyz
dlvar-shop.xyz
e-adi.xyz
e-adl.xyz
eadl-ew.tk
eadl-qw.tk
eadl-we.tk
eadl-wq.tk
ebelagh-iran.tk
ebiligeh-ir.ml
eblagah.ml
eblageh.ml
eblagh-a.ml
eblagh-al.ml
eblagh-ald.ml
eblagh-b.ml
eblagh-e.ml
eblagh-gh-adliran.tk
eblagh-hj.ga
eblagh-hj.ml
eblagh-irn.ml
eblagh-jh.cf
eblagh-kl.cf
eblagh-kl.tk
eblagh-l.ml
eblagh-nm.tk
eblagh-pay.ml
eblagh-pi.ml
eblagh-q.ml
eblagh-r.ml
eblagh-sed.ml
eblagh-sl.ml
eblagh-sld.ml
eblagh-vv.tk
eblaghe-bn.ga
eblaghe-bn.tk
eblaghe.site
eblaghsna-ir.tk
eblaq-web-ir.cf
eblegh-adel.ml
eblegh-ir.tk
ebleghe-iren.gq
ebleghe-iren.ml
eblghi.ml
eblghie-ir.tk
eblghie.tk
eblghir.tk
ebllagh-iran.tk
ebllagh-paygiri.cf
ebllagh-san.ga
ebllagh-san.ml
ebllagh-sane.tk
ebllaghsna-ir.cf
ebllaghsna-ir.gq
ebllegh-iran.ml
edaiat.xyz
edalat-lr.tk
edalathamrah.cam
edalatt.xyz
edalet-iran.ml
edalet-iren.ml
edallat.xyz
edilran.xyz
edl-iiiran.ml
edl-iiran.xyz
edl-iren.ml
edlagh.ml
eedl.xyz
eriblagh-sna.ml
estelam-adl.tk
garaem.gq
garaem.ml
garaem.tk
ham-ta.xyz
i-adl-iran.xyz
ir-eblaghi.ml
ir-eblaghi.tk
ir-edel.xyz
ir-iblagh.ml
ir-iranian-sena.ml
ir-irenian-sena.ml
ir-ironian-sena.ml
ir-peygri-edalet.cf
ir-sena-saite.cf
iran-ebelagh.tk
iran-eblgh.ml
iran-edalet.ml
iran-peygiri.ml
iran-peygiri.tk
iranian-sena-ir.tk
iranian-sena.ml
iren-edalet.ml
irenan-sena.ga
irenan-sena.ml
irenian-sena-ir.tk
irenian-sena.tk
ironian-sena-ir.tk
jaraem.cf
jaraem.ga
jaraem.gq
jaraem.tk
jarayem-iran.ga
lr-adl.xyz
moshahede-adl.cf
moshahede-adl.ga
moshahede-adl.gq
moshahede-adl.ml
moshahede-adl.tk
my-sahm.xyz
neew-sha.tk
new-mal.xyz
peigiri-ir.cf
person-adl.tk
peygiri-samane.tk
peygiri.click
portai-adilsna.ml
portai-adisna.ml
portai-adlisna.ml
portai-esna.ml
portai.cf
pygiiri-ebilagh.ml
pygiri-ebilagh.ml
pygiri-ebilagh.tk
rat-p.xyz
rat-pannel.xyz
residegi.ga
residegi.ml
residegi.tk
samane.gq
san-neew.gq
sarvic-iran.cf
sarvic-iran.ga
sarvic-iran.tk
search-peygiri.tk
senav.tk
servic-iran.tk
service-adliran.tk
service-ir.ml
service-iran.tk
service-peygiri-ir.gq
service-pishgiri.ga
sgd-irn.tk
shekayat-ir.tk
site-iran.ml
site-iranj.tk
t-adl.xyz
take-1222.ml
testdom-59.tk
web-samane.ml
xkaneki.tk
zho-irn.tk

# Reference: https://www.virustotal.com/gui/file/1d05d0933f2746bad101408f68a23914ddb793a0967c919d6b376c5961dae743/detection

samanlg.gq

# Reference: https://www.virustotal.com/gui/file/f7dab7f7f143b7a0526585efe1b6d9fe334e68552b9c34955f4651277bed6a8e/detection

armanrkcc.cf

# Reference: https://www.virustotal.com/gui/file/e9f0397598553c830336b17a542da947d381821ca9dac890091c36d817fa1805/detection

sleepsam.ml

# Reference: https://www.virustotal.com/gui/file/d6aa5e3a861520307cfa4a685385443bc83582b8f9e7dbe5a9eb1e870a50fe2f/detection

shukmio.cf
shukmiu.tk

# Reference: https://www.virustotal.com/gui/file/a2e31ee2568b70c30b44fe571ab48e798a5b4b15d8dcda5716b8d43d430de566/detection

alphakey.ml

# Reference: https://www.virustotal.com/gui/file/49418747576fb25eebab11691b2943235faeee3b51712cf3ef389222c6ad2a09/detection

alphario.cf

# Reference: https://www.virustotal.com/gui/file/38baca4ed0054e45c9de5802568631524c46dde833819130364692cbdf176ef4/detection

cloudbaat.gq

# Reference: https://www.virustotal.com/gui/file/fca034bd237e648bee460f02bf17e6a153ee0b274785c586f7e866e9efef9ae3/detection

sjudady.cf

# Reference: https://www.virustotal.com/gui/file/f4a92794655f1737a9560790d50d8dbfd3e1d4cbb71b317f1ab0841988d81044/detection

armanrkk.ga

# Reference: https://www.virustotal.com/gui/file/e6fbd713b618539217d4566466dc61c168acef20d53779986e9a4360e7c8cb4f/detection

eblaghe-adel.gq

# Reference: https://www.virustotal.com/gui/file/b861ab63e1f7248bbd16945d831347e4ff729316a68c4e87c8dcb9863e5f2134/detection

sleepsam.tk

# Reference: https://www.virustotal.com/gui/file/9da5468adf1638faab6ff7eb133424bdffc42b194c1b77e1d89fb156a0027caa/detection

iranplns.ml

# Reference: https://www.virustotal.com/gui/file/3a06cbfa38d49eea165efe0267e42bb3b347e9436fef88aa1cf9b9cc03c30097/detection

ah-shaperak.ga

# Reference: https://www.virustotal.com/gui/file/f24e7ed9e220a3c400ee6ad238f46e0ae623202d70c9d83802daee582c170fe7/detection

sleepbam.gq

# Reference: https://www.virustotal.com/gui/file/c97b2dcdca20afdbebc7e2217f04cd067c348846d02d037a85f0b76531adbf10/detection

185.8.175.85:8080
sleepbam.tk

# Reference: https://www.virustotal.com/gui/file/ef94e39aacfb050a3972d682f97a7a809a677256c27183337717e039724975c2/detection

pickotyy.gq

# Reference: https://www.virustotal.com/gui/file/ec55da463e34c54216173d074752476434692f329491e645f3fa2374aff1eab2/detection

snowiby.ml

# Reference: https://www.virustotal.com/gui/file/dae08b9c6b930ae8620b295c6f0ab99556f056b420d61350bc5752d8d5682d2f/detection

snowiby.tk

# Reference: https://www.virustotal.com/gui/file/d6b65c1533b2ce79d5f610d29155e6d96cebc56bab8ce5c8d85cb6c6cc18cab2/detection

apptramu.gq

# Reference: https://www.virustotal.com/gui/file/5b85fd4cb35a6ed16c8e24e5b65a5ece7e47c71f892cba3eed6b83f5e5328bff/detection

apptramu.ml

# Reference: https://www.virustotal.com/gui/file/d0991aa9d5a453cff8543c619fb11d50ef202924e1aa4424cc989d78fc3dc27b/detection

farmspn.tk

# Reference: https://www.virustotal.com/gui/file/c93d28c7a9320cf67ecb6ef298a9b683a146ae60453c2b67e32f6f2827029800/detection

iranplns.tk

# Reference: https://www.virustotal.com/gui/file/7d684046c8ce3c9769cb35395997b45e9fb3937f3b2067705b1b5373b5844817/detection

shatelmit.ml

# Reference: https://www.virustotal.com/gui/file/273f11d849cf87c30573a1d2f1135db50813d1ea0a405568866bd293b5a9db50/detection

armanrkk.gq

# Reference: https://www.virustotal.com/gui/file/a9bbba0ef64dfe5bc7edb1897fe40035e4fb9e35d6e25033ab32754fa40883a1/detection

eeblaghi-sanaa.ml

# Reference: https://www.virustotal.com/gui/file/f81e03ff585682c7e2df72473c52402e778a8821e80051ac428a28a0014c8528/detection
# Reference: https://www.virustotal.com/gui/file/e854beee6613ff387873e19f2ff09d92f2c05c65bf058db94cd12d2e543998d6/detection

129.227.17.167:8080
smallket.tk

# Reference: https://www.virustotal.com/gui/file/ed1ab8f06f6d42152a8f3da8f8c30933109201ef5e879693286cf543276b98d4/detection

armanrkc.ml

# Reference: https://www.virustotal.com/gui/file/ded3547b55b74be3c536819faf3aaa8e9b678b7d4b8d2385d1c1258d12c234a5/detection
# Reference: https://www.virustotal.com/gui/file/4529c3dec627a33c7a6532968566be60be542ec934ab255d7fc4f7f0a39da956/detection

moneykal.tk
moneyqal.cf

# Reference: https://www.virustotal.com/gui/file/db055f185a8b36d6e4d46585106c399996fc3f5cea6278de5095aedde72c60e0/detection

irantafk.ml

# Reference: https://www.virustotal.com/gui/file/cddb680d90655384f1d30b026b8c5e3f8527b52caaf9b80a8229d462b9e5b587/detection

snowaby.cf

# Reference: https://www.virustotal.com/gui/file/a3a66e5b61a4cb27db81774fe667363577375c97693c3e60c9e4f04bcdd3c2ef/detection

farmsun.ga

# Reference: https://www.virustotal.com/gui/file/9b020d58e01e1c6f317111d41fe635607c5d6c37542d70f391a64e5d8aa7af43/detection

easybals.ml

# Reference: https://www.virustotal.com/gui/file/4e4557fac61ddddf11eb80e04338c7f6e105828cb1283d4b9b2d50e99da4f970/detection

starpar-ir.ga

# Reference: https://www.virustotal.com/gui/file/44ff05c16fc051e96436bdc99d10cc906b88af5be047d5a32ae575969ce57d09/detection

sana-apk-ir.ga
sanaa-apkk.ml

# Reference: https://www.virustotal.com/gui/file/fed1931bb7289d205294c7045431a48a33e3de10e5d55a68fa226ce0e91e0eaa/detection

apptramu.ga

# Reference: https://www.virustotal.com/gui/file/f64942a0c1cfc127d5922ef0f06a78815125089a2bbcccd3d3977b5a4efe626b/detection

armanrkc.gq

# Reference: https://www.virustotal.com/gui/file/d874f761e2ed5b7fdf688d76e557b0511f06e0d75d450ccd0a38a4d669354a32/detection

farmspn.cf

# Reference: https://www.virustotal.com/gui/file/a73e268b46689787ce9dfe82b6323ffa26639a8c4e9608d1d5c02550441ac882/detection

samanld.tk

# Reference: https://www.virustotal.com/gui/file/9bfcc9813e7d37f620e677311dd76f7eaeb202c0e5fe672c2beb8c2b655fc962/detection

sjudaby.gq

# Reference: https://www.virustotal.com/gui/file/9b380909e2433b5a9fc23af9a616d5dea77483ca63ba3e7401028ed33dc56e85/detection

alihasanigift.ml

# Reference: https://www.virustotal.com/gui/file/86a7e168a5145a543535495266ba6c9825c37d4440b193f141f817d84d649027/detection

cloudbaat.tk

# Reference: https://www.virustotal.com/gui/file/708bd535ec87f0b373a368f9a45ba33c1284827cd6f75a7b2e3b3e65cea4cb7f/detection

ah-shaperak.ml

# Reference: https://www.virustotal.com/gui/file/6faa7dae21ea82f914b6cdbe184d330234f8edb91ef7167c38831f357c8013a6/detection

starpar-ir.cf

# Reference: https://www.virustotal.com/gui/file/3f9603d6bd9ea00531a10459ceba30419b3ba466a3a54defbb986a14c4b41356/detection

iranplns.gq

# Reference: https://www.virustotal.com/gui/file/04d32fae674eb19c7459803315fc0297a273b66e2c42e793fe0b6d0f4e278c2f/detection

shaplaku.ml

# Reference: https://www.virustotal.com/gui/file/4224e628c6c32d3c461d94db777e6091da08311ae027661917fe9c3b7e1fd837/detection

shplak-bmb.ml

# Reference: https://www.virustotal.com/gui/file/142b6e2fb251671d83da8e46dcb2df69650ed67f8710bdac68154f6dcbe2b283/detection

awdlir.ml

# Reference: https://www.virustotal.com/gui/file/ceeae3c3f43ede988e67748cf72a0fdd8c3fe2721ea36bf913b3168104f395e3/detection

ag-shaperak.ga

# Reference: https://www.virustotal.com/gui/file/883b04bd68f67e0786ddcb3bf13e59bd15fbc5acc358f1bdca12c30e483dea59/detection

sjudaby.tk

# Reference: https://www.virustotal.com/gui/file/ebbf85d90e01dae85573ba2f192e8fd8ea80f68e0ad15761457f7e874c58d1e2/detection

sana-irna.cf

# Reference: https://www.virustotal.com/gui/file/8922eb7ff8b93eae4dac86ca03bbe26e16969c1238291ddcd89e2d5c3410e60f/detection

eblaghe-my.tk

# Reference: https://www.virustotal.com/gui/file/6b799c36d091efc528e22eea0a17b6b4099dd7c453e6ff1026231618b0209d43/detection

ah-shaperak.gq

# Reference: https://www.virustotal.com/gui/file/5543d9f15260d9c6fc7c83ea8c4bb6da8e8a8c6fc6ed8168642e5f512d1fd8c9/detection

aa-shaperak.tk

# Reference: https://n0psn0ps.github.io/2023/01/27/android-malware-analysis-series-edalat-apk-part-2.1/
# Reference: https://n0psn0ps.github.io/2023/02/06/android-malware-analysis-series-edalat-apk-part-2.2/
# Reference: https://www.virustotal.com/gui/ip-address/107.175.150.74/relations
# Reference: https://www.virustotal.com/gui/file/355cd2b71db971dfb0fac1fc391eb4079e2b090025ca2cdc83d4a22a0ed8f082/detection

ad3-irran.ch
ad31-1ran.tk
adel-irn.tk
adi-eran.pl
adl-iron.pl
adl-ironii.tk
adl3-iiron.tk
adl3-iron.ml
adl3-iron.tk
adliran.blog
adlirani.uk
adliranii.net
adll-1rran.tk
adll-iran.digital
adll3-iron.ml
adll3-iron.tk
adllirran.ml
adllirran.ml.divar-ir.site
adllirran.tk
adllirran.tk.divar-ir.site
ado-iren.tk
aidl-iran.gq
amiroak.tk
amirsalib.tk
aqd-iran.pl
azdd-iran.tk
bp-saawbrak.tk
chrgesnapir.tk
dadsera.press
diltelr.tk
divar-ir.cf
divar-ir.cf.divar-ir.site
divar-ir.ga
divar-ir.gq
divar-ir.gq.divar-ir.site
divar-ir.site
eblagh--adliran.tk
eblagh--ir.tk
eblaghaiav.ga
eblaghie--ir.tk
eblaqie.org
eblateyshs.cf
eblateyshs.ga
eblateyshs.gq
eblateyshs.tk
ed3lrann.tk
edalat-eblaghye.site
eiranei.uk
emchanded.ga
gay-yabi-mehhrad.ga
gey-yabiira.ml
hosstt-amir.tk
ir-sanaa-blagh.gq
iran-saabtt.tk
iran-sabtt.tk
msq-shaprak.tk
paeygri-shekayat-lr.tk
pebalobe.site
pesasan.site
peygiri--shekayaat.ml
pi-adl-irn.tk
pqy-mell.site
qay-mell.site
remooooot.tk
rimott-hamed.ml
rimott-turrk.tk
sahasamanwu.ml
sahasamanwu.tk
sana-eblaghye.site
sanaeblafye.cf
sanaeblafye.ml
sanwheduq.ga
sanwheduq.ml
sanwheduq.tk
shekayaat--ir.tk
toran-com.tk

# Reference: https://www.virustotal.com/gui/file/e819d4c6e310f5132d5f359e88e255777476e2418ff39d18961a0d5bf43f1daa/detection

saham-edalar.tk

# Reference: https://www.virustotal.com/gui/file/d115c7c94429b16caafdaaa67b32d6feee75591fa381a964a11658d2d68750a1/detection

irn-eblwgh.tech

# Reference: https://www.virustotal.com/gui/file/0de1ba8ada0611073e8ce931cfaaffed46d191d072b53751fff955506555edfd/detection

telegramrobot.xyz
remah.telegramrobot.xyz

# Reference: https://www.virustotal.com/gui/file/02703c4a48d21060c7dd63860d07da9bf9b2ea7f55c0b3585ea61d8eec8105bb/detection

remote-phorot.ml
sub.remote-phorot.ml

# Reference: https://www.virustotal.com/gui/file/42850ddce57e40c759a0b9b29f717ec8f9456bd5ade701921cbee6beee6e9cd5/detection

fjzgsgsbusnak.tk

# Reference: https://www.virustotal.com/gui/file/dac3e8ebe8a08dddb724047f49df1e90efaea105d3b49d6f4f59af9ab0c35143/detection

ayseadee.telegramrobot.xyz

# Reference: https://www.virustotal.com/gui/ip-address/172.93.195.27/relations

amir.phorot.ml
amlak-ir.ga
amlak-ir.herodot.phorot.ml
hassan.phorot.ml
edaro.ml
hassan.phorot.ml
herodot.phorot.ml
edaro.ml
hassan.phorot.ml
herodot.phorot.ml
eblaghye-edliran-foir.amir.phorot.ml
eblaghye-edliran-foir.gq
edaro.edliran.ml
edaro.ml
edliran.ml
god.phorot.ml
hamtair-gov.amir.phorot.ml
hamtair-gov.gq
hassan.phorot.ml
herodot.phorot.ml
hoji.network
iranicard.ml
iranicard.nepton.phorot.ml
iranincard.god.phorot.ml
iranincard.ml
iranipep.ml
iranipep.nepton.phorot.ml
kospedarstrong.amir.phorot.ml
kospedarstrong.gq
licher-pedart-ir.amir.phorot.ml
licher-pedart-ir.gq
hassan.phorot.ml
nepton.phorot.ml
phorot.ml
remote-phorot.ml
remote.phorot.ml
sana2.cf
sanaiser.com
server.phorot.ml
hassan.phorot.ml
herodot.phorot.ml
webhassan.phorot.ml
webherodot.phorot.ml

# Reference: https://www.virustotal.com/gui/ip-address/91.198.77.154/relations

abolfaxlx.ir
aisignal.top
alirezamsf.top
amir2bot.xyz
amirhast.ir
amirword.ir
api-bot.ir
appsaz.site
arashwo.ir
awsometrade.ir
bazarpor.ir
bh-ts.ir
cinemaseven7.ir
cmplbot.ir
darga-saz41.gq
diamondtrade.site
digilance.ir
domainarea.ir
dsbot21.ir
eawall.ir
estsna.com
farsinserver.site
fjzgsgsbusnak.ga
godrat-dsaz5.tk
hamimteam.ir
iiit.ga
kasraf.ir
ketomeal.ir
khodam.org
kianselfbot.ir
king-ali.tk
madeline-bot.xyz
mehdiorg.xyz
membergram.info
memberhashtag.com
metialfa.ir
meysam-javanepoya.ir
mgweb.ir
mirir.ml
mitozist.ir
mmdorg.ml
mraventer.cf
mtlbacn.xyz
mytelbots.ir
neoticket.top
next-mhdpanel.ir
onenumberz.ir
opneowe.tk
osun-botik.ir
panelmedia.ir
paneltf.ir
paneltf2.ir
pouyazamani.ir
r3m.ir
remtxswap.info
ryoshop.ir
saboors.com
seniormahdy.tk
seriyaldoon.ir
signalazad.ir
sirmahdi.tk
sizdahorg.ir
tabchibottab.ir
tonfarmj.ir
tradeermaster.com
trirl.ml
ttrezak.tk
ul2.ir
variabot.ir
viradoor.ir
whatsstore.ir
whatsstore.online
zeus123.ir

# Reference: https://twitter.com/malwrhunterteam/status/1649895759825842176
# Reference: https://www.virustotal.com/gui/ip-address/45.83.22.82/relations
# Reference: https://www.virustotal.com/gui/file/c15cf5c7c58b0976cf7cd0e0f33495c596f02740331757b95f0ade6e2464fca6/detection
# Reference: https://www.virustotal.com/gui/file/c9e84d82d3d9789b0f212a0539bd6c145a8f39f667bfea4ae7fdc8ce73a634bb/detection
# Reference: https://www.virustotal.com/gui/file/b1a099b09877c2d7d87c06c1b8373624a49229c67c7790b9fa129970387e6833/detection
# Reference: https://www.virustotal.com/gui/file/98f5fa8a5e143e3825088f807292f12d9738d17bc2b5c39309e7d33c74aa28d8/detection
# Reference: https://www.virustotal.com/gui/file/8a07cb4b28e9ad8dc626bab357e17971f816ead4c5ee16731fc9fbe8f95cb0ed/detection
# Reference: https://www.virustotal.com/gui/file/5d686451209e165a55915ee61b3dee9775734ba9b1d92acf5c2129513932908d/detection

god-bot.xyz
edalatasham.online
moijawz.press
saham-iran.online
sagam.ddns.net
saham-edaallso.ddns.net
saham-edallet.ddns.net
saham-iran.ddns.net
sejam-1402.ddns.net
sahemn.uno
shmif.website

# Reference: https://www.virustotal.com/gui/file/137e9a2d5f3395a8f84a1e453bce93a38cbc42f4e13d0e096cd3714a7cb24b19/detection

nat-yuxixuy.ga

# Reference: https://www.virustotal.com/gui/ip-address/91.121.35.226/relations

aidltshm.uno
alidilt.cloud
asandeil.press
ascahm.host
asieldil.host
asnadlr.host
asnahid.uno
asnaid.host
bewchm.uno
cheshm.cloud
ciohman.uno
ciosbtn.uno
daftarha.host
edisbtni.uno
edlsabt.fun
edlsabt.site
edlsabt.tech
formhai.fun
hioperl.website
hjceng.online
iasnadh.uno
ihamen.host
insanad.host
iophesm.host
irsaham.host
iusharm.host
maghism.uno
meojawz.host
miogaviz.cloud
miojawz.host
miojwez.info
miojwz.press
miojwze.host
miowjz.host
mjaveiz.cloud
mjawz.host
mjawzi.fun
mogivz.host
moijahez.host
moijawz.press
mojawez.digital
mojawiz.host
mojawzi.uno
mojevzn.host
mojrviz.host
mojwvz.digital
mosihm.info
mougiwz.host
movweiz.host
mugiwez.host
mujvzan.host
nomesbt.host
odhesam.shop
odiosen.press
orginali.host
parwande.host
sabtshm.host
sabtshm.uno
sbtkhan.press
sbtweilt.host
sdadhm.host
sedatln.press
seroihn.uno
siebtshm.uno
sihamiha.host
siubtnm.website
snailatn.press
sybcam.online
wedicam.press

# Reference: https://www.virustotal.com/gui/ip-address/144.217.191.38/relations
# Reference: https://www.virustotal.com/gui/ip-address/87.98.136.237/relations

aidltshm.uno
alidilt.cloud
asandeil.press
ascahm.host
asieldil.host
asnadlr.host
asnahid.uno
asnaid.host
bewchm.uno
cenhn.website
cheshm.cloud
chiham.cloud
cianhem.host
cihyan.uno
ciohman.uno
ciosbtn.uno
ciuham.uno
cnsehl.uno
daftarha.host
disoham.cloud
dosyithm.online
edhiolt.uno
edisbtni.uno
edlsabt.fun
edlsabt.site
edlsabt.tech
edseahin.uno
eheilet.uno
ertiham.uno
esdihem.uno
ethilot.press
formhai.fun
hidealt.press
hidelatn.press
hioperl.website
hjceng.online
hjeham.online
iasnadh.uno
ihamen.host
insanad.host
iophesm.host
irsaham.host
iusharm.host
maghism.uno
meojawz.host
mi1seni.press
miogaviz.cloud
miojawz.host
miojwez.info
miojwz.press
miojwze.host
miowjz.host
mjaveiz.cloud
mjawz.host
mjawzi.fun
mogivz.host
moijahez.host
moijawz.press
mojawez.digital
mojawiz.host
mojawzi.uno
mojevzn.host
mojrviz.host
mojwvz.digital
mosihm.info
mougiwz.host
movweiz.host
mugiwez.host
mujvzan.host
newham.press
nijham.uno
nomesbt.host
odhesam.shop
odiosen.press
orginali.host
paigorn.press
parwande.host
peaigeir.uno
piager.press
piyager.uno
sabtshm.host
sabtshm.uno
sahemn.uno
samen.uno
sbtkhan.press
sbtweilt.host
sdadhm.host
sedatln.press
serdihm.website
seroihn.uno
siebtshm.uno
sihamiha.host
siubtnm.website
snailatn.press
sybcam.online
tiovdelt.uno
toycem.website
wbihdm.shop
wcfhemi.online
wcihen.uno
wecahm.cloud
wedicam.press
wsalnm.press
wsciwm.press
yonciahm.shop
yshmi.uno

# Reference: https://www.virustotal.com/gui/ip-address/5.255.113.62/relations
# Reference: https://www.virustotal.com/gui/file/f5d880c58e5ebeca50611b2ce6f109b19bf375817f3eae8ce3521e246780be2b/detection
# Reference: https://www.virustotal.com/gui/file/7eb4681f836bb481109604d49b0d1712274add1232c2bfc615e4ba6087d8f585/detection
# Reference: https://www.virustotal.com/gui/file/9dcb782f2d8222f6e6c27b21232f920c14db47427f976495ea2eed8b00b2b7f3/detection
# Reference: https://www.virustotal.com/gui/file/2efc726d036808dbded5b2c10f1096fb4f8d54b1cb9524fd21286f42e865b030/detection

5.255.113.62:1212
5.255.113.62:5000
5.255.113.62:5005
shmi.site
shml.site

# Reference: https://twitter.com/malwrhunterteam/status/1683849631359287297
# Reference: https://www.virustotal.com/gui/ip-address/178.162.171.242/relations
# Reference: https://www.virustotal.com/gui/ip-address/85.17.9.107/relations
# Reference: https://www.virustotal.com/gui/file/6d164da714d1faf234e7e98d016d77ba3764225ea93380062a5c0b3c5110f742/detection

biitmart.live
mobile-bank-melli.net
mobile-bank-melli.org
mobile-mellaate.art
mobile-mellaate.cam
mobile-mellaate.click
mobile-mellaate.tech
my-saderaat.net
my-saderaate.org
sadderaate-shams.net
saderaate-online.live
saderaate.online
tuveturk-web.live
tuveturk-web.pro
web-nobitex-ir.org
impixo.site
inthenameofnull.site
app.inthenameofnull.site
navid.inthenameofnull.site
remote.impixo.site
remote.inthenameofnull.site

# Reference: https://www.virustotal.com/gui/domain/edalat.press/relations
# Reference: https://www.virustotal.com/gui/file/dbf9ab052e342522ca11a6932f16924f9d4b5b232c312a3bbae2faeba87b97d1/detection

edalat.press
saham.edalat.press
samane.edalat.press

# Reference: https://www.virustotal.com/gui/ip-address/89.117.139.99/relations
# Reference: https://www.virustotal.com/gui/file/e52357af641d732490743bc0eefc8c876c88c05298dfc48fd7d49b551ceedecf/detection
# Reference: https://www.virustotal.com/gui/file/9978a535ca8a16cac64c67edfc1698bd2913c4aca14092fcf4ad28accad8067e/detection

bullyapk.cloud
samanie-shm.click
samanie-shm.cloud
samanie-shm.uno

# Reference: https://www.virustotal.com/gui/file/88d88afee78ae66224d4cad8ea9769a40c0e29e00968ddde942678b837737247/detection

pokermaster88.xyz

# Reference: https://www.virustotal.com/gui/ip-address/45.32.113.19/relations
# Reference: https://www.virustotal.com/gui/file/7c9dbcb3220875f9386a9c5ef3c3d41e12c9d1776938b849e6a7c8cf7fd7721d/detection

sahamedalat.hs.vc
sahamlol.hs.vc

# Reference: https://www.virustotal.com/gui/ip-address/194.5.195.109/relations
# Reference: https://www.virustotal.com/gui/file/2421c7aa65128376f68ad23d7a2e62cd70e0e0c0ab3b39ea968332a03c4cbbd0/detection

daryaftsahm.site
edalat-irani.site
edalatnes.site
edalatsaham.site
iransedalat.site
saham-meli.site
sahamesr.site
sahamirani.site
sahamma.site
sahamman.site
sahamwis.site
samanesaham.site
sapadsir.site

# Reference: https://www.virustotal.com/gui/ip-address/87.98.136.237/relations
# Reference: https://www.virustotal.com/gui/file/1e9379d9cd5f60aa480a0c8e7376605a8875461700548f91defd3ddad9737040/detection

adeilat.press
adiern.tech
adilern.press
adledilt.press
aosiuham.host
asodmi.host
cadihedn.host
cadman.host
cadsaum.host
calantern.press
cenhn.website
chiham.cloud
cianhem.host
cihyan.uno
cilaheilm.host
ciohjam.host
ciuham.uno
cnsehl.uno
codhami.press
codhiemi.host
dadctan.press
dadstan.press
daftarsh.host
dieltn.press
dilet.press
disoham.cloud
dodsara.press
dodstono.lol
doilat.press
doilate.press
doilernt.press
doiletn.sbs
doirnt.xyz
dosyithm.online
edalapk.press
edalatsabt.host
edhiolt.uno
edoilwt.press
edseahin.uno
eheilet.uno
ertiham.uno
esdihem.uno
ethilot.press
formsbtn.host
hemrahi.host
hidealt.press
hidelatn.press
hjeham.online
ilcahen.host
iransaham.host
iransaham.press
iranse.host
iransedalat.cloud
kaefori.space
kalantar.press
kilontar.host
klnteri.host
koilantin.press
kointer.press
kolanter.press
lisodmanh.host
mhojawz.host
mi1seni.press
mihansaham.host
miovjz.host
mipojwz.press
moiijwzi.host
moijwz.tech
mojawez.xyz
mojlavez.host
mojwz.host
netjahan.uno
newham.press
nijham.uno
odalanti.press
oildielt.tech
oizawez.press
paigorn.press
parsaham.host
parsaham.uno
pasgahi.press
pazjahie.host
peaigeir.uno
piager.press
pigerian.press
piyager.uno
poigery.press
poilerin.uno
sabtshm.tech
saeaham.tech
saehimo.press
sahamman.host
saharahm.tech
sahemn.uno
sahiran.host
sahuom.host
samen.uno
sanain.press
sandilen.host
sayhami.tech
sduhem.host
sedalat.cloud
sedalat.website
sedilatn.press
seihrn.host
selfin.host
seoherm.host
serdihm.website
shikaiat.press
sindeil.press
siuhanm.press
sodcam.host
sodhame.host
sodhem.space
sodtwan.press
sodwaham.host
souhern.host
souhiern.store
tiovdelt.uno
toweiltn.press
toycem.website
videlat.press
wbihdm.shop
wcfhemi.online
wcihen.uno
webaent.press
webdilt.press
webiam.tech
websod.host
wecahm.cloud
wefihem.uno
wisod.site
wsalnm.press
wsciwm.press
yoistnam.press
yonciahm.shop
yshmi.uno
yudilatn.press
ed.dadstani.lol
ed.doyilatn.press

# Reference: https://www.virustotal.com/gui/ip-address/188.165.49.104/relations
# Reference: https://www.virustotal.com/gui/file/1121fef77eb7c8f582bcb690bd9708f419455b0d74d275af8d38671413546146/detection

adelinr.press
apksna.press
appedisn.press
apsuham.host
baresie.press
barseha.press
calantr.press
calantri.host
calater.host
calinter.press
cilentor.host
cmoisid.host
coilantr.host
coilntar.host
coimzvz.press
cointern.host
coiwjsz.host
colanteri.host
colantr.host
colintore.host
conalter.host
contanti.site
contennet.tech
csodham.host
dadctani.press
dadstan.lol
dadstane.press
didstan.press
doideilt.press
doilati.press
doilet.press
doiltnesan.press
dolat.press
edalatsabt.cloud
ediloelt.press
erdoltn.press
hmrman.host
iransaham.website
koilantar.press
kolintren.host
masoied.host
moavzn.host
mocihan.host
modilrtn.xyz
mohsana.press
moiawez.press
moijawez.press
mopeshm.host
mowjivz.uno
mysaham.host
oilanter.press
omjawz.host
omranha.press
osarham.press
osdadhm.site
osihaman.website
parsaham.host
paygeri.press
peadilt.press
pigiern.press
plisahm.press
podaley.press
poiegern.host
poijaer.press
sahamint.host
sahammihan.host
saharehm.website
sardahm.space
sebchem.host
senah.press
shamto.host
snadil.press
souedin.host
souren.host
websna.press
wercalnt.press
ad.idelat.lol
er.didstan.press

# Reference: https://twitter.com/malwrhunterteam/status/1683855815323553794
# Reference: https://www.virustotal.com/gui/file/932319c0e2b1753a1b132972fb4faaa0c2bf38bbdd9849f69b241df2e6d85a45/detection
# Reference: https://www.virustotal.com/gui/file/932319c0e2b1753a1b132972fb4faaa0c2bf38bbdd9849f69b241df2e6d85a45/detection
# Reference: https://www.virustotal.com/gui/file/89cf643fb3af2a577496fe7bab998a81707b5a6d20b1459768b6dc79898ec756/detection
# Reference: https://www.virustotal.com/gui/file/63146328c9e73784b2c14062de19ec1215a96c40866e8936de38f51836adcb5d/detection
# Reference: https://www.virustotal.com/gui/file/1d00a5d41bcf238a57f1d82a1ca55b11fc0e1e4c50b5402460200cada5595478/detection

maykate.shop
ratejadid.top

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/

172.86.66.185:1023
178.162.171.247:1004
23.88.43.247:7777
3points.click
5.255.113.62:6985
5.255.117.115:2070
93044live.ml
accorg.site
adlirans-usiran.ga
adlirans-usiran.ml
ailrdw.ml
amirmahdi-or.tk
amiropp-ir.tk
arloapp.host
artacrazy.s2.subdomainbot.top
asdl-ilran.tk
atagsggsshf.ga
bgdgtrg.ml
bgdgytg.ml
botclowns.ga
cuvmntlrzx.ml
dadjdi-jsk.cf
dadstan-rahimi.tk
dadstn-k.cf
dargh-xyata.ml
darghaki-eblog.tk
daysgone.tk
dicaueror.ml
dl.whatsong.ir
doshmhitler.tk
eblagh-sanae.ga
eblaghonline.host
eblaghviran.host
eblagiyeonline.host
eblgha-shkkga.tk
edalat.press
edham.techedlt.art
ensewqzxaap.tk
gtis.cf
hameda.tech
hellboyim80.ml
hitllerrs-ir.ml
homenull.ir
hvcruus.ga
ilivemukm.ga
impixo.site
incomiit.tk
internet-meli-24.ga
ir-live.ml
iuskmmdm.ml
iuskmmdm.tk
ixi-sigaho.ml
jfubdrg.ga
joker1719.ml
jrceh.gq
jsksushsgsh.cf
kiiriiremot.tk
ksjskdkjw-ir.tk
kxkkdei.cf
liveumusk.cf
liveumusk.gq
liveumusk.ml
liveumusk.tk
liviesxy.ml
loi.nitro-cpanel.xyz
lurd-iiooii.ml
mayketdosisigherell.tk
mayketdostyabesighe.tk
mayketdostyabisiighe.tk
mcfadyen.com
mmd-uskm.tk
mmduskm4.cf
mmduskm4.tk
mr-best-ir.tk
mr-xxyx.tk
mrnull.cf
musklive.ga
myremote-ir.tk
n1evewiopq-ir.gq
nazanin-fuzol.tk
ndnsjsj.cf
net-freebami.tk
new-edltiwe.tk
newozv.xyz
niloofarkhosravi.org
nitro-cpanel.xyz
nitrocpanel.xyz
payallmens.tk
pedaretam.tk
pixooriginal.org
pojhgfcved.cf
poliice-fata.tk
pubumlive.gq
pubumlive.tk
radicalhosts.ir
rat-xxx1.ga
rat-xxx1.tk
rat-xxx3.ga
remot-vs-bot.ml
remote-best.ml
remote.impixo.site
remote70y.ml
remotedark.xyz
remotegodrat-ir.tk
reoniwqzna.tk
reza.nitrocpanel.xyz
rihsamito.tk
rimot-anitain.tk
rimot-comin.tk
rimot-htmll.tk
rimot-lucifer.tk
rmtt12.cf
rmtt12.ga
runpanel.cf
s2.subdomainbot.top
sacaladz.tk
saham-a.mcfadyen.com
saham.edalat.press
sahamet.host
sahamirani.host
sahamusk.cf
sahm.host
sahmd.host
sahmi.host
sefid-ratt.tk
sehamechekt.gq
shafabakhsh.tk
shaparak.one
shapark-19.cf
siighe-yabiin.tk
sremot.tk
stillanir.tk
studmitt.tk
subdomainbot.top
techedlt.art
testingmamo.tk
uklivemy.cf
uklivemy.ga
uklivemy.gq
uklivemy.ml
uklivemy.tk
ulliveiku.ml
usenlghusk.ga
usenlghusk.gq
usenlghusk.ml
uskgavm.ga
uskgavm.gq
vffiwwg.ga
vsidg.tk
webriiz.radicalhosts.ir
wlirdan.tk
xn--mgba8a9ddg.ml
xn--mgba8ac3gkj19e.ml
xn--mgby1cr00cvg.ga
xx-amirxx.tk
xxt-remote.cf
xxx-mrxi.ga
xxx-rezaxi.ml
xxx-rmt.ml
years6677337766.ga

# Reference: https://www.virustotal.com/gui/file/f5ffea423f06f4813b2d73dea8cb6a0a29e98ae5db7a55a8598677ba6f073d1e/detection

lordkingmn.site

# Reference: https://threatfox.abuse.ch/ioc/1143521/
# Reference: https://www.virustotal.com/gui/file/b7ff30b39826db33a85fc677819a958cc9307ce2c54dde77c3e1239f39e6ec36/detection

http://5.255.115.135
sik-kon-dige-binamos.online

# Reference: https://twitter.com/malwrhunterteam/status/1687838822657130496
# Reference: https://www.virustotal.com/gui/ip-address/185.149.120.47/relations
# Reference: https://www.virustotal.com/gui/file/ad14a381040a897600a0ae1d1c850d67928a7a313da4f920af9500ebfd27210e/detection
# Reference: https://www.virustotal.com/gui/file/f0ed389192752108c3893242bae230d586ccf5c4d72a5b7182f60b7d7beba350/detection
# Reference: https://www.virustotal.com/gui/file/355f85128c48c7f986660ed51a1e9ab05c4aa6403b43b09067c326e40dc0ae8d/detection
# Reference: https://www.virustotal.com/gui/file/05d9565347657e47cca7f511e2f8d6cf45ced78d3dbd36751251585e6eea8598/detection

1inch.digital
1inch.life
1inch.today
1inhc.org
adwords-invoice.shop
amhaaapees.click
amhaaapees.site
amhaaapees.store
appehmedh.site
appehmfdh.site
appehmrhh.site
appgmfdh.site
appgmffh.site
appgmfhh.site
appgvmffh.site
appmellat.click
appmellat.shop
appmellat.site
appmellat.store
appnellat.click
appnellat.site
appsadert.beauty
appsadert.bio
appsadert.click
appsadert.co
appsadert.info
appsadert.life
appsadert.live
appsadert.pro
appsadert.shop
ayandehamrah.click
bam-bamn.beauty
bam-bamn.bio
bam-bamn.info
bam-bamn.life
bam-bamn.live
bam-bamn.pro
bam-bmi.beauty
bam-bmi.bio
bam-bmi.info
bam-bmi.life
bam-bmi.live
bam-bmi.pro
bam-bmi.store
behtarine-harmah.bio
behtarine-harmah.click
behtarine-harmah.info
behtarine-harmah.live
behtarine-harmah.site
behtarine-harmah.space
behtarine-harmah.store
behtarineharmah.life
chalngpt.life
chalngpt.shop
chalngpt.site
daomak.life
daomakre.bio
daomakre.click
daomakre.life
daomakre.shop
donloadmellt-em.bio
donloadmellt-em.info
donloadmellt-em.life
donloadmellt-em.shop
donlod-for.beauty
donlod-for.bio
donlod-for.cam
donlod-for.click
donlod-for.digital
donlod-for.fun
donlod-for.info
donlod-for.life
donlod-for.live
donlod-for.one
donlod-for.online
donlod-for.pro
donlod-for.run
donlod-for.shop
donlod-for.site
donlod-for.space
donlod-for.store
donlod-for.today
donlod-for.top
donlod-for.website
donlod-jdid.beauty
donlod-jdid.bio
donlod-jdid.biz
donlod-jdid.click
donlod-jdid.digital
donlod-jdid.info
donlod-jdid.life
donlod-jdid.live
donlod-jdid.online
donlod-jdid.pro
donlod-jdid.site
donlod-jdid.space
donlod-jdid.store
donlod-jdid.today
donlod-melta.bio
donlod-melta.info
donlod-melta.live
donlod-melta.shop
donlodfor.life
donlodi-jadie.bio
donlodi-jadie.click
donlodi-jadie.info
donlodi-jadie.live
donlodi-jadie.shop
donlodsaderat.bio
donlodsaderat.info
donlodsaderat.life
donlodsaderat.live
donlodsaderat.pro
donlodsaderat.shop
gmxes.life
gmxio.live
gmxio.store
hamraheto.beauty
hamraheto.click
hamraheto.digital
hamraheto.life
hamraheto.live
hamraheto.online
hamraheto.shop
hamraheto.site
hamraheto.store
hamraheto.today
hemraheto.beauty
hemraheto.bio
hemraheto.fun
hemraheto.info
hemraheto.life
hemraheto.live
hemraheto.online
hemraheto.pro
hemraheto.site
hemraheto.space
hemraheto.store
hemraheto.today
hemraheto.website
hmehrheman.click
hmehrheman.shop
hmehrheman.site
hmhapees.click
hmhapees.site
hmhrhav.click
hmhrhav.shop
hmhrhea.site
hmraheappe.bio
hmraheappe.click
hmraheappe.digital
hmraheappe.fun
hmraheappe.info
hmraheappe.life
hmraheappe.live
hmraheappe.online
hmraheappe.pro
hmraheappe.shop
hmraheappe.site
hmraheappe.space
hmraheappe.store
hmrdfader.click
hmrdfader.live
hmrdfader.shop
hmrdfader.site
hmrehadader.click
hmrehadader.store
hmrehasader.click
hmrehasader.live
hmrehasader.shop
hmrehasader.store
hmrehcdader.click
hmrehcdader.live
hmrehcdader.shop
hmrehema.beauty
hmrehema.click
hmrehema.digital
hmrehema.fun
hmrehema.life
hmrehema.online
hmrehema.site
hmrehema.space
hmrehema.store
hmrheap.click
hmrheap.site
hmrheappe.site
hmrheapped.click
hmrheapped.shop
hmrheapped.store
hmrhemahe.click
hmrhemahe.fun
hmrhemahe.life
hmrhemahe.live
hmrhemahe.online
hmrhemahe.site
hmrhemahe.space
hmrhemahe.top
hmrhemasa.shop
hmrhesader.beauty
hmrhesader.bio
hmrhesader.fun
hmrhesader.icu
hmrhesader.info
hmrhesader.live
hmrhesader.online
hmrhesader.site
hmrhesader.space
hmrhesader.store
kashhamrah.beauty
kashhamrah.fun
kashhamrah.makeup
kashhamrah.monster
kashhamrah.shop
kashhamrah.site
kashhamrah.skin
kashhamrah.space
kashhamrah.store
kashhamrah.website
keshhamra.click
keshhamra.fun
keshhamra.lol
keshhamra.monster
keshhamra.online
keshhamra.site
keshhamra.skin
keshhamra.space
keshhamra.store
keshhamra.website
keshhamrah.click
keshhamrah.shop
keshhamrah.site
keshhamrah.store
keshhamrah.website
kharideamn.bio
kharideamn.click
kharideamn.info
kharideamn.live
kharideamn.shop
kharideamn.site
kharideamn.space
kharideamn.store
kishhamrah.click
kishhamrah.fun
kishhamrah.monster
kishhamrah.online
kishhamrah.shop
kishhamrah.site
kishhamrah.skin
kishhamrah.space
kishhamrah.store
kishhamrah.website
koshhamrah.click
koshhamrah.fun
koshhamrah.makeup
koshhamrah.monster
koshhamrah.shop
koshhamrah.site
koshhamrah.skin
koshhamrah.space
koshhamrah.store
koshhamrah.website
laeyr3.life
laeyr3.live
laeyr3.xyz
layer3.bio
mavreickprotocol.life
mavreickprotocol.live
mela-donld.shop
melatopsn.bio
melatopsn.info
melatopsn.life
melatopsn.shop
mella-r.click
mellaetepapp.click
mellaetepapp.site
mellateapp.click
mellateapp.site
mellatemas.bio
mellatemas.info
mellatemas.life
mellatemas.live
mellatemas.pro
mellatemas.shop
mellatie-mn.shop
meltio-apo.net
meltip-a.pro
meltip-a.shop
nobiapi.shop
nobiland.shop
nobitox.click
nobitox.online
nobitox.site
nobitox.store
nobiweb.shop
okx-wallt.life
okx-wallt.live
okx-wallt.online
okx-wallt.site
okx-wallt.store
okxwallt.life
onlinesa.life
pancakeswap-v3.net
parsian-i.shop
parsian-man.click
parsian-man.shop
parsian-mn.net
parsian-s.click
parsian-s.shop
parsian-sh.click
parsian-sh.co
parsian-sh.shop
parsina.info
parsina.life
perfect-monylog.life
perfect-monylogin.bio
perfect-monylogin.live
rat-kesh-01.click
rat-kesh-02.click
rat-kesh-03.click
rat-mellate.click
rat-mellate.shop
rat-mellate.store
rat-sad-01.site
rat-sad-02.site
rat-sad-03.site
rat-sad-04.site
rat-sad-05.site
rat-saderate.site
rat-saderatee.click
rat-saderatee.shop
rat-saderatee.site
rat-sep-01.click
rat-sep-02.click
rat-sep-03.click
rat-tej-01.click
rat-tej-02.click
rat-tej-03.click
refah-ap.net
refah-net.net
refah-net.org
refah-pr.net
refah-pr.org
refahnet.net
refhamrah.click
refhamrah.site
refhamrah.store
s-sa.life
s-sadera.info
s-sadera.pro
s-sadera.shop
s-saderat.net
sadahamrah.site
sadeert-r.net
sadeert-z.net
sadefrte.bio
sadefrte.biz
sadefrte.click
sadefrte.info
sadefrte.live
sadefrte.shop
sadefrte.site
sadefrte.store
sadeftyu.bio
sadeftyu.info
sadeftyu.life
sadeftyu.live
sadeftyu.pro
sadeftyu.shop
sadeftyu.today
sadehamrah.monster
sadehamrah.online
sadehamrah.site
sadehamrah.space
sadehamrah.website
sader-der.net
sader-er.net
sader-hmrah.co
sader-hmrah.net
sader-hmrah.org
sader-m.net
sader-mn.net
sadera-v.net
saderab-new.bio
saderab-new.info
saderab-new.shop
saderabnew.life
saderafc.bio
saderafc.life
saderafc.shop
saderartdd.info
saderartdd.life
saderartdd.shop
saderasev.bio
saderasev.info
saderasev.live
saderasev.pro
saderasev.shop
saderasvb.bio
saderasvb.digital
saderasvb.info
saderasvb.life
saderasvb.live
saderasvb.pro
saderasvb.site
saderasvb.space
saderasvb.store
saderasvb.today
saderat-a.online
saderat-ap.co
saderat-app.co
saderat-bb.bio
saderat-bb.info
saderat-bb.live
saderat-bb.shop
saderat-be.bio
saderat-be.life
saderat-be.shop
saderat-ce.info
saderat-ce.live
saderat-ce.pro
saderat-ce.shop
saderat-ka.bio
saderat-ka.life
saderat-ka.shop
saderat-la.click
saderat-la.co
saderat-la.shop
saderat-nn.click
saderat-nn.co
saderat-nn.shop
saderat-o.net
saderat-pp.bio
saderat-pp.info
saderat-pp.life
saderat-pp.live
saderat-pp.shop
saderat-s.net
saderat-s.org
saderat-sader.click
saderat-sader.shop
saderat-shoma.live
saderat-shoma.lol
saderat-shoma.shop
saderat-ss.bio
saderat-ss.pro
saderat-ss.shop
saderat-va.co
saderat-va.shop
saderat.life
saderat.shop
saderatbamaner.beauty
saderatbamaner.bio
saderatbamaner.info
saderatbamaner.live
saderatbamaner.online
saderatbamaner.site
saderatbamaner.space
saderatbamaner.store
saderate-apees.bio
saderate-apees.info
saderate-apees.life
saderate-apees.shop
saderate-be.bio
saderate-be.life
saderate-be.live
saderate-be.shop
saderate-jd.bio
saderate-jd.icu
saderate-jd.live
saderate-jd.pro
saderate-jd.shop
saderate-mane.bio
saderate-mane.info
saderate-mane.life
saderate-mane.shop
saderate-tak.bio
saderate-tak.info
saderate-tak.life
saderate-tak.shop
saderatehmrhe.info
saderatehmrhe.life
saderatek.beauty
saderatek.bio
saderatek.biz
saderatek.digital
saderatek.fun
saderatek.info
saderatek.life
saderatek.live
saderatek.shop
saderatek.site
saderatek.space
saderatek.store
saderatek.today
saderatema.bio
saderatema.info
saderatema.live
saderatema.shop
saderatemas.bio
saderatemas.click
saderatemas.live
saderatemas.pro
saderatemas.shop
saderaterym.beauty
saderaterym.info
saderaterym.live
saderaterym.online
saderaterym.pro
saderaterym.store
saderatfeh.bio
saderatfeh.info
saderatfeh.life
saderatfeh.live
saderatfeh.pro
saderatfeh.shop
saderatgb.bio
saderatgb.click
saderatgb.info
saderatgb.live
saderatgb.pro
saderatgb.shop
saderatgt.beauty
saderatgt.bio
saderatgt.click
saderatgt.info
saderatgt.life
saderatgt.live
saderatgt.shop
saderathy.beauty
saderathy.bio
saderathy.biz
saderathy.click
saderathy.club
saderathy.digital
saderathy.icu
saderathy.info
saderathy.life
saderathy.live
saderathy.shop
saderathy.site
saderathy.space
saderathy.store
saderati-em.bio
saderati-em.info
saderati-em.life
saderati-em.live
saderati-em.shop
saderatimbaz.click
saderatimz.bio
saderatimz.click
saderatimz.info
saderatimz.live
saderatimz.shop
saderatiop.shop
saderatito.beauty
saderatito.bio
saderatito.biz
saderatito.click
saderatito.club
saderatito.icu
saderatito.life
saderatito.live
saderatito.pics
saderatito.pro
saderatito.shop
saderatito.site
saderatito.space
saderatito.store
saderatito.today
saderatito.vip
saderatito.website
saderatmane.com
saderatmne.com
saderatpl.bio
saderatpl.click
saderatpl.info
saderatpl.live
saderatpl.online
saderatpl.shop
saderatpl.site
saderatpl.space
saderatpl.store
saderattoi.beauty
saderattoi.bio
saderattoi.biz
saderattoi.click
saderattoi.co.uk
saderattoi.digital
saderattoi.fun
saderattoi.icu
saderattoi.life
saderattoi.live
saderattoi.pro
saderattoi.shop
saderattoi.site
saderattoi.space
saderattoi.store
saderattoi.today
saderattoi.top
saderatvv.bio
saderatvv.biz
saderatvv.cam
saderatvv.click
saderatvv.fun
saderatvv.icu
saderatvv.info
saderatvv.live
saderatvv.online
saderatvv.shop
saderatvv.site
saderatvv.space
saderatvv.store
saderatvv.top
saderehmarha.shop
saderfa-c.click
saderfa-c.co
saderfa-c.shop
saderft-to.bio
saderft-to.info
saderft-to.live
saderft-to.pro
sadergr.bio
sadergr.click
sadergr.info
sadergr.life
sadergr.live
sadergr.site
sadergr.space
sadergr.store
saderham.click
saderham.monster
saderham.online
saderham.shop
saderham.site
saderham.skin
saderham.store
saderham.website
saderhomrah.click
saderhomrah.monster
saderhomrah.shop
saderhomrah.site
saderhomrah.store
saderhomrah.website
saderinea.bio
saderinea.info
saderinea.live
saderinea.shop
sadert-1.shop
sadert-ape.net
sadert-ape.org
sadert-ar.net
sadert-ar.org
sadert-c.net
sadert-hamrah.net
sadert-hm.net
sadert-hm.org
sadert-hmrah.click
sadert-hmrah.shop
sadert-i.net
sadert-log.life
sadert-login.bio
sadert-login.info
sadert-login.live
sadert-mna.net
sadert-mna.org
sadert-my.net
sadert-my.org
sadert-p.net
sadert-r.net
sadert-ss.click
sadert-ss.life
sadert-ss.shop
sadert-t.click
sadert-t.shop
saderta-do.click
saderta-do.shop
sadertatak.beauty
sadertatak.bio
sadertatak.biz
sadertatak.click
sadertatak.homes
sadertatak.info
sadertatak.life
sadertatak.live
sadertatak.shop
sadertatak.site
sadertatak.space
sadertatak.store
sadertemahast-b.beauty
sadertemahast-b.bio
sadertemahast-b.click
sadertemahast-b.digital
sadertemahast-b.homes
sadertemahast-b.icu
sadertemahast-b.info
sadertemahast-b.live
sadertemahast-b.online
sadertemahast-b.pro
sadertemahast-b.site
sadertemahast-b.space
sadertemahast-b.store
sadertemahastb.life
sadertemal.beauty
sadertemal.bio
sadertemal.info
sadertemal.life
sadertemal.live
sadertemal.online
sadertemal.pro
sadertemal.store
sadertgy.beauty
sadertgy.bio
sadertgy.click
sadertgy.fun
sadertgy.live
sadertgy.online
sadertgy.pro
sadertgy.site
sadertgy.space
sadertgy.store
sadertgy.top
saderthanmrah.net
sadertn-hamrh.bio
sadertn-hamrh.biz
sadertn-hamrh.click
sadertn-hamrh.club
sadertn-hamrh.live
sadertn-hamrh.shop
sadertomdam.beauty
sadertomdam.click
sadertomdam.info
sadertomdam.life
sadertomdam.live
sadertomdam.online
sadertomdam.pro
sadertomdam.shop
sadertomdam.store
sadertt-o.net
sadertvp.bio
sadertvp.biz
sadertvp.click
sadertvp.info
sadertvp.live
sadertvp.online
sadertvp.shop
saderty-a.bio
saderty-a.info
saderty-b.bio
saderty-b.life
saderty-b.live
saderty-b.shop
saderty-n.bio
saderty-n.live
saderty-n.shop
saderty-y.click
saderty-y.shop
sadetr-c.click
sadetr-c.shop
sadham.click
sadham.monster
sadham.online
sadham.shop
sadham.site
sadham.skin
sadham.store
sadham.website
sadhemrah.beauty
sadhemrah.click
sadhemrah.digital
sadhemrah.fun
sadhemrah.life
sadhemrah.live
sadhemrah.online
sadhemrah.shop
sadhemrah.site
sadhemrah.skin
sadhemrah.space
sadhemrah.store
sadhemrah.top
sadhemrah.website
sadhhamrah.site
sadhm.shop
sadhm.site
sadhm.skin
sadhm.store
sadhmraha.beauty
sadhmraha.click
sadhmraha.online
sadhmraha.shop
sadhmraha.site
sadhmraha.skin
sadhmraha.space
sadhmraha.website
sadhomraha.beauty
sadhomraha.click
sadhomraha.fun
sadhomraha.makeup
sadhomraha.monster
sadhomraha.online
sadhomraha.shop
sadhomraha.site
sadhomraha.skin
sadhomraha.space
sadhomraha.store
sadhomraha.website
sadihamrah.site
sadlhamrah.site
sadmhamrah.site
sadnhamrah.site
sadohamrah.site
sadrathamrah.beauty
sadrathamrah.click
sadrathamrah.monster
sadrathamrah.shop
sadrathamrah.site
sadrathamrah.skin
sadrathamrah.store
sadrathamrah.website
sadretham.beauty
sadretham.click
sadretham.monster
sadretham.site
sadretham.skin
sadretham.store
sadretham.website
sadriman.beauty
sadriman.click
sadriman.info
sadriman.live
sadriman.online
sadriman.shop
sadriman.store
sadrot.click
sadrot.monster
sadrot.shop
sadrot.site
sadrot.skin
sadrot.store
saduhamrah.site
sadxhamrah.site
sadzhamrah.site
sanbdox.life
sanbdox.live
sanbdox.online
sanbdox.site
sanbdox.space
sanbdox.store
sasdertyu.bio
satech.life
sdaertam.bio
sdaertam.live
sdaertam.shop
sderate-j.click
sderate-j.shop
sderatmas.beauty
sderatmas.bio
sderatmas.click
sderatmas.digital
sderatmas.icu
sderatmas.info
sderatmas.life
sderatmas.live
sderatmas.online
sderatmas.pro
sderatmas.shop
sderatmas.site
sderatmas.space
sderatmas.store
sderatmas.today
sdhmrah.click
sdhmrah.monster
sdhmrah.shop
sdhmrah.site
sdhmrah.store
sdhmrah.website
sdreat-mio.bio
sdreat-mio.click
sdreat-mio.info
sdreat-mio.shop
sedahamrah.click
sedahamrah.shop
sedahamrah.site
sedahamrah.store
sedarthamra.beauty
sedarthamra.click
sedarthamra.monster
sedarthamra.site
sedarthamra.store
sedarthamra.website
sedhemrah.beauty
sedhemrah.click
sedhemrah.digital
sedhemrah.fun
sedhemrah.live
sedhemrah.online
sedhemrah.shop
sedhemrah.site
sedhemrah.skin
sedhemrah.space
sedhemrah.store
sedhemrah.top
sedhemrah.website
sedhomrah.beauty
sedhomrah.click
sedhomrah.monster
sedhomrah.online
sedhomrah.shop
sedhomrah.site
sedhomrah.skin
sedhomrah.space
sedhomrah.store
sedrhamra.beauty
sedrhamra.click
sedrhamra.fun
sedrhamra.monster
sedrhamra.shop
sedrhamra.site
sedrhamra.skin
sedrhamra.space
sedrhamra.store
sedrhamra.website
sedrhemra.beauty
sedrhemra.click
sedrhemra.fun
sedrhemra.monster
sedrhemra.shop
sedrhemra.site
sedrhemra.skin
sedrhemra.space
sedrhemra.store
sedrhemra.website
seedify-v1.shop
seedify-v4.org
seedly.fund
seedyi.fund
sepeh.monster
sepeh.shop
sepeh.site
sepeh.store
sephamrah.click
sephamrah.shop
sephamrah.site
sephamrah.store
sephhamra.beauty
sephhamra.click
sephhamra.fun
sephhamra.monster
sephhamra.online
sephhamra.site
sephhamra.skin
sephhamra.space
sephhamra.store
sephhamra.website
shadhamrah.click
shadhamrah.lol
shadhamrah.monster
shadhamrah.shop
shadhamrah.skin
shadhamrah.store
shadhamrah.website
shaehamra.beauty
shaehamra.click
shaehamra.live
shaehamra.monster
shaehamra.site
shaehamra.skin
shaehamra.store
shaehamra.website
sidhamrah.click
sidhamrah.monster
sidhamrah.online
sidhamrah.shop
sidhamrah.site
sidhamrah.skin
sidhamrah.store
sidhamrah.website
sodhamrah.click
sodhamrah.monster
sodhamrah.online
sodhamrah.shop
sodhamrah.site
sodhamrah.skin
sodhamrah.store
sodhamrah.website
sodorhamrah.shop
sodorhamrah.site
staderlabs.bio
staderlabs.life
staderlabs.shop
sudhamrah.click
sudhamrah.monster
sudhamrah.online
sudhamrah.shop
sudhamrah.site
sudhamrah.skin
sudhamrah.store
sudhamrah.website
syntheitx.io
tbcpanels.click
tbcpanels.shop
tbcuser.store
tejrt-ne.info
tejrt-ne.life
tejrt-ne.shop
velamkon-ap.net
vpnfaste.bio
vpnfaste.click
vpnfaste.info
vpnfaste.online
vpnfaste.pro
vpnfaste.site
vpnfaste.space
vpnfaste.store
web-hmrcfader.click
web-hmrcfader.live
web-hmrcfader.shop
web-hmrcfader.site
web-hmrcfaher.click
web-hmrcfaher.live
web-hmrcfaher.shop
web-hmrcfaher.site
web-hmrcfaher.store
web-hmrdfader.click
web-hmrdfader.live
web-hmrdfader.shop
web-hmrdfader.site
webkesh.click
webkesh.shop
webkesh.site
websad.click
websad.shop
websad.site
websep.click
websep.shop
websep.site
webtej.shop
webtej.site
xn-----btdbbadu7bnh9b6ntaida28o.live
xn-----btdbbadu7bnh9b6ntaide77o.live
xn-----btdbbd4dgjr4pragdax95nba48d.live
xn-----btdbbd4dgjr4pragdw26mba94d.live
xn-----btdbe5ct1loaddag38e8t.live
xn-----btdbe5ct1loaddec38e7t.live
xn-----btdbe5ct1loaddg82exs.live
xn----1-nzebbaew2cph3c9nuajde57p.live
xn----1-nzebf4dva9mpaedec83fyu.live
xn--mgbaac7behn2moafds96ka97c.live

# Reference: https://twitter.com/malwrhunterteam/status/1689008485139406848
# Reference: https://www.virustotal.com/gui/file/c40a09e1af3f36465e46a3705bee9bff8a7da61f4c5ccffaf2a8831dabf4bc47/detection

godishere.xyz
sahmfa.rest
app.godishere.xyz
ed.sahmfa.rest

# Reference: https://www.virustotal.com/gui/ip-address/173.208.164.246/relations
# Reference: https://www.virustotal.com/gui/file/c40a09e1af3f36465e46a3705bee9bff8a7da61f4c5ccffaf2a8831dabf4bc47/detection
# Reference: https://www.virustotal.com/gui/file/8d22e7b40d4e72f458af9d7016385a17e6909bdfde7b3a2abef58b71a9451f62/detection
# Reference: https://www.virustotal.com/gui/file/b73790d3aae2ae72e8f5e265596fe8e748bdc0aaaff925a9f7ec1b41f2413945/detection
# Reference: https://www.virustotal.com/gui/file/bc98dca556086f9f035d23b5f42b43fa039a76a0d7b0acacf60474e7e5c06188/detection
# Reference: https://www.virustotal.com/gui/file/f75e61bc2fc6ef3f2e19eaf01c1a5f15296776ff4d754b2e2b0831835384c2bb/detection

adl.gettrials.com
adlnl.gettrials.com
rimote.gettrials.com
saham.gettrials.com
sahaman.gettrials.com
sahamdg.gettrials.com
sahamn.gettrials.com
sahamsn.gettrials.com
sahmn.4pu.com

# Reference: https://www.virustotal.com/gui/ip-address/5.255.116.204/relations

adl.serveusers.com
adledam.4pu.com
adll.dsmtp.com
adllies.gettrials.com
adluram.4dq.com
edalat.gettrials.com
saham.dsmtp.com
sahamdb.serveusers.com
sahamedl.gettrials.com
sahamld.gettrials.com
sahamlk.gettrials.com
sahamll.gettrials.com
sahamsb.4pu.com
sahmanl.4dq.com
sahmdn.gettrials.com
sahmsbn.gettrials.com
sahmsl.gettrials.com

# Reference: https://twitter.com/noexceptcpp/status/1689007261895553024

amhaaapees.shop
appnellat.shop
bc-games-login.bio
bc-games-login.info
bc-games-login.shop
daomakre.bio
hmhapees.shop
hmrheap.shop
kh-login.org
mellaetepapp.shop
mellateapp.shop
perfect-monylogin.info

# Reference: https://twitter.com/malwrhunterteam/status/1690378233089273857
# Reference: https://www.virustotal.com/gui/file/d4d1f6addbe64792f1635c0b3c7c7bd6a9588cf042926f50462e6b2ea47af266/detection

shme.hair
ed.shme.hair

# Reference: https://www.virustotal.com/gui/ip-address/5.255.118.154/relations
# Reference: https://www.virustotal.com/gui/file/d4bce198bed1d383c4df1b2e9404275b69a718375f229acf9301382d184fc75d/detection
# Reference: https://www.virustotal.com/gui/file/3845f2f0f8da8112692d2c4896bad1b72ecf2312274b9f85172f79763e02e431/detection

hadespanel.online
hadexpanel.online
hadexpanel.site
noobhades.cloud

# Reference: https://www.virustotal.com/gui/file/a3094acaadd484c6bf7d3117879dd832a6c9008cda4f6bf5c23b81a296c83532/detection

bazsnal.com

# Reference: https://www.virustotal.com/gui/file/d98193d3515ac39cb8c74adda16ffb4182bf316577517d8bd754f69c1b614729/detection

hmbnk-tejarat.fun

# Reference: https://www.virustotal.com/gui/ip-address/37.221.115.43/relations

irana.site
tejarat-hmrah.click

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-08-17)
# Reference: https://www.virustotal.com/gui/ip-address/190.2.146.141/relations
# Reference: https://www.virustotal.com/gui/file/f536525fe0c9603f5c243ea8d3bb778aa97319ae7f954e7e9b45b6682aca6531/detection
# Reference: https://www.virustotal.com/gui/file/d0d7848878dd00038cfa83184c98a1bc95ad31328702793c9e9e0352ab482d62/detection
# Reference: https://www.virustotal.com/gui/file/4f4cfd4a601f3d3800fd981e9e3516b208ec4d986276d61dbef46f8e72831816/detection

bmsub.click
ebluaghie-lr.online
eshms.click
newidbot.tk
peygiri-eblughie-ir.cloud
ed.eshms.click
dymon.bmsub.click
98902.f1r.ir
98902.ir
abbasself.bmsub.icu
academyadminbot.bmsub.icu
adde2.bmsub.icu
aeself.bmsub.icu
aidenteg.bmsub.icu
aidenteg.bmsub.ml
alex.bmsub.icu
ali.bmsub.icu
ali1.bmsub.icu
ali12.bmsub.icu
ali13.bmsub.icu
ali2.bmsub.icu
alikadkhooda.bmsub.icu
alio.bmsub.icu
alireza.bmsub.icu
alireza7979.bmsub.icu
alisgm.bmsub.icu
almaseman.ir
alphateam.site
alphateam.tk
aminreymer.ir
amir-globall.bmsub.icu
amir.bmsub.icu
amirhelix.cf
amirmmd.bmsub.icu
amirmohammad.bmsub.icu
amirpro.bmsub.icu
aniusdt.xyz
aniwork.site
appsaleh.bmsub.icu
aryanvirus.bmsub.icu
ashkan.bmsub.icu
atilla.bmsub.icu
atillaweb.ir
azmoongir.bmsub.icu
balo.ml
ben.bmsub.icu
big.bmsub.icu
biga.bmsub.icu
bmsub.click
bmsub.icu
bmsub.ml
bmsub.sbs
bot1.bmsub.icu
bot11.bmsub.icu
bot2.bmsub.icu
bot3.bmsub.icu
bot4.bmsub.icu
botbig.bmsub.icu
cafeozv.com
cdtl.bmsub.icu
chplaxer.bmsub.icu
cia.bmsub.icu
code-news-team.tk
coffeestore.bmsub.icu
alphateam.site
alphateam.tk
amirpro.bmsub.icu
bot4.bmsub.icu
cafeozv.com
istbuy.xyz
new-edl.tk
alphateam.site
alphateam.tk
amirpro.bmsub.icu
bot4.bmsub.icu
cafeozv.com
istbuy.xyz
new-edl.tk
rezatourk.ir
alphateam.site
alphateam.tk
amirpro.bmsub.icu
bot4.bmsub.icu
cafeozv.com
istbuy.xyz
new-edl.tk
cryptopuls.bmsub.icu
datatm.bmsub.icu
datatm.bmsub.ml
datatm.ir
diamondbot.bmsub.icu
diamondself.bmsub.icu
dingo.bmsub.icu
dl.f1r.ir
dobs.bmsub.icu
dobsiup.bmsub.icu
dymon.bmsub.click
dymon.bmsub.icu
easypanel.bmsub.icu
ede.bmsub.icu
editor.bmsub.icu
elham1.bmsub.icu
erban.bmsub.icu
erbb.bmsub.icu
f1r.ir
fallowerr.bmsub.icu
faraso.bmds.win
fbi-biii.xteam.bmsub.icu
fcclub.bmsub.icu
finch.bmsub.icu
firemag.ir
firuzehshop.ir
forum.mohammadhttp.bmsub.icu
ftp.koohyar.bmsub.icu
game.bmsub.sbs
gpantex.bmsub.click
harim.bmsub.icu
havich.bmsub.icu
hebbemollaa.bmsub.icu
helix-bot.tk
helix-team.cf
ho3einvieus.bmsub.icu
hol-shop.bmsub.icu
hpoktest.bmsub.ml
icepanel.bmsub.icu
img.mohammadhttp.bmsub.icu
insta.bmsub.icu
instagram.bmsub.icu
irahub.bmsub.icu
irahub.bmsub.ml
iranddnet.ir
irlords.bmsub.icu
istbuy.xyz
kabirakbot.bmsub.icu
kdkdosowowow.bmsub.icu
kiya1221.bmsub.icu
konkur.bmsub.icu
koohyar.bmsub.icu
koomusic.bmsub.icu
lastproxy.xteam.bmsub.icu
lavin.top
lavincode.ir
loq.bmsub.icu
loxtap.ir
loxtop69.ir
lucifer.bmsub.icu
mahdi.bmsub.icu
mahdiphp.bmsub.icu
alphateam.site
alphateam.tk
amirpro.bmsub.icu
bot4.bmsub.icu
cafeozv.com
istbuy.xyz
new-edl.tk
mamad.bmsub.icu
mamadchele.bmsub.icu
matin.bmsub.icu
mehrab-fl.online
mehrab.bmsub.icu
meysam.bmsub.icu
mmd.bmsub.icu
mohammad.bmsub.icu
mohammad1379.bmsub.icu
mohammadd.bmsub.icu
mohammadgold.bmsub.icu
mohammadhttp.bmsub.icu
mohammadm.bmsub.icu
mohammadrobot2311.bmsub.icu
mohsen.bmsub.icu
moviepy.kabirakbot.bmsub.icu
mr-api.xyz
mr869.bmsub.icu
mrafaz.ir
mrdyar.bmsub.icu
mrrezacy.bmsub.icu
mrvirusir.ir
muploder.bmsub.icu
nati.bmsub.icu
new-edl.tk
new-sod.link
new-source.tk
new.bmsub.icu
newidbot.tk
newseen.bmsub.icu
nl35.bmds.win
nl36.bmds.win
none.bmsub.icu
ns35.bmds.win
ns36.bmds.win
nudiran.bmsub.icu
number-city.bmsub.icu
numbershopp.ir
olyca.bmsub.icu
order.bmsub.sbs
p4xamir.bmsub.icu
pablin.bmsub.icu
paradox.bmsub.icu
parhambayatfar.bmsub.icu
parisailturkce.ir
pasoulini.bmsub.icu
pedramgamer.bmsub.icu
poria.bmsub.icu
pr.bmsub.icu
primaxexchange.tk
pytest.bmsub.icu
racoongodratracoon.tk
rahim.bmsub.icu
rayateam.bmsub.icu
reaction.bmsub.icu
reza.bmsub.icu
rezatourk.ir
rezauplodser.bmsub.icu
riber.bmsub.icu
rimots.bmsub.icu
robot.bigmizban.com
rodin.bmsub.icu
royaleweb.bmsub.icu
rtcsp.sbs
rzb992642059nzrn.loxtop69.ir
sanayeebrahimi.bmsub.icu
sarv90.ir
seen.koloner.ir
self-mehrab.bmsub.icu
sevensys.bmsub.icu
shirr.bmsub.icu
shoaibryan.bmsub.icu
signal-team.bmsub.icu
sinapanel.bmsub.icu
site.bmsub.icu
soli.bmsub.icu
somayepl.bmsub.icu
songsmusic.bmsub.icu
source.alphateam.tk
souro7x.bmsub.icu
spamin.bmsub.icu
ssoli.bmsub.icu
status.bigmizban.com
support.lavin.top
support.lavincode.ir
sv.ssoli.bmsub.icu
tabch.bmsub.icu
talker.bmsub.icu
telebot.f1r.ir
tik-uploder.tk
tm-host.bmsub.icu
top.mohammadhttp.bmsub.icu
ts.bmsub.icu
tscoserver.com
tstruch.bmsub.icu
ttreza.bmsub.icu
up191.bmsub.icu
up3.bmsub.icu
upcv3.bmsub.icu
uplcr.bmsub.icu
uploader.bmsub.icu
uploder.bmsub.icu
uploderrez.bmsub.icu
vooov.bmsub.icu
walaajajasisowbsh.number-city.bmsub.icu
alphateam.site
alphateam.tk
amirpro.bmsub.icu
bot4.bmsub.icu
cafeozv.com
istbuy.xyz
new-edl.tk
rezatourk.ir
webhook.alphateam.tk
webalphateam.site
webalphateam.tk
webamirpro.bmsub.icu
webbmsub.icu
webbot4.bmsub.icu
webcafeozv.com
webkoohyar.bmsub.icu
webnew-edl.tk
webrezatourk.ir
wolf-capitan.x80.xteam.bmsub.icu
woody.bmsub.icu
xdteam.bmsub.icu
xp-tm.ir
xteam.bmsub.icu
xyz.bmsub.icu
yadegari.bmsub.icu
yasin.bmsub.icu
yourparis.bmsub.icu
zbot.bmsub.icu
zeddshakh.bmsub.icu
zeddshakh0.bmsub.icu
zeroupl.bmsub.icu
zirfilm.tk

# Reference: https://www.virustotal.com/gui/ip-address/20.74.163.6/relations
# Reference: https://www.virustotal.com/gui/file/decab5c7e9a8d42e09aa6df39385c95dc603285374a76d8c8e08a025bb7e1dd9/detection

biguxcse.xyz
charget.cloud
ebfaiur.org
ebl-ir.org
edlir.cloud
iran-pspcoi.info
sahamet.website
sahamse.cloud
shamse.website
tproject.cloud
tuoi.site
app.sahamet.website
login.shamse.website
navid.tproject.cloud
ns1.sahamse.cloud
ns1.shamse.website
ns2.sahamse.cloud
ns2.shamse.website
panel1.iran-pspcoi.info
panel2.iran-pspcoi.info
panel3.iran-pspcoi.info
portal.sahamet.website
saham.charget.cloud
sahamman.charget.cloud
samane.edlir.cloud
shm.charget.cloud
site1.ebl-ir.org
site10.ebl-ir.org
site11.ebl-ir.org
site12.ebl-ir.org
site13.ebl-ir.org
site14.ebl-ir.org
site15.ebl-ir.org
site16.ebl-ir.org
site17.ebl-ir.org
site18.ebl-ir.org
site19.ebl-ir.org
site2.ebl-ir.org
site20.ebl-ir.org
site3.ebl-ir.org
site4.ebl-ir.org
site5.ebl-ir.org
site6.ebl-ir.org
site7.ebl-ir.org
site8.ebl-ir.org
site9.ebl-ir.org
toapptosh.ebl-ir.org
# Reference: https://www.virustotal.com/gui/ip-address/20.233.44.202/relations

is-eblagh.online
mysham.cloud
samane.mysham.cloud

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-08-25)
# Reference: https://www.virustotal.com/gui/ip-address/198.23.200.237/relations
# Reference: https://www.virustotal.com/gui/ip-address/80.77.23.200/relations
# Reference: https://www.virustotal.com/gui/file/e5847696b00aa1069c5ee91abaec0188d6f7b556de231d88a46d061f4f2e8875/detection

adlie-eblughie-ir.cloud
attractivedomain.org
eblag-sana.org
edlliran.fun
ehraze-se-na-402.org
hiddening.cloud
irsaham.cfd
mie-edalate.website
peygiri-eblugh-ir.cloud
peygiri-eblughie-ir.cloud
peygiri-shekayat-ir.cloud
port-is.tk
portabl-shekayaat-ir.cloud
remot-crim.fun
remot-criminal-1999.tech
sahaam.website
sahame-aedaltiran.site
sahamedalats.online
sahamirani.cfd
sahamiranian.cfd
sahamiranir.cfd
sahamiranir.tech
sahammedalat.cloud
sahhamedalat.website
sahuml.cfd
sana-iran.org
sena-ebla-gh.org
suhamiir.cfd
suhamir.cfd
direct.safone.me

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-08-28)

cxzbn.com
myappforbqaxhtt.xyz
vchtzo.com
t.vchtzo.com

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-09-04)

ceryew2ir.com
eb-la-gh-ie-se-na.org
ed-se-na-ir.org
eh-ra-z-eed.org
openaico.ir
xreyz.com

# Reference: https://www.virustotal.com/gui/file/2c2bfe1ff78c0f50099796052e0b00fc4e75529bd6a955c01e82ff7018ae5b4b/detection

raboapk.host

# Reference: https://www.virustotal.com/gui/file/32aa093e884e82a616f702e90ab9c0841d699c5a3037a22360ecbd49ab990080/detection

rkopma.top

# Reference: https://www.virustotal.com/gui/file/32e8db2265a322d56db6168143e452be676a0180c5607693e3ce459174a2f8e4/detection

goedalat.top

# Reference: https://www.virustotal.com/gui/file/50d0c29068a18cf01a4a59612871dc91d4b95e619b4a82c38cf2f76744975f37/detection

5.255.111.131:7003
saham-edalt-ir.tech

# Reference: https://www.virustotal.com/gui/file/56953352a3341b1a8f32daa9e1360ba0578c48060b432afc047d2b6d208c4c64/detection

appcodest.top
jjkopem.top

# Reference: https://www.virustotal.com/gui/file/9916929ef1b8883b45f65d5ef531aa578860406c470ad0217531a62b2a52b066/detection

shmdfjs.website

# Reference: https://www.virustotal.com/gui/file/9935c51732ab12c7f09fd280d7941b2b720f90fb585a951fe46b525cb2f970bb/detection

sspj.press

# Reference: https://www.virustotal.com/gui/file/b00df033afbd45b62120cd82e6582e60b22da5a88669bd884c4c75e2b4b50bb8/detection

sanatimehrad.shop

# Reference: https://www.virustotal.com/gui/file/b55d942d5b58b3677d28cfc3602a87c925bff7c9c04c4310571b0251e850f65c/detection

rcodestam.top

# Reference: https://www.virustotal.com/gui/file/f403f15de411e46b588b0454694a868adf692ac5e7294d07bd3216d500971d3f/detection

gamerdet.tk

# Reference: https://www.virustotal.com/gui/file/919eeaa44a48acfdf5e8c90f15a14b7793ebd32a550728ff195361b5cd0f9e20/detection

jsmspxxxx.tk

# Reference: https://www.virustotal.com/gui/file/8aa04755673ee55cb6135104a0f43704d70ac036c59b52f3a4c6ef6e9ca15724/detection

starlikkbax.tk

# Reference: https://www.virustotal.com/gui/file/7cb31ca2433ca9061843408b8959d02989530f9077dd5142441067ce5418536c/detection

botgaran.tk

# Reference: https://www.virustotal.com/gui/file/5b8af504f319d986d5917a0b53b87d2397ef335aa3b9220a3d1320db14d71581/detection

ersallbot.tk

# Reference: https://www.virustotal.com/gui/file/fc32a4698b95c6958ec07bd8a3702452e2d337da859a71c5daa4e4dacc4bf9e7/detection

ar-codes.tech
reebot.tk

# Reference: https://www.virustotal.com/gui/ip-address/185.110.190.250/relations

0nl1n3-b4nk1ng.tk
1401-07-25.ml
1401-iron.ml
190190.xyz
aboutrupeshjha.cf
accconfirm.tk
alerte-amende.fr
aranadomin1.tk
ardalintime.cf
azaranbet.tk
bax-r.tk
baxnermcck.cf
baxvaaryzy.tk
bestgaming.tk
blackmpv-dargah.tk
blackmpv-dargah10.tk
blackmpv-dargah12.ml
blackmpv-dargah15.ml
blackmpv-dargah2.tk
blackmpv-dargah3.tk
blackmpv-dargah31.cf
blackmpv-dargah32.cf
blackmpv-dargah33.cf
blackmpv-dargah35.cf
blackmpv-dargah37.cf
blackmpv-dargah38.cf
blackmpv-dargah39.cf
blackmpv-dargah40.cf
blackmpv-dargah45.gq
blackmpv-dargah48.gq
blackmpv-dargah8.tk
bookexchanging.gq
bruh.email
chakavakabi.tk
cheese-wheel.fun
climatorchatbot.tk
cloudblue.ml
cosmoismine.tk
crtoon.tk
deanle.me
delbara-doostyab.ga
delbara-doostyab.ml
denipeksen.tk
dichvuwebbro.tk
discord.wumpus.pw
domains-world.store
dreamhubstore.xyz
dreammakers.gq
drugsly.xyz
edumydanie.us
ego-esports.de
err0r.one
facebookhoa.tk
fanavaranrahgozar.tk
faradabban.tk
foxshop.cf
freetech.tk
galacticnetworks.xyz
gamersarenabd.xyz
geenzo.xyz
gharne21.tk
ghostt-panel.gq
gilazovdev.xyz
giran.ir
gmfactory.co.uk
go.shortxlink.tk
grimo.shop
hardzin.tk
hectarox.tk
hesabaneamn.tk
hndr.wtf
hospysoft.tk
info-form.net
infonaranjax.online
iunblockyoutube.tk
jahandarbax.tk
jancok.live
jaybamaroliya.ml
jaybamroliya.ml
jormnegaran.tk
kebabnation.ga
kebabnation.tk
kiensupport.ml
kirvedalg.tk
lifewell.fun
likevip99.tk
linfaperlamente.it
linktube.gq
livehamdam.cf
mahdiagency.tk
mahdicollage.tk
mahdilab.tk
mahdistore.tk
michizon.bid
mimimail.xyz
minhkhanh.space
moade.pro
moadejbily.online
mostakahmad.xyz
moviebaz.tk
myphisher.net
naranjaax2.tk
naranjaxx.tk
naranxtas.tk
nermaicck202.tk
omidgozaran.tk
online-email.tk
onlineasianetline.tk
parvandebet.tk
paymaxir.ga
paysbillings.xyz
paysbills.me
pgad.ir
pillz.cf
qawq.tk
rahavardbet.tk
rahgozarankala.tk
rahpooyaneomid.tk
rahsazanpirooz.ml
register-eb.tk
rem-maker.tk
requd.tk
romsee.tk
rusiavsucrania.es
samaneh-ikco.tk
sandoghearzema.tk
sante-ameli-secu.info
scalway.xyz
schoolsoft.tk
scihun.xyz
server.cubepixel.host
shabestaneh.tk
shahabbax.tk
shahabbet.tk
shahariyarnafiz.tk
shahparakan.tk
shahrivarsaz.tk
shamestanbax.tk
shmusic.cf
shnetwork.gq
shopffmax.tk
shopmasterkien.tk
shortxlink.tk
smartbotdc.tk
soltannnbax.tk
stefaniapepegiudicemilano.link
subviet69.ml
test-dsa.ml
tokensnest.vip
univalle.me
updatemyaccount.tk
uwugen.tech
vivekdev.ml
vonvon.tk
web1401-07-25.ml
web1401-iron.ml
webaboutrupeshjha.cf
webadiiran.tk
webadllran.tk
webaranadomin1.tk
webasianetline.tk
webautomxh1s.site
webazaranbet.tk
webb9hclub.games
webbax-d.tk
webbax-e.tk
webbax-g.tk
webbax-i.tk
webbax-q.tk
webbax-t.tk
webbax-u.tk
webbax-w.tk
webbax-y.tk
webbaxnermcck.cf
webbaxvaaryzy.tk
webbenamshop.cf
webbestgaming.tk
webbestmobi.ml
webbestmobi.tk
webblackmpv-dargah.tk
webblackmpv-dargah12.ml
webblackmpv-dargah15.ml
webblackmpv-dargah2.tk
webblackmpv-dargah3.tk
webblackmpv-dargah31.cf
webblackmpv-dargah35.cf
webblackmpv-dargah37.cf
webblackmpv-dargah38.cf
webblackmpv-dargah39.cf
webblackmpv-dargah40.cf
webblackmpv-dargah45.gq
webblackmpv-dargah48.gq
webblackmpv-dargah8.tk
webbookexchanging.gq
webbr3-sid.ml
webcloudblue.ml
webcodeshop.ga
webcpacenet.tk
webdelbara-doostyab.ga
webdelbara-doostyab.ml
webdomains-world.store
webeblaghie-online-ir.cf
webersallbot.tk
webevertony.ml
webfanavaranrahgozar.tk
webfaradabban.tk
webfindetehran.tk
webfoxshop.cf
webgamersarenabd.xyz
webgeenzo.xyz
webgharne21.tk
webghostt-panel.gq
webgilazovdev.xyz
webgmfactory.co.uk
webhectarox.tk
webiunblockyoutube.tk
webjabook.tk
webjahandarbax.tk
webjancok.live
webjaybamaroliya.ml
webjaybamroliya.ml
webkebabnation.tk
webkillshop.tk
weblivehamdam.cf
webmahdiagency.tk
webmahdistore.tk
webmemedesimo.tk
webmichizon.bid
webminhkhanh.space
webmoade.pro
webnermaicck202.tk
webneweblagh-sana.tk
webomidgozaran.tk
webosgtm.ml
webpaymaxir.ga
webpgad.ir
webpopcorns.cf
webpopcorns.gq
webpostyz-sana.gq
webrahavardbet.tk
webrahgozarankala.tk
webrahsazanpirooz.ml
webrem-maker.tk
webromsee.tk
webrusiavsucrania.es
websamaneh-ikco.tk
websamanparak.cf
websandoghearzema.tk
websazmanneh.ml
webscalway.xyz
webscihun.xyz
webselaminko2345.gq
webshabestaneh.tk
webshahabbax.tk
webshahabbet.tk
webshahparyan.cf
webshahrivarsaz.tk
webshamestanbax.tk
webshaparak-bpzz.cf
webshmusic.cf
webshop-kal.tk
webshop-sap.gq
webshopffmax.tk
webshopmasterkien.tk
websidhant.ga
websidhant.ml
websmartbotdc.tk
websocialexchangedemo.cf
websoltannnbax.tk
websslfree.tk
webstacx-dev.tk
webstarlikkbax.tk
webstefaniapepegiudicemilano.link
websubdath.fun
websubviet69.ml
webtest-dsa.ml
webtheniclesty99.gq
webtrustwallet-eng.tk
webusershoping.gq
webuwugen.tech
webvivekdev.ml
webvivekshop.ml
webvonvon.tk
webvqhteamtlbot.ga
webweb-sh.cf
webweb-sh.ga
webweb-sh.ml
webweb-sh.tk
webwebsiteface.tk
webwedomidan.xyz
webwell-fargo-account-protection.tk
webwells-protection.tk
webwikitamzon.org
webwpg-enic.tk
webxseeyoux.tk
webyouall.tk
wedomidan.xyz
wikitamzon.org
wpg-enic.tk
wumpus.pw
xcr4ckinc.xyz
youall.tk

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-09-15)
# Reference: https://www.virustotal.com/gui/ip-address/46.4.98.104/relations

dachhost.top
drepwer-phontestmans.sbs
tazehhhaaa.shop
sahamedalat.x10.bz
selfam.dachhost.top
xyz.x10.bz

# Reference: https://www.virustotal.com/gui/file/18d0b33fd8323060ffe17c078870039526c101f5aefa5ae7ea5f688d335c59af/detection

eblaghertyit.cf
payms.site

# Reference: https://www.virustotal.com/gui/file/b2b93b1b6dcac3f0f8e885cc9ab9178ebb22671add63573b50334af72069e7b7/detection

adliran025.tk
sendinformationsr.tk

# Reference: https://www.virustotal.com/gui/ip-address/198.144.189.74/relations

adlime.ebapww.ml
adlime.info
aldpq.tk
aplsnmx.tk
ebapww.ml
ebl-fata.tk
elapeza.ebapww.ml
elapeza.ga
elapeza.iraneadl.ga
elapeza.ml
elapeza.tk
emareb.xyz
fata-e.aplsnmx.tk
fata-e.tk
halasane.host
iai-smnaed.ml
iolawq.com
iolklawq.com
ir-paysae.ml
ir-seamanea.space
ir-semana.cf
ir-sjjajaa.ga
ir-sjjajaa.tk
ir-smeames.tk
iranadl.ebapww.ml
iranadl.ml
iraneadl.ebapww.ml
iraneadl.ga
iraneadl.tk
isi-onlinesite.tk
isi-sanea.tk
jr-saname-e.tk
jr-smamesa.tk
koplm.cf
kwcba.aplsnmx.tk
kwcba.tk
ns1.whm-contorolpanel.tk
ns2.whm-contorolpanel.tk
payms.aplsnmx.tk
payms.site
poiibe.aplsnmx.tk
poiibe.tk
pokesr.tk
portalmaksana.host
sanamanr.host
sanasaman.link
sendinformationsr.tk
sia-gyyabi.cf
sighe-onsite.tk
smanae.host
smanesan.host
telmem.aplsnmx.tk
telmem.site
vnmipaj2.tk

# Reference: https://www.virustotal.com/gui/ip-address/172.245.10.252/relations

abwpam.tk
adliran.tracking-sana.ml
adlmci-1401.tk
aksiabxkab.tk
bc.game.reward-usdt.ml
bc.game.shitreward.ml
botidbot.tk
cpanel.web-application.gq
cpanel.web-application.ml
dhhdhd.tk
e-bl.tk
ehzuryeiey.tk
fustwqn-ir.ga
kos-nane-fish-bax.cf
kos-nane-fish-bax.gq
kos-nane-fish-bax.ml
kos-nane-fish-bax.tk
kwpxb.ml
lowstfesna-ir.ga
neowr.ml
neuwi.tk
newi-ir.ml
newp2.tk
nex1-ehzur.cf
nex1-ehzur.ml
nex1-ehzur.tk
null-squ4d.tk
ojrzfn2.tk
pxnpul.tk
remote-kobs.tk
reward-usdt.ml
saunbz.tk
shaptal-jsjsjw.cf
shitreward.ml
snappisbest.tk
testerdr.tk
testerji.cf
tracking-sana.ml
vam-ir-1401.ml
web-application.gq
web-application.ml
web-community.tk
webweb-application.gq
webweb-application.ml
yarane-maeshaty.tk
yastabchi.tk
yoonysap.gq
yoonysap.tk
zaokec.tk
zhtwodhwq.tk

# Reference: https://www.virustotal.com/gui/ip-address/198.144.189.86/relations

adliran-ir-sana.tk
adliran-saana.tk
adliran-samen.cf
adliran-sanaman.tk
adliran025.adliraneman.tk
adliran025.tk
adliraneman.tk
adliranmanm.tk
adlliran-ir.gq
adlliran-sana.tk
adlmaniran.tk
adlsana.adliraneman.tk
aedliranman.adliraneman.tk
aedliranman.tk
ajgdpp.adliraneman.tk
alihasani.ml
ar-eblaghye.ml
cartkhan-avn.ml
cartkhan-bfy.ml
cartkhan-fmu.ml
cartkhan-fph.ml
cartkhan-gld.ml
cartkhan.ml
dadsara.click
datacrcheck.tk
dirpayme.adliraneman.tk
dirpayme.mdhjaldx.tk
dirpayme.tk
domiabusa.cf
ebiligieeh-ir.ml
eblagg-sana-ir.ml
eblegh-ir.gq
edalathamrah.tk
h2hehshhehehehem.cf
hzhzjzjxixxixixoxozozozozpzozozozu.ga
ir-starka.ga
irinn-eblagh.ga
irn-adliran.ga
irn-eblagh.tk
leachermybot.tk
liadlir.adliraneman.tk
liadlir.tk
manyeparandam.xyz
mdhjaldx.tk
mepmb.adliraneman.tk
mepmb.tk
mkl89.ml
nomperor.ml
ns1.nscpanel.tk
ns2.nscpanel.tk
nwelxb.adliraneman.tk
nwelxb.tk
nxmreo.adliraneman.tk
nxmreo.tk
pey-somone.cf
peygiri-alh.ml
peygiri-dgh.ml
peygiri-dnu.ml
peygiri-gjy.ml
peygiri-mri.ml
peygiri-psw.ml
peygiri-rev.ml
peygiri-sec.ml
peygiri-vog.ml
peygiri-wth.ml
peygiri.site
qmbmepd.adliraneman.tk
qmbmepd.tk
qpduak.adliraneman.tk
qpduak.tk
restorbatteries.bid
sabt-ghovehqazaie.adliraneman.tk
sabt-ghovehqazaie.tk
sabtadliran-shekayat.adliraneman.tk
sabthamta.adliraneman.tk
sabthamta.tk
sabtshekayat-adliran.adliraneman.tk
sabtshekayat.adliraneman.tk
sabtshekayat.tk
sabtshekayatha.adliraneman.tk
sabtshekayatha.tk
sena-eeblag2.tk
send-information.tk
service-com.gq
shekayatmardomi.tk
shekvaie.tk
snowyna.ml
webdisk.mdhjaldx.tk
xlxnslr.adliraneman.tk
xlxnslr.tk
yaraneh.adliraneman.tk
yaraneh.tk
ye-kossher.tk
yuo-shaparak.ml

# Reference: https://www.virustotal.com/gui/file/91a2d790366e433f18036a85d935d7e628c652c35b00427f6ef809fa9ec1f69e/detection

klepy-pyortal.top

# Reference: https://www.virustotal.com/gui/file/bc8e5a1f9a81a9b0ae3fb03aa10d914c66e6a30a595e7ff1b8a50d92bd39a86f/detection

apipanel.sbs
configbot.xyz
keyconfig.xyz

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-09-19)

bax-teko.com
irwebhocks.online
trpihgram.space
webclinetzero.cloud
webrequest.tech
uploads.dachhost.top

# Reference: https://www.virustotal.com/gui/ip-address/172.172.236.36/relations
# Reference: https://www.virustotal.com/gui/file/aaddead4d6c3b2b4344909d9c29fd9941a7ff81daf8159e7bda11f2722a18c60/detection

1adl.my03.com
1adll.my03.com
a-dl.itsaol.com
aaaas.authorizeddns.us
adg-ir.fartit.com
adir.jkub.com
adl--ir.jkub.com
adl-ib.fartit.com
adl-in.fartit.com
adl-ir.fartit.com
adl-ir1.fartit.com
adl-iran.mrbasic.com
adl-irb.instanthq.com
adl-irib.fartit.com
adl-irna.my03.com
adl-sah.dnsrd.com
adl-sah.jkub.com
adl-sahm.my03.com
adl-sahn.itsaol.com
adl-shmn.instanthq.com
adl-stt.otzo.com
adl-ti.mrbasic.com
adl-tq.itsaol.com
adl.instanthq.com
adl1.dns04.com
adlaq.toythieves.com
adlebl.jkub.com
adledal.otzo.com
adledel.otzo.com
adledl.dns05.com
adledli.itsaol.com
adlff.jkub.com
adlff.otzo.com
adlgh.2waky.com
adlgh.mefound.com
adlgha.yourtrap.com
adli-bn.otzo.com
adlico.itsaol.com
adlioj.my03.com
adliorc.jkub.com
adliorl.jkub.com
adlioru.jkub.com
adlipp.jkub.com
adlir.2waky.com
adlir.otzo.com
adlirakjd.jkub.com
adliran.dns04.com
adliran.dns05.com
adliranll.jkub.com
adlirhs.otzo.com
adlirn.dns04.com
adlirnn.itsaol.com
adlirns.itsaol.com
adliro.2waky.com
adlirr.jkub.com
adlo.jkub.com
adlok.mefound.com
adlqw.mefound.com
adlsah.itsaol.com
adlsahm.my03.com
adlsan.https443.org
adlsgq.mefound.com
adlz.2waky.com
adlzc.2waky.com
arl.jkub.com
ed-ir.instanthq.com
ed-irb.instanthq.com
ed-ird.instanthq.com
ed-irp.instanthq.com
ed-irs.instanthq.com
ed-ta.itsaol.com
edalat.instanthq.com
edlaat.2waky.com
ib-ir.jkub.com
ir-adl.my03.com
ir-ib.fartit.com
ir-ib.jkub.com
ir-ib.my03.com
ir-ir.fartit.com
ir.my03.com
ir.otzo.com
iran-ta.faqserv.com
iran-tb.fartit.com
iran-tb.instanthq.com
iran-tc.faqserv.com
iran-td.faqserv.com
iran-tf.itsaol.com
iran-tl.itsaol.com
iran-tn.itsaol.com
iran-tq.faqserv.com
iran-tr.itsaol.com
irib.fartit.com
irib.jkub.com
irib.my03.com
irn.jkub.com
irnnn.jkub.com
irsa.fartit.com
irsahm.jkub.com
rimote.dns2.us
sa-cx.itsaol.com
sa-qa.itsaol.com
sah-ca.faqserv.com
sah-cq.itsaol.com
sah-dq.itsaol.com
sah-dq.jkub.com
sah-dw.itsaol.com
sah-dx.itsaol.com
sah-fa.faqserv.com
sah-fq.itsaol.com
sah-fq.jkub.com
sah-ig.jkub.com
sah-irb.jkub.com
sah-ire.itsaol.com
sah-iri.itsaol.com
sah-irw.jkub.com
sah-is.jkub.com
sah-jx.itsaol.com
sah-m.jkub.com
sah-md.faqserv.com
sah-mq.faqserv.com
sah-ms.jkub.com
sah-sd.itsaol.com
sah-sq.itsaol.com
sah-tm.itsaol.com
sah-tp.itsaol.com
sah-tq.itsaol.com
sah-vq.jkub.com
sah-xp.itsaol.com
sah-yx.faqserv.com
sah-za.faqserv.com
sah.jkub.com
saha-m.fartit.com
saham-ir.fartit.com
saham-ir.https443.org
saham.dns05.com
saham.jkub.com
sahamh.itsaol.com
sahamq.vizvaz.com
sahamvv.jkub.com
sahef.itsaol.com
sahev.itsaol.com
sahexq.itsaol.com
sahl.jkub.com
sahm-ir.fartit.com
sahm-ta.vizvaz.com
sahm1.jkub.com
sahmn.jkub.com
sahmnl.jkub.com
sahqam.jkub.com
sahwz.itsaol.com
sahxq.itsaol.com
sane.jkub.com
shan.jkub.com
test1.itsaol.com

# Reference: https://www.virustotal.com/gui/file/ee5b4b78030610b8bca7f3956e28f09ec5a2a3f0198b23db1178befeb31b21ab/detection

abol0021.xyz

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-09-20)

fusagov.xyz

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-09-22)
# Reference: https://www.virustotal.com/gui/ip-address/5.255.117.149/relations
# Reference: https://www.virustotal.com/gui/file/db7156d109b8bde272e4f95495f92c68ba40b959e98572e6d07199fa6f12feca/detection
# Reference: https://www.virustotal.com/gui/file/b6a6f6143f9338be161d0a23f3f341e2fc2f87ee6fc1c52cdbabe9187ad25569/detection

http://5.255.117.149
mrkorosh.site
returnpainter.site
uilscvnzdds.shop
witheveryregistration.click
remote.mrkorosh.site

# Reference: https://www.virustotal.com/gui/file/52ba36a6616d8fab5dca1bf15621cf8249b141374497e4d0f4fc32090619337c/detection

ssd-vip.website

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-09-24)

whi.ir
zlc.ir
hello.zlc.ir
market.x10.bz
sahamedalat.whi.ir

# Reference: https://www.virustotal.com/gui/file/492f3cb699634b68ff56933b32e397ea46096e16b5389e23adf9082d4e815a28/detection
# Reference: https://www.virustotal.com/gui/file/79cff6e86d80b8d200e9423fc73422a851262299974c62743cce048b0ffc4051/detection

puyejqj.ml

# Reference: https://www.virustotal.com/gui/file/8b60b14a0c9584dd9a790867ec4261dbeefdbc5351454ccd20246ea44688fc5e/detection

jwuygwk.cf
mowuqn.ga
/eblagh/link
/eblagh/otp.php

# Reference: https://www.virustotal.com/gui/file/4be6d76a62d76cdc8a2706461a9793d66cfa5c297a02a3e4dec85a759a84e25a/detection

mowuqn.ml

# Reference: https://www.virustotal.com/gui/file/d485f5a45a8a4fafd1c5ff7fb7555303e5e77043432bf52c06eb2ed09e5d36b8/detection

jsouywoq.tk

# Reference: https://www.virustotal.com/gui/ip-address/74.235.160.87/relations

edriddle.online
sah-cv.itsaol.com
sah-ir.jkub.com
sahm.instanthq.com
shm.authorizeddns.org

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-09-25)

ad-te.faqserv.com
ad-tsm.vizvaz.com
adl-it.otzo.com
adl.authorizeddns.net
adla.dns05.com
adleha.iownyour.org
adlel.trickip.org
adlelk.mynetav.org
adlhds.wikaba.com
adliiu.mynetav.org
adlilr.qhigh.com
adlio.got-game.org
adliolj.jkub.com
adliraq.qpoe.com
adlirjh.instanthq.com
adlirn.dnsrd.com
adlirn.otzo.com
adloio.iownyour.org
adlut.faqserv.com
ea.dns04.com
ea.gettrials.com
eblagh.wikaba.com
ed-ir.faqserv.com
ed-iran.faqserv.com
ed-sa.faqserv.com
fcmbroker.info
featchaddress.lat
helloworld.market
ir-ed.otzo.com
ir-saham.faqserv.com
ir-sahm.fartit.com
ir-sahm.jetos.com
iran-sa.faqserv.com
iran-sah.fartit.com
iran-sahm.fartit.com
iran-sahm.vizvaz.com
iran.fartit.com
llllllige.zzux.com
remote.helloworld.market
remotemake.xyz
rimotet.wwwhost.biz
rimoteu.dns2.us
sa-iran.fartit.com
sadl.fartit.com
sah-ir.fartit.com
saham.instanthq.com
sahammn.iownyour.org
sahm-ir.faqserv.com

# Reference: https://www.virustotal.com/gui/ip-address/23.94.28.187/relations

edevald.com
saedame.sbs
ad-l.mrface.com
ad-lo.faqserv.com
adl--ir.fartit.com
adl-bn.itsaol.com
adl-cv.my03.com
adl-i-r.fartit.com
adl-irm.fartit.com
adl-l.fartit.com
adl-mn.jkub.com
adl-mn.my03.com
adl-nm.faqserv.com
adl-q.camdvr.org
adl-vb.vizvaz.com
adl-vm.instanthq.com
adl-xc.faqserv.com
adl-zx.fartit.com
adl.camdvr.org
adl.dns-report.com
adl.dns-stuff.com
adlilrjd.dnsrd.com
adlio.mynetav.org
adliran.camdvr.org
adlirn.mynetav.org
adlkj.vizvaz.com
adll.camdvr.org
adloil.mynetav.org
edalta.mynetav.org
inrat.isasecret.com
ir-saham.fartit.com
ir-saham.jkub.com
iran-kjir.itsaol.com
liveae.xxuz.com
r-ir.jkub.com
sah-adl.my03.com
sahamnlo.itsaol.com
sahanm.camdvr.org
sahmn.camdvr.org
sahmn.vizvaz.com
evesaed.site

# Reference:  https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-09-26)

adl-nig.faqserv.com
aro-ir.faqserv.com
darkn.fartit.com
ir-c.fartit.com
iran-ba.otzo.com
iran-cb.otzo.com
iran-da.otzo.com
iran-ib.otzo.com
iran-tk.otzo.com
sah-art.fartit.com
sah-get.fartit.com
sah-ir.faqserv.com
sah-iran.otzo.com
ta-iran.otzo.com

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-09-27)

adl-iran.otzo.com
adle-ir.otzo.com
ed-ir.fartit.com
ed.authorizeddns.org
edsync.site
hell0-w0rld.eu
incmanapp.rest
ir-adl.fartit.com
ir-sa.fartit.com
ir-saham.otzo.com
ir-sana.otzo.com
ir-sham.otzo.com
ir.authorizeddns.net
ir.isasecret.com
iran-ed.otzo.com
iran-ird.otzo.com
iran-sa.fartit.com
iran-sahm.otzo.com
iran-st.vizvaz.com
iran.isasecret.com
iredsahm.com
irs.duia.ro
irsahm.fartit.com
maxtor.monster
nestbirdie.site
remote.hell0-w0rld.eu
sa-iran.vizvaz.com
sah-ir.vizvaz.com
saham-ir.otzo.com
saham-iran.otzo.com
saham.camdvr.org
sahame-ir.fartit.com
sahameli1402.site
/bots/h3i1n18i11f77a1r44/panel.php
/h3i1n18i11f77a1r44/panel.php
/n0y0uqp/panel.php

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-09-29)

a-dld.vizvaz.com
adl-bnx.faqserv.com
adl-fa.fartit.com
adl-gh.fartit.com
adl-ghs.faqserv.com
adl-gid.otzo.com
adl-jh.my03.com
adlisgwg.itsaol.com
adpggf.faqserv.com
bazui.vizvaz.com
da-ir.fartit.com
mellat.faqserv.com
sadldh.mrface.com
saghmn.faqserv.com
sahlmnh.vizvaz.com
sahln.vizvaz.com
sahmadl.faqserv.com
sahmnl.mynetav.org
sahmnlq.itsaol.com
sahmnx.mynetav.org
saldhg.my03.com

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-10-01)

a-ir.vizvaz.com
adl-a.mynetav.org
adl-c.mrbasic.com
adl-c.mrbonus.com
adl-c.my03.com
adl-lo.fartit.com
adl-sd.fartit.com
adl-v.faqserv.com
adl-v.mrbasic.com
adl-v.mrbonus.com
adl-v.my03.com
adl.vizvaz.com
adleh.mrface.com
adlg-aa.fartit.com
adlhz.fartit.com
adlio.faqserv.com
edl.vizvaz.com
ir-ir.faqserv.com
ir.mrface.com
irr.fartit.com
l-ir.faqserv.com
mellajd.faqserv.com
sa-bi.otzo.com
sd-ir.fartit.com
z-ir.fartit.com

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-10-02)

adl-e.vizvaz.com
adl-gq.mynetav.org
adl-hh.vizvaz.com
adl-hsh.faqserv.com
adl-ib.faqserv.com
adl-ir.faqserv.com
adl-ir.mrface.com
adl-q.faqserv.com
adl-q.vizvaz.com
adl-qq.vizvaz.com
adl-sahm.vizvaz.com
adl-w.faqserv.com
bam-meli.otzo.com
bam.mynetav.org
bam.vizvaz.com
ed-ce.vizvaz.com
ed-cf.otzo.com
ed-cs.vizvaz.com
ed-dl.vizvaz.com
ed-ird.vizvaz.com
ed-ra.vizvaz.com
ed-rd.otzo.com
ed-rs.vizvaz.com
ed-sa.vizvaz.com
ed-sd.vizvaz.com
edalatsod-ir.tk
irsaham1402.site
sa-da.vizvaz.com
sa-de.vizvaz.com
saham-gh.faqserv.com
sahm-as.vizvaz.com
sahm-mo.fartit.com
sahmn-b.vizvaz.com
sahmnq.fartit.com
xstarv2.store

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-10-03)

abk.toh.info
adl-1.faqserv.com
adl-il.vizvaz.com
adl-iri.vizvaz.com
adl-irn.mynetav.org
adl-irnh.fartit.com
adl-saham.faqserv.com
adl-sahm.faqserv.com
adl.duia.ro
adlhh.fartit.com
adliran.duia.ro
adlirn.faqserv.com
bam-meli.my03.com
bame.my03.com
ed-fr.vizvaz.com
ed-sb.vizvaz.com
qdl-inm.faqserv.com
saham.duia.us
sahmn.duia.ro
sexu.duia.us

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-10-06)

adl-aq.mrface.com
adl-c.fartit.com
adl-cc.faqserv.com
adl-ff.fartit.com
adl-jv.my03.com
adl-mm.fartit.com
adl-qq.my03.com
adl-sah.mynetav.org
adl-vq.vizvaz.com
bame.vizvaz.com
ed-rt.fartit.com
ed-sr.vizvaz.com
edlat.shamdi.cfd
gta-fportal.com
icnsh.pro
mynameisking.site
mynameismamad.site
mynameisnull.site
mynameissheykh.site
mynameissupp.site
remote.mynameisking.site
remote.mynameismamad.site
remote.mynameissheykh.site
remote.mynameissupp.site
ry.wwwhost.biz
sa-db.vizvaz.com
sahame.symen.ir
sahamedalat.seatech.ir
seatech.ir
shamdi.cfd
symen.ir
tc.icnsh.pro

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-10-07)

edalat-shan.com
hamyar-mahak.site
mynameiszeus.site
ncpanel.xyz
sahamiru.hair
sbijanr.xyz
skcarriages.com
ed.sahamiru.hair
goodpanel.ncpanel.xyz
remote.mynameiszeus.site
saham-b.skcarriages.com
saham-cs.skcarriages.com
saham-d.skcarriages.com
saham-pa.skcarriages.com
saham-vn.skcarriages.com

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-10-09)

a.mynameisbasil.site
aaaaa.sbs
ad-saham.fartit.com
adl-am.fartit.com
adl-bbs.vizvaz.com
adl-bn.faqserv.com
adl-bn.fartit.com
adl-bn.my03.com
adl-bn.vizvaz.com
adl-cc.vizvaz.com
adl-cl.fartit.com
adl-cqg.fartit.com
adl-gg.mrface.com
adl-gh.vizvaz.com
adl-gha.fartit.com
adl-gn.fartit.com
adl-gq.fartit.com
adl-hh.mrface.com
adl-hjh.faqserv.com
adl-hv.fartit.com
adl-ira.fartit.com
adl-irn.fartit.com
adl-j.faqserv.com
adl-mf.mrface.com
adl-nl.isasecret.com
adl-qo.fartit.com
adl-sahml.fartit.com
adl-vb.mrbasic.com
adl-wh.faqserv.com
adl-xxc.vizvaz.com
adl-zi.vizvaz.com
adl-zq.fartit.com
adl-zx.faqserv.com
adlg-sahm.fartit.com
adlkj.faqserv.com
cmakeapp.com
connhandle.lat
eblag.faqserv.com
eblag.mrface.com
eblagh.my03.com
ed-de.vizvaz.com
ed-fb.vizvaz.com
ed-fc.vizvaz.com
ed-fe.vizvaz.com
ed-fi.vizvaz.com
ed-rf.vizvaz.com
ed-rv.vizvaz.com
edalat.faqserv.com
fa-ed.vizvaz.com
ir-an.faqserv.com
ir-bn.mrface.com
ir-bn.mynetav.org
ir-sn.my03.com
l-adl.faqserv.com
mmdapks.click
mynameisbasil.site
mynameislusi.site
remote.mynameislusi.site
s-ir.faqserv.com
sa-cs.vizvaz.com
sa-dn.vizvaz.com
saeasmekldlkj.click
saham-g.itsaol.com
saham-q.jkub.com
sahama.faqserv.com
sahamx.fartit.com
sahamz.faqserv.com
sahmln.vizvaz.com
sahmnl.faqserv.com
sahmnwq.fartit.com
sdmbyo.xyz
venum.fartit.com

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-10-11)

adir.faqserv.com
adk-iran.mrface.com
adl-as.itsaol.com
adl-flk.fartit.com
adl-ir.mynetav.org
adl-irib.itsaol.com
adl-irn.itsaol.com
adl-irna.fartit.com
adl-sa.fartit.com
adl-ur.itsaol.com
adlh-sn.fartit.com
adloi.mrbasic.com
asaham.itsaol.com
ed-ib.my03.com
edsd.my03.com
ir-edalat.my03.com
iran-vb.fartit.com
irb-ed.fartit.com
irun.fartit.com
sada.my03.com
saham-h.itsaol.com
saham-j.fartit.com
saham-w.itsaol.com
sahamr.fartit.com
sahamw.itsaol.com
sahmnu.fartit.com
sahum.itsaol.com
sair.my03.com
sed.my03.com
uran-adl.fartit.com

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-10-12)

eliyahost.ir
bax.eliyahost.ir

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-10-16)

saeara.rest
adl-ap.faqserv.com
adl-ggs.vizvaz.com
adl-hg.faqserv.com
adl-io.vizvaz.com
adl-irn.vizvaz.com
adl-itn.itsaol.com
adl-ljh.faqserv.com
adl-nw.itsaol.com
adl-oi.fartit.com
adl-sam.itsaol.com
adl-sam.mrbasic.com
adl-shd.mrface.com
adl-zw.mrface.com
adli-ir.mrface.com
afli-ir.faqserv.com
afs.faqserv.com
afs.mrbasic.com
asf.mrbasic.com
dsa.faqserv.com
ed.saeara.rest
eds.mrbasic.com
iran-as.fartit.com
iran-lah.mrface.com
saf.faqserv.com
sahamiran.itsaol.com
sahamlj.fartit.com
sahmnl.vizvaz.com

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-10-17)

adl-adq.faqserv.com
adl-aur.vizvaz.com
adl-iq.vizvaz.com
adl-qew.itsaol.com
adl-qii.fartit.com
adl.isasecret.com
adlc.faqserv.com
adlc.vizvaz.com
adld.vizvaz.com
adlde.mrface.com
adlgs.itsaol.com
adli-q.fartit.com
adliq.faqserv.com
adlir.fartit.com
adlq.itsaol.com
adlv.mrface.com
adlv.my03.com
alrma.lat
fem.faqserv.com
iral-as.mrface.com
r.rewdio.fun
rewdio.fun
saerveradf.lol
sahaqm.itsaol.com
sahm.isasecret.com
sam.faqserv.com

# Generic

/ahmagh/
/DargaSaz/
/eblaghe
/eblagh/
/ARMAN/requests.php?sms=
/chelchele/url.txt
/Eblagh/app.php
/mytop/receive.php?sms=
/Nobitex/UploadSms.php
/Ramzinex/UploadSms.php
/Remote/1005063728/req.php
/pay/mellat/Mellat.php
/public_html/senddata.php
/rat-webpage2
/ebimport.php
/eblagh.php
/eblagh1.php
/eblaghpay.php
/eblaghresult.php
/sana/pay.php
/sms5.php?phone=
/sana-result-post.php
/sna_eblagh.php
/ratsms.php?phone=
/rat/index.php?phone=
/Saderat/login.php
/USK/rat.php

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-10-19)

adfgs-l.mrface.com
adi.isasecret.com
adl-aff.vizvaz.com
adl-aka.itsaol.com
adl-ape.mrface.com
adl-aqw.itsaol.com
adl-awh.vizvaz.com
adl-fot.faqserv.com
adl-gga.faqserv.com
adl-gqs.vizvaz.com
adl-gsq.faqserv.com
adl-iro.vizvaz.com
adl-qda.fartit.com
adl-qow.mrface.com
adl-qp.fartit.com
adl-qps.fartit.com
adl-qqu.fartit.com
adl-qsh.itsaol.com
adl-ue.faqserv.com
adlf-ir.mrface.com
adlirtq.mrface.com
adllhs.itsaol.com
adloir.vizvaz.com
adlsg-qha.vizvaz.com
alureza0021.xyz
appfinez.hair
bopun.fun
edsahamir.com
mynameisnavid.site
nima.alureza0021.xyz
nwsee.bond
remote.mynameisnavid.site
sahame.fartit.com
sahjsg.mrface.com
sebvasring.hair

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-10-20)

auto-service.store
cyerosishere.site
daf.faqserv.com
des.mrbasic.com
eblaguwonmir.cfd
iran-gz.vizvaz.com
iran-hz.mrface.com
iran-qa.faqserv.com
iran-qe.fartit.com
iran-vz.dns05.com
kameltarinyek.monster
ref.faqserv.com
s70.xyz
salamkhb.s70.xyz
serveroneil.lol
tes.mrbasic.com
ves.faqserv.com
/SAHAM-edalat/
/SAHAM-edalat/app.apk

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-10-21)

adlriran.com
adf.faqserv.com
adq.fartit.com
als.mrbasic.com
asc.itsaol.com
asd.isasecret.com
asq.dns05.com
dms.mrface.com
dsm.faqserv.com
dsm.mrbasic.com
iran-sh.fartit.com
irhg.fartit.com
sahmn.fartit.com
sxsigami2021.cf
tedalat.hair

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-10-24)

jdiejhdjej.online
markazpay.com
vpn-v2rynge-ir.tk
yours-app.xyz
adl-vv.mrface.com
adla.faqserv.com
adlg.dns05.com
adls.dns05.com
adls.vizvaz.com
adq.dns05.com
ads.fartit.com
dgfh.dns05.com
dmns.itsaol.com
dsa.itsaol.com
irhs.faqserv.com
shm.faqserv.com

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-10-27)

adsh.vizvaz.com
ap.ronappig.xyz
apuyhh.xyz
bamd.faqserv.com
bams.faqserv.com
cdm.faqserv.com
ceb.faqserv.com
cfb.faqserv.com
das.faqserv.com
deb.faqserv.com
dem.faqserv.com
des.faqserv.com
eba.faqserv.com
ebc.faqserv.com
ebd.faqserv.com
ebf.faqserv.com
edb.faqserv.com
edm.mrbasic.com
eds.faqserv.com
efa.faqserv.com
efs.faqserv.com
ehduhehudhedhu.site
esb.faqserv.com
esd.faqserv.com
fda.faqserv.com
fed.faqserv.com
fogreir.fun
fsa.faqserv.com
hfastt.com
mekerishere.site
mrcomishere.site
rahaishere.site
rbm.faqserv.com
res.faqserv.com
ronappig.xyz
safe.fogreir.fun
sah.faqserv.com
sat.faqserv.com
sba.faqserv.com
sda.faqserv.com
sde.faqserv.com
sdl.faqserv.com
sdm.faqserv.com
sds.faqserv.com
seb.faqserv.com
sed.faqserv.com
sef.faqserv.com
sel.faqserv.com
sem.faqserv.com
sev.faqserv.com
sexb.faqserv.com
sexi.faqserv.com
smt.faqserv.com
sra.faqserv.com
srb.faqserv.com
srd.faqserv.com
srm.faqserv.com
sta.faqserv.com
stableconn.online
stm.faqserv.com
tbs.faqserv.com
tdm.faqserv.com
tes.faqserv.com
tsa.faqserv.com
tsm.faqserv.com
xdpanel.cloud

# Reference: https://www.virustotal.com/gui/file/15d8e6d58f3c2f42796c80df4a3c2d1b49f4696825e76045720f122ea6347c95/detection

samaneese.xyz

# Reference: https://www.virustotal.com/gui/file/fdb58fed3ff68fe6f3e94bff55f18485bf1e860a5f4535b815bd0e12d886f5ef/detection

eblagh-2221.xyz

# Reference: https://www.virustotal.com/gui/file/827f0889f099317f2d233666200d31281e5aed29c3ccc2992052ada2a7220cb1/detection

jsjjsjsjsjsjssh.cf

# Reference: https://www.virustotal.com/gui/file/6378dbbda9cba67aaed1c62b133bff4bfffc22eba641ea3ec73d916174ff1d44/detection

irx-shaparak-ir.cf
pex-shaparak-ir.gq

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-11-03)

http://185.162.235.46
185.162.235.46:443
185.162.235.46:70
a-y.website
ad-irt.vizvaz.com
adf-za.fartit.com
adfq-a.vizvaz.com
adl-vvs.mrbasic.com
ap.sarpkyo.xyz
bsa.faqserv.com
bsc.faqserv.com
bsd.faqserv.com
bse.faqserv.com
bsf.faqserv.com
bsm.faqserv.com
bsr.faqserv.com
dsb.mrbasic.com
dsc.faqserv.com
dsf.faqserv.com
dst.faqserv.com
esc.fartit.com
howtofixit.pw
ir.adf-za.fartit.com
pointernet.info
polandishere.site
rsc.faqserv.com
sarpkyo.xyz
sdc.faqserv.com
sdc.fartit.com
sdc.mrbonus.com
sdhm.fartit.com
victorishere.site

# Reference: https://twitter.com/malwrhunterteam/status/1720197353448018398
# Reference: https://www.virustotal.com/gui/ip-address/186.2.171.8/relations
# Reference: https://www.virustotal.com/gui/ip-address/52.58.33.104/relations
# Reference: https://www.virustotal.com/gui/file/4e55a16633816109acf81fc37b0daec8bf02bca6e6cffe26b48aad68a4d967b2/detection
# Reference: https://www.virustotal.com/gui/file/3259b7b32967a97e94526025e154c2f46b1ea5df7fc1baa77980fd5dcfd38855/detection

awesomedns.online
axinfinity.autos
axinfinity.beauty
axinfinity.boats
axinfinity.bond
axinfinity.click
axinfinity.cyou
axinfinity.homes
axinfinity.lol
axinfinity.makeup
bameman.click
bameman.homes
bameman.live
bameman.shop
bankmelli.buzz
bankmelli.cfd
bankmelli.pics
bankmelli.sbs
bmi.autos
bmi.boats
bmi.homes
bmi.mom
buyvpn.buzz
coinergpt.com
flyvpn.buzz
gbtrader.net
gifcardmali.beauty
gifcardmali.cam
gifcardmali.click
gifcardmali.club
gifcardmali.fun
gifcardmali.homes
gifcardmali.online
gifcardmali.pics
gifcardmali.quest
gifcardmali.shop
gifcardmali.site
gifcardmali.skin
gifcardmali.space
gifcardmali.top
gifcardmali.website
gifcarmalil.beauty
gifcarmalil.click
gifcarmalil.club
gifcarmalil.fun
gifcarmalil.homes
gifcarmalil.life
gifcarmalil.monster
gifcarmalil.pics
gifcarmalil.shop
gifcarmalil.site
gifcarmalil.space
gifcarmalil.store
gifcarmalil.today
gifcarmalil.top
giftcadmali.click
giftcadmali.live
giftcadmali.online
giftcadmali.pics
giftcadmali.shop
giftcadrmall.click
giftcadrmall.shop
giftcadrmallt.beauty
giftcadrmallt.click
giftcadrmallt.digital
giftcadrmallt.fun
giftcadrmallt.life
giftcadrmallt.live
giftcadrmallt.monster
giftcadrmallt.quest
giftcadrmallt.shop
giftcadrmallt.site
giftcadrmallt.skin
giftcadrmallt.space
giftcadrmallt.store
giftcadrmallt.today
giftcadrmallt.top
giftcarbmall.co
giftcardmali.click
giftcardmali.live
giftcardmali.shop
giftcardmali.site
giftcardmali.space
giftcardmali.store
giftcardmall.beauty
giftcardmall.buzz
giftcardmall.one
giftcardmall.today
giftcardmall.top
giftcardml.click
giftcardml.online
giftcardml.pics
giftcardml.shop
giftcardml.site
giftcardml.space
giftcardml.store
giftcardsmall.buzz
giftcardsmall.top
giftcarmall.click
giftecadmall.click
giftecadmall.hair
giftecadmall.homes
giftecadmall.lat
giftecadmall.monster
giftecadmall.pics
giftecadmall.quest
giftecadmall.shop
giftecadmall.skin
giftecadmall.tokyo
giftemali.beauty
giftemali.click
giftemali.fun
giftemali.homes
giftemali.monster
giftemali.online
giftemali.pics
giftemali.site
giftemali.space
giftemali.website
giftmall.autos
giftmall.beauty
giftmall.boats
giftmall.buzz
giftmall.cfd
giftmall.click
giftmall.hair
giftmall.homes
giftmall.life
giftmall.makeup
giftmallcard.beauty
giftmallcard.click
giftmallcard.homes
giftmallcard.live
giftmallcard.online
giftmallcard.pics
giftmallcard.shop
giftmallcard.site
giftmallcard.space
giftmallcard.store
giftscardsmall.one
googletest.buzz
jokercard.one
jokercard.top
jokercard.xyz
jokercarde.beauty
jokercarde.click
jokercarde.homes
jokercarde.life
jokercarde.online
jokercarde.pics
jokercarde.site
jokercarde.space
jokercarde.store
jokercards.buzz
jokercards.one
jokercards.top
jokercardshop.buzz
jokercardshop.one
jokercardshop.top
jokerecard.beauty
jokerecard.click
jokerecard.fun
jokerecard.homes
jokerecard.online
jokerecard.shop
jokerecard.site
jokerecard.space
jokerecard.store
jokerecard.top
jokergift.one
jokergiftcard.buzz
jokergiftcard.one
jokergiftcard.top
jokergiftcards.one
jokergifts.buzz
jokergifts.one
jokergifts.top
jokergiftscards.one
jokergiftshop.buzz
jokerscard.buzz
jokerscard.one
jokerscard.top
jokerscards.buzz
jokerscards.one
jokerscards.top
jokervisacard.one
jokervisacard.top
jokrecadr.beauty
jokrecadr.click
jokrecadr.homes
jokrecadr.live
jokrecadr.online
jokrecadr.pics
jokrecadr.shop
jokrecadr.site
jokrecadr.space
jokrecadr.store
jokrecadrs.click
jokrecadrs.homes
jokrecadrs.lol
jokrecadrs.monster
jokrecadrs.pics
jokrecadrs.quest
jokrecadrs.shop
jokrecadrs.skin
jokrecarde.click
jokrecarde.live
jokrecarde.pics
jokrecarde.shop
jokrecarde.skin
mellat.autos
mellat.beauty
mellat.fun
mellat.homes
mellat.mom
mellat.monster
mellat.pics
mellat.quest
mellat.rest
mellat.skin
mellat.space
mellat.website
mellate.fun
mellate.lol
mellate.mom
mellate.pics
mellate.quest
mellate.rest
mellate.skin
mellate.website
mellibank.buzz
mellot.autos
mellot.bond
mellot.cfd
mellot.click
mellot.fun
mellot.homes
mellot.lol
mellot.mom
mellot.sbs
mellot.space
meltie-rat.live
meltie-rat.shop
meltie-web.info
meltie-web.shop
mlteitapee.website
nobltex.click
nobltex.info
nobltex.live
nobltex.me
otp-saderat.click
otp-saderat.live
otp-saderat.store
parsavpn.buzz
perctmony.autos
perctmony.beauty
perctmony.boats
perctmony.bond
perctmony.click
perctmony.fun
perctmony.hair
perctmony.homes
perctmony.lol
perctmony.makeup
perctmony.mom
perctmony.monster
perctmony.motorcycles
perctmony.quest
perctmony.rest
perctmony.space
perctmony.top
perctmony.website
perctmony.xyz
perctmony.yachts
perfctomney.biz
perfctomney.click
perfctomney.live
perfctomney.online
perfctomney.pics
perfecmonney.click
perfecmonney.homes
perfecmonney.monster
perfecmonney.online
perfecmonney.pics
perfecmonney.shop
perfecmonney.site
perfecmonney.store
perfecmony.autos
perfecmony.beauty
perfecmony.boats
perfecmony.bond
perfecmony.click
perfect-meny.click
perfect-meny.info
perfect-meny.me
perfect-meny.online
perfect-meny.shop
perfect-meny.site
perfect-meny.space
perfect-meny.store
perfecte-moniy.click
perfecte-moniy.info
perfecte-moniy.live
perfecte-moyny.click
perfecte-moyny.info
perfecte-moyny.live
perfecte-moyny.shop
perfectoney.autos
perfectoney.beauty
perfectoney.bond
perfectoney.homes
perfectoney.lol
perfectoney.mom
perfectoney.pics
perfectoney.rest
perfectoney.shop
perfecttemoney.click
perfecttemoney.info
perfecttemoney.live
perfecttemoney.shop
perfecttomoniye.beauty
perfecttomoniye.cam
perfecttomoniye.click
perfecttomoniye.fun
perfecttomoniye.life
perfecttomoniye.one
perfecttomoniye.online
perfecttomoniye.quest
perfecttomoniye.shop
perfecttomoniye.site
perfecttomoniye.space
perfecttomoniye.store
perfecttomoniye.today
perfecttomoniye.website
perfemon.autos
perfemon.beauty
perfemon.boats
perfemon.bond
perfemon.cfd
perfemon.click
perfemon.homes
perfemon.lol
perfemon.makeup
perfemon.mom
perfemon.pics
perfemon.shop
perfemon.website
perfemon.xyz
perfemon.yachts
perfemony.fun
perfemony.hair
perfemony.homes
perfemony.lol
perfemony.makeup
perfemony.mom
perfemony.monster
perfemony.motorcycles
perfemony.pics
perfemony.quest
perfemony.rest
perfemony.shop
perfemony.site
perfemony.skin
perfemony.space
perfemony.website
perfemony.xyz
perfetcmonye.beauty
perfetcmonye.biz
perfetcmonye.click
perfetcmonye.fun
perfetcmonye.homes
perfetcmonye.online
perfetcmonye.pics
perfetcmonye.quest
perfetcmonye.sbs
perfetcmonye.shop
perfetcmonye.site
perfetcmonye.space
perfetcmonye.tokyo
perfetmonay.beauty
perfetmonay.boats
perfetmonay.bond
perfetmonay.cfd
perfetmonay.click
perfetmonay.fun
perfetmonay.homes
perfetmonay.lol
perfetmonay.makeup
perfetmonay.mom
perfetmonay.monster
perfetmonay.motorcycles
perfetmonay.pics
perfetmonay.quest
perfetmonay.rest
perfetmonay.skin
perfetmonay.space
perfetmonay.website
perfetmonay.yachts
perfocmony.beauty
perfocmony.click
perfocmony.cyou
perfocmony.fun
perfocmony.hair
perfocmony.homes
perfocmony.lol
perfocmony.makeup
perfocmony.mom
perfocmony.monster
perfocmony.motorcycles
perfocmony.pics
perfocmony.quest
perfocmony.rest
perfocmony.space
perfocmony.website
perfocmony.xyz
perfocmony.yachts
perfony.beauty
perfony.click
perfony.fun
perfony.hair
perfony.homes
perfony.lol
perfony.makeup
perfony.mom
perfony.monster
perfony.pics
perfony.quest
perfony.rest
perfony.shop
perfony.site
perfony.skin
perfony.space
perfony.store
perfony.website
perfony.yachts
perftomoniye.beauty
perftomoniye.click
perftomoniye.digital
perftomoniye.fun
perftomoniye.life
perftomoniye.live
perftomoniye.shop
perftomoniye.site
perftomoniye.skin
perftomoniye.space
perftomoniye.store
perftomoniye.top
persianvpn.buzz
prefectemoniy.biz
prefectemoniy.click
prefectemoniy.lol
prefectemoniy.online
prefectemoniy.pics
prefectemoniy.shop
prefectemoniy.store
rat-mellbk-webapi.online
rat-sader-simple-1.online
rat-sader-webapi.online
rat-sadereee1.info
rat-sadereee1.live
rat-sadereee1.shop
rat-sedor.one
rat-tejrat1.info
rat-tejrat1.live
rat-tejrat1.shop
sadarat.buzz
sadarat.one
sadarat.top
sadardst.click
sadardst.homes
sadardst.live
sadardst.pics
sadardst.quest
sadardst.shop
sadardst.skin
sadardst.tokyo
sadaret.autos
sadaret.beauty
sadaret.fun
sadaret.hair
sadaret.homes
sadaret.lol
sadaret.makeup
sadaret.mom
sadaret.monster
sadaret.pics
sadaret.quest
sadaret.rest
sadaret.shop
sadaret.site
sadaret.space
sadaret.website
sadaret.xyz
sadaret.yachts
sadberat.click
sadberat.fun
sadberat.hair
sadberat.mom
sadberat.monster
sadberat.pics
sadberat.quest
sadberat.rest
sadberat.sbs
sadberat.shop
sadberat.site
sadberat.skin
sadberat.space
sadberat.store
sadberat.website
sadberat.xyz
sadberat.yachts
sadeaft.beauty
sadeaft.click
sadeaft.club
sadeaft.fun
sadeaft.homes
sadeaft.life
sadeaft.live
sadeaft.online
sadeaft.pics
sadeaft.shop
sadeaft.site
sadeaft.space
sadeaft.store
sadeaft.today
sadeaft.top
sadearat.buzz
sadearat.one
sadearat.top
sadeart.beauty
sadeart.boats
sadeart.bond
sadeart.click
sadeart.cyou
sadeart.fun
sadeart.homes
sadeart.lol
sadeart.makeup
sadeart.mom
sadeart.pics
sadeart.quest
sadeart.rest
sadeart.skin
sadeart.space
sadeart.website
sadeart.xyz
sadeart.yachts
sadebat.beauty
sadebat.buzz
sadect.beauty
sadect.click
sadect.life
sadect.live
sadect.online
sadect.pics
sadect.shop
sadect.site
sadect.space
sadect.store
sadeorate.buzz
sadeorate.cyou
sadeorate.life
sadeorate.monster
sadeorate.top
sadeorate.xyz
sadeoratie.autos
sadeoratie.beauty
sadeoratie.boats
sadeoratie.bond
sadeoratie.cfd
sadeoratie.click
sadeoratie.cyou
sadeoratie.homes
sadeoratie.lol
sadeoratie.makeup
sadeoratie.mom
sadeoratie.motorcycles
sadeordrank.top
sadera.beauty
sadera.biz
sadera.click
sadera.club
sadera.fun
sadera.homes
sadera.icu
sadera.live
sadera.online
sadera.pics
sadera.quest
sadera.site
sadera.skin
sadera.space
sadera.top
saderaat.buzz
saderaat.click
saderaat.fun
saderaat.hair
saderaat.makeup
saderaat.mom
saderaat.monster
saderaat.motorcycles
saderaat.one
saderaat.pics
saderaat.sbs
saderaat.shop
saderaat.site
saderaat.skin
saderaat.store
saderaat.website
saderaat.yachts
saderaet.buzz
saderaet.cyou
saderaet.monster
saderaet.one
saderaet.pics
saderaet.top
saderaetes.buzz
saderapp-shell-api.online
saderapp-webapi-c.online
saderaset.pics
saderaset.top
saderast.buzz
saderast.cloud
saderast.icu
saderast.life
saderast.online
saderast.xyz
saderat-applic.beauty
saderat-applic.biz
saderat-applic.click
saderat-applic.club
saderat-applic.fun
saderat-applic.homes
saderat-applic.icu
saderat-applic.lat
saderat-applic.life
saderat-applic.lol
saderat-applic.monster
saderat-applic.pics
saderat-applic.quest
saderat-applic.shop
saderat-applic.site
saderat-applic.space
saderat-applic.store
saderat-applic.top
saderat-barname.beauty
saderat-barname.click
saderat-barname.club
saderat-barname.homes
saderat-barname.lat
saderat-barname.life
saderat-barname.monster
saderat-barname.online
saderat-barname.pics
saderat-barname.quest
saderat-barname.shop
saderat-barname.site
saderat-barname.space
saderat-barname.store
saderat.autos
saderat.beauty
saderat.boats
saderat.bond
saderat.buzz
saderat.cfd
saderat.click
saderat.fun
saderat.hair
saderat.homes
saderat.lol
saderat.makeup
saderat.monster
saderat.quest
saderat.rest
saderat.skin
saderat.space
saderat.website
saderata.click
saderata.com
saderata.shop
saderata.site
saderata.store
saderata.website
saderatdl.autos
saderatdl.beauty
saderatdl.boats
saderatdl.bond
saderatdl.click
saderatdl.fun
saderatdl.hair
saderatdl.homes
saderatdl.lol
saderatdl.makeup
saderatdl.mom
saderatdl.monster
saderatdl.motorcycles
saderatdl.pics
saderatdl.quest
saderatdl.rest
saderatdl.sbs
saderatdl.shop
saderatdl.site
saderatdl.skin
saderatdl.space
saderatdl.store
saderatdl.website
saderatdl.xyz
saderatdl.yachts
saderate.buzz
saderate.one
saderate.pics
saderate.top
saderati.buzz
saderati.one
saderati.top
saderatie.buzz
saderato.buzz
saderato.one
saderato.top
saderats.autos
saderats.beauty
saderats.boats
saderats.bond
saderats.buzz
saderats.cfd
saderats.click
saderats.cyou
saderats.fun
saderats.hair
saderats.homes
saderats.lol
saderats.makeup
saderats.mom
saderats.monster
saderats.motorcycles
saderats.pics
saderats.quest
saderats.rest
saderats.shop
saderats.site
saderats.skin
saderats.space
saderats.store
saderats.website
saderats.xyz
saderats.yachts
saderest.cfd
saderest.homes
saderest.mom
saderest.pics
saderest.sbs
saderots.autos
saderots.beauty
saderots.boats
saderots.bond
saderots.cfd
saderots.click
saderots.cyou
saderots.fun
saderots.hair
saderots.homes
saderots.lol
saderots.makeup
saderots.mom
saderots.monster
saderots.pics
saderots.quest
saderots.rest
saderots.space
saderots.xyz
saderots.yachts
sadert.autos
sadert.boats
sadert.bond
sadert.cyou
sadert.homes
sadert.lol
sadert.makeup
sadert.mom
sadert.motorcycles
sadert.pics
sadert.quest
sadert.rest
sadert.site
sadert.space
sadert.store
sadert.website
sadert.yachts
sadertac-web.click
saderte.buzz
saderut.autos
saderut.beauty
saderut.boats
saderut.bond
saderut.buzz
saderut.cfd
saderut.click
saderut.fun
saderut.hair
saderut.homes
saderut.lol
saderut.makeup
saderut.mom
saderut.monster
saderut.motorcycles
saderut.online
saderut.pics
saderut.quest
saderut.rest
saderut.sbs
saderut.shop
saderut.site
saderut.skin
saderut.space
saderut.store
saderut.website
saderut.xyz
saderut.yachts
sadevert.beauty
sadevert.biz
sadevert.click
sadevert.digital
sadevert.fun
sadevert.homes
sadevert.icu
sadevert.life
sadevert.live
sadevert.lol
sadevert.online
sadevert.pics
sadevert.quest
sadevert.shop
sadevert.site
sadevert.skin
sadevert.space
sadevert.store
sadevert.today
sadevert.top
sadierat.buzz
sadierat.one
sadierat.top
sadirat.autos
sadirat.beauty
sadirat.buzz
sadirat.hair
sadirat.lol
sadirat.mom
sadirat.one
sadirat.pics
sadirat.quest
sadirat.top
sadirate.buzz
sadirate.one
sadirate.top
sadirati.buzz
sadirati.one
sadirati.top
sadirato.buzz
sadirato.one
sadirato.top
sadirato.xyz
sadiroat.buzz
sadiroat.one
sadiroat.pics
sadorat.buzz
sadorat.one
sadorat.top
sadorat.xyz
sadrat.buzz
sadrat.one
sadrat.top
sadreate.beauty
sadreate.click
sadreate.digital
sadreate.fun
sadreate.info
sadreate.life
sadreate.online
sadreate.quest
sadreate.shop
sadreate.site
sadreate.space
sadreate.store
sadreate.today
sadret.beauty
sadret.buzz
sadret.click
sadret.monster
sadret.one
sadret.site
sadret.skin
sadret.store
sadret.top
sadret.website
sadrit.buzz
sadrit.one
sadrit.top
sadrt.click
sadrt.shop
sadrt.site
sadrt.skin
sadrt.store
sadrt.website
sadtir.beauty
sadtir.click
sadtir.monster
sadtir.shop
sadtir.site
sadtir.store
sadtir.website
saederat.buzz
saederat.one
saederat.top
saedirat.buzz
saedorita.fun
saedorita.mom
saedorita.pics
saedorita.quest
saedorita.rest
saedorita.shop
saedorita.space
saedorita.website
saeiderat.buzz
saeoderat.buzz
saeoderat.cyou
saeoderat.icu
saeoderat.monster
saeoderat.top
saeoderat.xyz
sahderat.click
sahderat.fun
sahderat.shop
sahderat.space
sahderat.store
sahderat.website
saoderat.buzz
saoederat.buzz
sarafitehran.co
sdaert.beauty
sdaert.click
sdaert.fun
sdaert.homes
sdaert.online
sdaert.pics
sdaert.quest
sdaert.site
sdaert.space
sdaert.store
sdaert.tech
sdaert.tokyo
sdaert.top
sderatea.beauty
sderatea.click
sderatea.digital
sderatea.fun
sderatea.life
sderatea.live
sderatea.monster
sderatea.online
sderatea.quest
sderatea.site
sderatea.skin
sderatea.store
sderatea.today
sderatea.top
seaderat.buzz
sedarat.buzz
sedarat.one
sedarat.top
sederat.autos
sederat.beauty
sederat.boats
sederat.bond
sederat.click
sederat.mom
sederat.motorcycles
sederat.pics
sederat.quest
sederat.rest
sedhe.beauty
sedhe.click
sedhe.shop
sedhe.site
sedhe.store
sedhe.website
sedrat.buzz
sedrat.one
sedrat.top
sedrta.beauty
sedrta.click
sedrta.lat
sedrta.lol
sedrta.quest
sedrta.shop
sedrta.site
sedrta.skin
sedrta.store
sedrta.website
sedtir.beauty
sedtir.click
sedtir.makeup
sedtir.monster
sedtir.shop
sedtir.site
sedtir.skin
sedtir.store
sedtir.website
siaoderat.buzz
soaderat.buzz
soaiderat.buzz
sodrat.buzz
sodrat.monster
sodrat.top
sodrat.xyz
spacevpn.buzz
suderat.cfd
suderat.click
suderat.fun
suderat.hair
suderat.mom
suderat.monster
suderat.pics
suderat.quest
suderat.rest
suderat.sbs
suderat.shop
suderat.site
suderat.skin
suderat.space
suderat.store
suderat.website
suderat.xyz
suderat.yachts
vanilagiftcards.one
vanilagiftcards.top
vaniliabalance.click
vaniliagita.beauty
vaniliagita.click
vaniliagita.club
vaniliagita.homes
vaniliagita.life
vaniliagita.live
vaniliagita.one
vaniliagita.online
vaniliagita.shop
vaniliagita.site
vaniliagita.space
vaniliagita.store
vaniliagita.today
vaniliagita.top
vaniliagita.website
vanillacard.buzz
vanillacard.one
vanillacard.sbs
vanillacards.buzz
vanillacards.one
vanillacards.pics
vanillacards.sbs
vanillacards.top
vanillacardshop.buzz
vanillacardshop.one
vanillacardshop.pics
vanillagift.buzz
vanillagift.cyou
vanillagift.life
vanillagift.monster
vanillagift.one
vanillagift.pics
vanillagift.sbs
vanillagiftcard.buzz
vanillagiftcard.cyou
vanillagiftcard.one
vanillagiftcard.pics
vanillagiftcard.sbs
vanillagiftcards.top
vanillagiftcards.xyz
vanillagifts.buzz
vanillagifts.one
vanillagifts.pics
vanillagifts.sbs
vanillagifts.top
vanillagiftshop.buzz
vanillagiftshop.one
vanillagiftshop.pics
vanillagiftshop.top
vanillansblalnce.shop
vanillascard.buzz
vanillascard.one
vanillascard.pics
vanillascard.top
vanillascards.buzz
vanillascards.one
vanillascards.pics
vanillascards.top
vanillasgift.buzz
vanillasgift.one
vanillasgift.pics
vanillasgift.top
vanillasgiftcard.buzz
vanillasgiftcard.one
vanillasgiftcard.pics
vanillasgiftcard.top
vanillasgiftcards.buzz
vanillasgiftcards.one
vanillasgiftcards.pics
vanillasgiftcards.top
vanillasgifts.buzz
vanillasgifts.one
vanillasgifts.pics
vanillasgifts.top
vanillasgiftscard.buzz
vanillasgiftscard.one
vanillasgiftscard.pics
vanillasgiftscard.top
vanillasgiftscards.one
vanillcard.one
vanillcard.top
vanillecard.top
vanillecards.top
vanillegift.top
vanillegiftcard.top
vanillegiftcards.top
vanillegifts.top
vanilliaa.beauty
vanilliaa.click
vanilliaa.life
vanilliaa.one
vanilliaa.online
vanilliaa.pics
vanilliaa.shop
vanilliaa.site
vanilliaa.space
vanilliaa.store
vanilliaa.top
vanilliaa.website
vanilliacard.buzz
vanilliacards.buzz
vanilliagift.buzz
vanilliagiftcard.buzz
vanilliagiftcards.buzz
vanilliagifts.buzz
vanilliagiftscard.buzz
vanilliagiftscards.buzz
vanillibalanced.beauty
vanillibalanced.click
vanillibalanced.digital
vanillibalanced.homes
vanillibalanced.life
vanillibalanced.online
vanillibalanced.pics
vanillibalanced.shop
vanillibalanced.site
vanillibalanced.space
vanillibalanced.store
vanillibalanced.today
vanilligift.autos
vanilligift.beauty
vanilligift.boats
vanilligift.bond
vanilligift.click
vanilligift.fun
vanilligift.hair
vanilligift.homes
vanilligift.lol
vanilligift.makeup
vanilligift.mom
vanilligift.pics
vanilligift.quest
vanilligift.rest
vanilligift.shop
vanilligift.skin
vanilligift.space
vanilligift.website
vanilligift.xyz
vanilligift.yachts
vanilliia.beauty
vanilliia.biz
vanilliia.click
vanilliia.fun
vanilliia.homes
vanilliia.info
vanilliia.life
vanilliia.live
vanilliia.pics
vanilliia.site
vanilliia.store
vanilliia.today
vanilliia.top
vanillisiabalance.click
vanillisiabalance.homes
vanillisiabalance.live
vanillisiabalance.monster
vanillisiabalance.online
vanillisiabalance.pics
vanillisiabalance.sbs
vanillisiabalance.shop
vanillisiabalance.site
vanillisiabalance.space
vanillisiabalance.store
vanillisiabalanced.click
vanillisiabalanced.shop
vanilllabalancee.click
vanlilabalane.beauty
vanlilabalane.click
vanlilabalane.homes
vanlilabalane.online
vanlilabalane.shop
vanlilabalane.site
vanlilabalane.space
vanlilabalane.store
vanlilaballnce.click
vanlilaballnce.fun
vanlilaballnce.homes
vanlilaballnce.life
vanlilaballnce.monster
vanlilaballnce.online
vanlilaballnce.pics
vanlilaballnce.shop
vanlilaballnce.site
vanlilaballnce.space
vanlilaballnce.store
vanlilaballnce.top
vanlilaballnce.website
vpnfly.buzz
vpnparsa.buzz
vpnpersian.buzz
vpnspace.buzz
web-saderat1.info
web-saderat1.live
web-saderat1.shop
web-tejrat1.info
web-tejrat1.live
web-tejrat1.shop
websadirat.autos
xn--gifcardmall-zb9e.com
xn--giftcarmail-6d8e.com
xn--giftcarmall-6d8e.com
xn--pefectmoney-ddc.com
xn--perfectmney-mfb.com
xn--perfectmney-xeb.com
xn--perfectmney-xeb.org
xn--perfectmone-gib.info
xn--perfectmone-gib.life
xn--perfectmone-gib.live
xn--perfectmone-gib.online
xn--perfectmone-gib.site
xn--perfectmone-gib.store
xn--perfetmoney-q9a.com
xn--perfetmoney-q9a.live
xn--prfectmony-ilb.info
xn--prfectmony-ilb.live
xn--prfectmony-ilb.online
xn--prfectmony-ilb.site
xn--prfectmony-ilb.space
xn--prfectmony-ilb.store
aiden.awesomedns.online
app.axinfinity.autos
app.axinfinity.beauty
app.axinfinity.boats
app.axinfinity.bond
app.axinfinity.click
app.axinfinity.cyou
app.axinfinity.homes
app.axinfinity.lol
app.axinfinity.makeup
my.bmi.autos
my.bmi.beauty
my.bmi.boats
my.bmi.homes
my.bmi.mom
romina.awesomedns.online

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-11-04)

apkyrm.pro
gr1.apkyrm.pro
402.isasecret.com
ad-cx.mrface.com
ad-ir.dns05.com
ad-ird.itsaol.com
adffs.faqserv.com
adfs.dns05.com
adfs.mrface.com
adg.vizvaz.com
adirir.itsaol.com
adl-a.vizvaz.com
adl-shm.faqserv.com
adlddf.dns05.com
adldfs.isasecret.com
adle.fartit.com
adlgg.itsaol.com
adlggs.fartit.com
adlgs.vizvaz.com
adlihh.itsaol.com
adliir.vizvaz.com
adlio.vizvaz.com
adliris.faqserv.com
adlks.fartit.com
adllsg.mrface.com
adlr.mrbasic.com
adlrs.dns05.com
adls.mrface.com
adlsf.vizvaz.com
adlsfa.mynetav.org
adlsg.mrface.com
adlsgh.mrbonus.com
adlsh.fartit.com
adlsh.vizvaz.com
adlshq.mynetav.org
adlsj.dns05.com
adlsjd.faqserv.com
adlss.dns05.com
adlwh.itsaol.com
adq.mrbasic.com
adqq.fartit.com
adsfs.fartit.com
adsqe.fartit.com
adsqe.mrbasic.com
adsqq.vizvaz.com
asahm.itsaol.com
asd.fartit.com
asdw.mynetav.org
asdz.faqserv.com
asdz.fartit.com
asl.fartit.com
asl.mrface.com
asldg.mrbasic.com
aslqqq.fartit.com
asn.faqserv.com
asqs.itsaol.com
asw.faqserv.com
azxs.vizvaz.com
bec.faqserv.com
c-iran.dns05.com
cas.faqserv.com
cbt.faqserv.com
cdf.faqserv.com
ced.faqserv.com
cfv.faqserv.com
cpq.mrface.com
csa.itsaol.com
csn.faqserv.com
cvm.faqserv.com
dhh.faqserv.com
dnc.faqserv.com
drnull.ngrok.dev
dsa.fartit.com
dsg.dns05.com
dsm.itsaol.com
e-h-r-a-z-i-61.mynetav.org
eblaghs.fartit.com
efc.faqserv.com
i-iran.itsaol.com
ir-az.fartit.com
ir-irn.vizvaz.com
iran-ha.isasecret.com
iran-hg.itsaol.com
iran-hh.dns05.com
iran-hhs.fartit.com
iran-hj.fartit.com
iran-hk.mrface.com
iranda.mrbasic.com
irhsh.faqserv.com
ladl.isasecret.com
rogers-returndata.com
sah.vizvaz.com
sahaam.faqserv.com
sahadl.fartit.com
sahdm.fartit.com
sahg.itsaol.com
sahgs.faqserv.com
sahm.mrface.com
sahmanb.dns05.com
sahmbe.fartit.com
sahmk.mrface.com
sahmn.faqserv.com
sahmns.mrbonus.com
sahmsa.dns05.com
sdt.faqserv.com
sfc.faqserv.com
sghdaa.dns2.us
smb.faqserv.com
smc.faqserv.com
smv.faqserv.com
tfs.faqserv.com
uran.fartit.com
variz.fartit.com
zds.faqserv.com

# Reference: https://www.virustotal.com/gui/ip-address/45.155.250.45/relations
# Reference: https://www.virustotal.com/gui/file/b32606cadde96a5d29e1e8ced40a38dee111f59f65a9dda68fa0726c7e232792/detection

alureza.nl
iri402.org

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-11-07)

acb.faqserv.com
acm.faqserv.com
adt.faqserv.com
afc.faqserv.com
afe.faqserv.com
asv.faqserv.com
atc.faqserv.com
atv.faqserv.com
dsfa.fartit.com
eds.ydns.eu
l-i-r-n.itsaol.com
lliean.faqserv.com
testqq.fartit.com

# Reference: https://www.virustotal.com/gui/ip-address/186.2.171.36/relations
# Reference: https://www.virustotal.com/gui/file/f59852f6d81cc791036410c2f96f7413056ef9c722fe1441a053d07128a54f30/detection
# Reference: https://www.virustotal.com/gui/file/4aaf79e803a1fa102dc65c31cd7bae59c10cc87c431ee8fe47bb06d9c7c86220/detection
# Reference: https://www.virustotal.com/gui/file/31eb2c667594f4fd4de2f66a8786c75a275108121902a062c19a5a0cb6c53fb2/detection
# Reference: https://www.virustotal.com/gui/file/1bad8f904f486b45ceb721ab7e1760e7fd86226f247ed0e936e5c64e2379499c/detection

1baam.buzz
1bam.buzz
1bamapp.buzz
1bamdl.buzz
1bamino.buzz
1bamlogin.buzz
1bamport.buzz
1bamsafe.buzz
1bamsite.buzz
1bamweb.buzz
1dashlogin.autos
1dashlogin.beauty
1dashlogin.boats
1dashlogin.bond
1dashlogin.buzz
1dashlogin.hair
1dashlogin.homes
1dashlogin.lol
1dashlogin.makeup
1dashlogin.mom
1dashlogin.monster
1dashlogin.motorcycles
1dashlogin.one
1dashlogin.pics
1dashlogin.quest
1dashlogin.sbs
1dashlogin.skin
1dashlogin.top
1dashlogin.xyz
1dashlogin.yachts
1saderapp.one
1sadergate.pics
1saderlog.lol
1saderme.sbs
1sadermob.mom
1saderport.quest
1sadersafe.buzz
1sadersite.top
1saderweb.xyz
1saderyou.bond
2weblogin.autos
2weblogin.beauty
2weblogin.boats
2weblogin.bond
2weblogin.buzz
2weblogin.hair
2weblogin.homes
2weblogin.lol
2weblogin.makeup
2weblogin.mom
2weblogin.monster
2weblogin.motorcycles
2weblogin.one
2weblogin.pics
2weblogin.quest
2weblogin.sbs
2weblogin.skin
2weblogin.top
2weblogin.xyz
2weblogin.yachts
adwordspartner.shop
bestwallet.buzz
bigwallet.buzz
blockersmea.shop
bsibnk.buzz
bsiclick.buzz
bsicom.buzz
bsidl.buzz
bsigate.buzz
bsigov.buzz
bsinew.buzz
bsione.buzz
bsiorg.buzz
bsipal.buzz
bsipay.buzz
bsiport.buzz
bsisafe.buzz
bsisite.buzz
bsiweb.buzz
cyberwallet.buzz
dashbordlogin.bond
dashbordlogin.buzz
dashbordlogin.hair
dashbordlogin.lol
dashbordlogin.mom
dashbordlogin.pics
dashbordlogin.quest
dashbordlogin.sbs
dashbordlogin.skin
dashbordlogin.top
generalapp.top
gifmallcare.autos
gifmallcare.bond
gifmallcare.buzz
gifmallcare.homes
gifmallcare.lol
gifmallcare.mom
gifmallcare.sbs
gifmallcare.skin
gifmallcare.top
hotwallet.buzz
jakeorgulf.beauty
jakeorgulf.bond
jakeorgulf.hair
jakeorgulf.lol
jakeorgulf.mom
jakeorgulf.pics
jakeorgulf.quest
jakeorgulf.sbs
jakeorgulf.skin
jakeorgulf.yachts
jokergif.autos
jokergif.bond
jokergif.buzz
jokergif.homes
jokergif.lol
jokergif.mom
jokergif.sbs
jokergif.skin
jokergif.top
jukorgifts.autos
jukorgifts.buzz
jukorgifts.makeup
jukorgifts.mom
jukorgifts.monster
jukorgifts.quest
jukorgifts.sbs
jukorgifts.skin
jukorgifts.top
jukorgifts.yachts
logintoweb.autos
logintoweb.buzz
logintoweb.makeup
logintoweb.mom
logintoweb.monster
logintoweb.quest
logintoweb.sbs
logintoweb.skin
logintoweb.top
logintoweb.yachts
logintweb.bond
logintweb.buzz
logintweb.hair
logintweb.homes
logintweb.lol
logintweb.mom
logintweb.pics
logintweb.quest
logintweb.sbs
logintweb.skin
logintweb.top
loginweb.autos
loginweb.beauty
loginweb.boats
loginweb.bond
loginweb.buzz
loginweb.hair
loginweb.homes
loginweb.lol
loginweb.makeup
loginweb.mom
loginweb.monster
loginweb.motorcycles
loginweb.pics
loginweb.quest
loginweb.sbs
loginweb.skin
loginweb.top
loginweb.yachts
masterwallet.buzz
mellatapp.buzz
mellatdl.buzz
mellatgate.buzz
mellatpal.buzz
mellatpay.buzz
mellatpool.buzz
mellatport.buzz
mellatsafe.buzz
mellatsite.buzz
mellatweb.buzz
mywallet.buzz
parfactamony.buzz
parfactamony.cyou
parfactamony.monster
parfactamony.top
parfactamony.xyz
pefectermny.beauty
pefectermny.cam
pefectermny.fun
pefectermny.homes
pefectermny.lat
pefectermny.lol
pefectermny.pics
pefectermny.quest
pefectermny.sbs
pefectermny.shop
pefectermny.site
pefectermny.skin
pefectermny.space
pefectermny.store
pefectermny.website
perfactormolny.beauty
perfactormolny.buzz
perfactormolny.cfd
perfactormolny.hair
perfactormolny.homes
perfactormolny.lat
perfactormolny.makeup
perfactormolny.motorcycles
perfactormolny.quest
perfactormolny.sbs
perfactormolny.skin
perfactormolny.top
perfactormolny.xyz
perfecmany.beauty
perfecmany.click
perfecmany.homes
perfecmany.lat
perfecmany.lol
perfecmany.online
perfecmany.pics
perfecmany.quest
perfecmany.top
perfecolony.buzz
perfecolony.cyou
perfecolony.monster
perfecolony.top
perfecolony.xyz
perfecomny.cam
perfecomny.fun
perfecomny.lol
perfecomny.online
perfecomny.quest
perfecomny.shop
perfecomny.site
perfecomny.skin
perfecomny.space
perfecomny.website
perfecomony.beauty
perfecomony.cam
perfecomony.click
perfecomony.homes
perfecomony.lat
perfecomony.lol
perfecomony.monster
perfecomony.quest
perfecomony.sbs
perfecomony.shop
perfecomony.skin
perfecomony.top
perfecomony.xyz
perfectclothing.cyou
perfectclothing.monster
perfectemonye.click
perfectemonye.fun
perfectemonye.homes
perfectemonye.lat
perfectemonye.lol
perfectemonye.online
perfectemonye.pics
perfectemonye.sbs
perfectemonye.shop
perfectemonye.site
perfectemonye.skin
perfectemonye.space
perfectme.cyou
perfectme.top
perfectme.world
perfectmeonycom.beauty
perfectmeonycom.cam
perfectmeonycom.fun
perfectmeonycom.lat
perfectmeonycom.monster
perfectmeonycom.online
perfectmeonycom.pics
perfectmeonycom.sbs
perfectmeonycom.site
perfectmeonycom.space
perfectmeonycom.top
perfemanor.top
perfemanor.xyz
perfemonoply.buzz
perfemonoply.cyou
perfemonoply.top
perfemonoply.xyz
perfemonoplygroup.buzz
perfemonoplygroup.xyz
perfermanely.autos
perfermanely.beauty
perfermanely.boats
perfermanely.bond
perfermanely.hair
perfermanely.homes
perfermanely.lol
perfermanely.makeup
perfermanely.mom
perfermanely.monster
perfermanely.motorcycles
perfermanely.pics
perfermanely.quest
perfermanely.sbs
perfermanely.skin
perfermanely.xyz
perfermanely.yachts
perfermanst.buzz
perfermanst.cyou
perfermanst.top
perfermanst.xyz
perfermanstdc.cyou
perfermanstdc.monster
perfermanstdc.top
perfermanstdc.xyz
perfermansts.top
perfermansts.xyz
perficamny.bond
perficamny.cfd
perficamny.fun
perficamny.makeup
perficamny.mom
perficamny.monster
perficamny.sbs
perfiomonia.click
perfiomonia.lat
perfiomonia.lol
perfiomonia.monster
perfiomonia.online
perfiomonia.pics
perfiomonia.quest
perfiomonia.shop
perfiomonia.skin
perfiomonia.xyz
permanchester.top
permanchester.xyz
perofemanie.bond
perofemanie.buzz
perofemanie.hair
perofemanie.lol
perofemanie.mom
perofemanie.pics
perofemanie.quest
perofemanie.sbs
perofemanie.skin
perofemanie.top
pfctromnyoe.cam
pfctromnyoe.click
pfctromnyoe.fun
pfctromnyoe.homes
pfctromnyoe.lat
pfctromnyoe.lol
pfctromnyoe.online
pfctromnyoe.pics
pfctromnyoe.quest
pfctromnyoe.sbs
pfctromnyoe.site
pfctromnyoe.skin
pfctromnyoe.space
pfctromnyoe.store
pfctromnyoe.today
pfctromnyoe.top
poketalternatives.life
poketaoption.top
poketaoption.xyz
poketaoptions.top
poketaoptions.xyz
poketoptain.monster
poketoptain.top
poketoptain.xyz
poketoption.buzz
poketoption.life
poketoptions.buzz
poketoptions.cyou
poketoptions.top
poketoptions.xyz
pokketoptions.buzz
pokketoptions.cyou
pokketoptions.xyz
prefcatmonday.autos
prefcatmonday.beauty
prefcatmonday.boats
prefcatmonday.buzz
prefcatmonday.cfd
prefcatmonday.cyou
prefcatmonday.hair
prefcatmonday.lat
prefcatmonday.lol
prefcatmonday.makeup
prefcatmonday.monster
prefcatmonday.motorcycles
prefcatmonday.pics
prefcatmonday.quest
prefcatmonday.sbs
prefcatmonday.skin
prefcatmonday.top
prefcatmonday.xyz
prefcatmonday.yachts
prefectemonye.beauty
prefectemonye.click
prefectemonye.fun
prefectemonye.homes
prefectemonye.lat
prefectemonye.live
prefectemonye.lol
prefectemonye.monster
prefectemonye.online
prefectemonye.pics
prefectemonye.shop
prefectemonye.site
prefectemonye.space
prefectemonye.store
prefectemonye.top
preftomnye.lol
preftomnye.monster
preftomnye.online
preftomnye.pics
preftomnye.shop
preftomnye.store
procompany.buzz
procompany.xyz
profectman.beauty
profectman.cam
profectman.click
profectman.homes
profectman.lat
profectman.lol
profectman.monster
profectman.pics
profectman.quest
profectman.sbs
profectman.shop
profectman.skin
profectman.store
profectman.top
profectman.xyz
profermalny.top
profermalny.xyz
profermalnyonline.xyz
prowallet.buzz
purrfect.buzz
purrfect.top
purrfectme.cyou
purrfectme.xyz
rat-saderaisa.buzz
rat-saderaisa.top
rat-sadir.mom
rat-sadr.buzz
rat-sadr.top
rat-sedor.one
rate-mellat.click
rate-mellat.shop
rate-saderart.click
rate-saderart.lol
rate-saderart.shop
rate-saderart.store
sadart.beauty
sadart.cam
sadart.fun
sadart.homes
sadart.lat
sadart.lol
sadart.monster
sadart.online
sadart.pics
sadart.sbs
sadart.shop
sadart.site
sadart.space
sadart.store
sadart.website
sader.buzz
saderamate.top
saderanking.buzz
saderapp.buzz
saderasi.beauty
saderasi.cam
saderasi.click
saderasi.fun
saderasi.homes
saderasi.lat
saderasi.lol
saderasi.monster
saderasi.online
saderasi.pics
saderasi.quest
saderasi.sbs
saderasi.site
saderasi.skin
saderasi.space
saderasi.top
saderasi.xyz
saderasmate.buzz
saderasmate.top
saderatak.beauty
saderatak.bond
saderatak.buzz
saderatak.cfd
saderatak.click
saderatak.hair
saderatak.lat
saderatak.makeup
saderatak.monster
saderatak.motorcycles
saderatak.online
saderatak.quest
saderatak.sbs
saderatak.shop
saderatak.skin
saderatak.tech
saderatak.top
saderatak.world
saderatak.xyz
saderatak.yachts
saderatbnk.beauty
saderatbnk.click
saderatbnk.online
saderatbnk.pics
saderatbnk.quest
saderatbnk.shop
saderatbnk.skin
saderatbnk.top
saderatbnk.xyz
saderating.top
saderatings.buzz
saderatings.top
saderbase.buzz
saderbeam.buzz
saderbike.buzz
saderbnk.buzz
saderdl.buzz
sadereet.top
sadereet.xyz
saderframe.buzz
sadergame.buzz
sadergate.buzz
saderguard.buzz
saderhamrah.buzz
saderi.beauty
saderi.buzz
saderi.cfd
saderi.hair
saderi.lat
saderi.makeup
saderi.motorcycles
saderi.quest
saderi.sbs
saderi.skin
saderi.top
saderi.xyz
saderi.yachts
saderlib.buzz
saderlight.buzz
saderlink.buzz
saderlink.cyou
saderlink.top
saderlink.xyz
saderlinks.monster
saderlinq.top
saderlinx.top
saderlinx.xyz
sadermake.buzz
sadermall.buzz
sadermy.buzz
sadernow.buzz
saderon.buzz
saderport.buzz
sadersafe.buzz
sadershell.buzz
sadersite.buzz
sadersite.top
sadersite.xyz
sadertoday.buzz
saderweb.buzz
saderwebsite.top
saderwebsite.xyz
saderwell.buzz
sadiratapp.buzz
sadiratbe.buzz
sadiratbest.buzz
sadiratcom.buzz
sadiratdl.buzz
sadiratgate.buzz
sadiratguard.buzz
sadirathey.buzz
sadiratman.buzz
sadiratme.buzz
sadiratmy.buzz
sadiratpay.buzz
sadiratport.buzz
sadiratsafe.buzz
sadiratzero.buzz
sadorank.click
sadorank.lat
sadorank.monster
sadorank.online
sadorank.pics
sadorank.quest
sadorank.shop
sadorank.site
sadorank.skin
sadorank.space
sadorank.store
sadorank.xyz
sadorapp.buzz
sadorbnk.buzz
sadordl.buzz
sadorgate.buzz
sadorgo.buzz
sadorme.buzz
sadormy.buzz
sadornow.buzz
sadorport.buzz
sadorsafe.buzz
sadrate.bond
sadrate.click
sadrate.fun
sadrate.hair
sadrate.makeup
sadrate.mom
sadrate.monster
sadrate.pics
sadrate.skin
sadrate.space
sadrate.top
sadrate.yachts
sadreat.buzz
sadreatapp.buzz
sadreatdl.buzz
sadreatgate.buzz
sadreatgo.buzz
sadreatmy.buzz
sadreatport.buzz
sadreatsafe.buzz
sadreatsite.buzz
sadreatweb.buzz
sadrect.buzz
sadrectapp.buzz
sadrectdl.buzz
sadrectgate.buzz
sadrectgo.buzz
sadrectmy.buzz
sadrectport.buzz
sadrectsafe.buzz
sadrectsite.buzz
sadrectweb.buzz
saferat.buzz
saferatapp.buzz
saferatdl.buzz
saferatgate.buzz
saferatgo.buzz
saferatmy.buzz
saferatport.buzz
saferatsafe.buzz
saferatsite.buzz
saferatweb.buzz
safewallet.buzz
sdarwetea.click
sdarwetea.homes
sdarwetea.lat
sdarwetea.shop
sdarwetea.site
sdarwetea.skin
sderty.beauty
sderty.click
sderty.fun
sderty.homes
sderty.lol
sderty.monster
sderty.online
sderty.pics
sderty.sbs
sderty.shop
sderty.site
sderty.space
sderty.store
sdretas.cam
sdretas.click
sdretas.fun
sdretas.sbs
sdretas.site
sdretas.skin
sdretas.space
sdretas.website
sdritat.click
sdritat.lol
sdritat.sbs
sdritat.site
sdritat.skin
sdritat.space
sdritat.store
sdrteik.beauty
sdrteik.click
sdrteik.homes
sdrteik.lol
sdrteik.monster
sdrteik.online
sdrteik.pics
sdrteik.sbs
sdrteik.shop
sdrteik.space
sdrteik.top
seaderapp.buzz
seaderbnk.buzz
seaderdl.buzz
seadergate.buzz
seadergo.buzz
seaderme.buzz
seadermy.buzz
seadernow.buzz
seaderport.buzz
seadersafe.buzz
sedar.beauty
sedar.buzz
sedar.cam
sedar.click
sedar.fun
sedar.homes
sedar.lat
sedar.lol
sedar.monster
sedar.pics
sedar.quest
sedar.sbs
sedar.shop
sedar.site
sedar.skin
sedar.top
sedar.website
sedarbit.buzz
sedarbuzz.buzz
sedarcat.buzz
sedareatapp.buzz
sedareatbe.buzz
sedareatbest.buzz
sedareatcam.buzz
sedareatdl.buzz
sedareatgate.buzz
sedareatguard.buzz
sedareathey.buzz
sedareatman.buzz
sedareatme.buzz
sedareatmy.buzz
sedareatpay.buzz
sedareatport.buzz
sedareatsafe.buzz
sedareatzero.buzz
sedarmilk.buzz
sedarshape.buzz
sedarsite.buzz
sedartip.buzz
sedarwave.buzz
sedarweb.buzz
sedarzero.buzz
sedor.buzz
sedorapp.buzz
sedorat.buzz
sedorbit.buzz
sedorbnk.buzz
sedordl.buzz
sedorgate.buzz
sedorguard.buzz
sedorme.buzz
sedormy.buzz
sedoron.buzz
sedorport.buzz
sedorsafe.buzz
sedorshop.buzz
sedorsite.buzz
sedorstore.buzz
sedorweb.buzz
sibnk.buzz
suderapp.buzz
suderbnk.buzz
suderdl.buzz
sudergate.buzz
sudergo.buzz
suderme.buzz
sudermy.buzz
sudernow.buzz
suderport.buzz
sudersafe.buzz
topwallet.buzz
vaneliagifto.autos
vaneliagifto.beauty
vaneliagifto.boats
vaneliagifto.bond
vaneliagifto.buzz
vaneliagifto.hair
vaneliagifto.homes
vaneliagifto.lol
vaneliagifto.makeup
vaneliagifto.mom
vaneliagifto.monster
vaneliagifto.motorcycles
vaneliagifto.pics
vaneliagifto.quest
vaneliagifto.sbs
vaneliagifto.skin
vaneliagifto.top
vaneliagifto.yachts
vaneliegieft.autos
vaneliegieft.beauty
vaneliegieft.boats
vaneliegieft.bond
vaneliegieft.hair
vaneliegieft.homes
vaneliegieft.lol
vaneliegieft.makeup
vaneliegieft.mom
vaneliegieft.pics
vaneliegieft.quest
vaneliegieft.sbs
vaneliegieft.skin
vaneliegieft.xyz
vaneliegieft.yachts
vaneligeft.autos
vaneligeft.beauty
vaneligeft.boats
vaneligeft.bond
vaneligeft.hair
vaneligeft.homes
vaneligeft.lol
vaneligeft.makeup
vaneligeft.mom
vaneligeft.monster
vaneligeft.pics
vaneligeft.quest
vaneligeft.sbs
vaneligeft.skin
vaneligeft.yachts
vaneliogoft.autos
vaneliogoft.beauty
vaneliogoft.boats
vaneliogoft.bond
vaneliogoft.buzz
vaneliogoft.hair
vaneliogoft.homes
vaneliogoft.lol
vaneliogoft.mom
vaneliogoft.pics
vaneliogoft.quest
vaneliogoft.sbs
vaneliogoft.skin
vaneliogoft.top
vanielagem.autos
vanielagem.beauty
vanielagem.buzz
vanielagem.cfd
vanielagem.cyou
vanielagem.hair
vanielagem.homes
vanielagem.lat
vanielagem.lol
vanielagem.makeup
vanielagem.mom
vanielagem.monster
vanielagem.motorcycles
vanielagem.quest
vanielagem.sbs
vanielagem.skin
vanielagem.top
vanielagem.xyz
vanielagem.yachts
vanielagifs.bond
vanielagifs.buzz
vanielagifs.hair
vanielagifs.homes
vanielagifs.lol
vanielagifs.mom
vanielagifs.pics
vanielagifs.quest
vanielagifs.sbs
vanielagifs.skin
vanielagifs.top
vanielgioft.beauty
vanielgioft.bond
vanielgioft.hair
vanielgioft.lol
vanielgioft.mom
vanielgioft.pics
vanielgioft.quest
vanielgioft.sbs
vanielgioft.skin
vanillacake.top
vanillacake.xyz
vanillagifts.cyou
vanillagifts.monster
vanillagiftstores.xyz
vanillagoodies.buzz
vanillaxmas.xyz
vanillgift.beauty
vanillgift.cam
vanillgift.click
vanillgift.fun
vanillgift.homes
vanillgift.lat
vanillgift.lol
vanillgift.monster
vanillgift.online
vanillgift.pics
vanillgift.quest
vanillgift.sbs
vanillgift.shop
vanillgift.site
vanillgift.skin
vanillgift.space
vanillgift.store
vanillgift.top
vanillgift.website
vanillgift.xyz
vanillgifti.beauty
vanillgifti.cfd
vanillgifti.click
vanillgifti.hair
vanillgifti.homes
vanillgifti.lat
vanillgifti.lol
vanillgifti.makeup
vanillgifti.monster
vanillgifti.motorcycles
vanillgifti.pics
vanillgifti.quest
vanillgifti.sbs
vanillgifti.skin
vanillgifti.top
vanillgifti.xyz
vanillgifti.yachts
vanilliecard.buzz
vanilliecard.cyou
vanilliecard.top
vanilliecard.xyz
vanilliecards.buzz
vanilliecards.cyou
vanilliecards.monster
vanilliedecard.top
vanilliedecard.xyz
vanilliemastercard.buzz
vanilliemastercard.cyou
vanillliablne.click
vanillliablne.lol
vanillliablne.monster
vanillliablne.online
vanillliablne.pics
vanillliablne.shop
vaniolaguard.beauty
vaniolaguard.boats
vaniolaguard.bond
vaniolaguard.buzz
vaniolaguard.cfd
vaniolaguard.hair
vaniolaguard.homes
vaniolaguard.lol
vaniolaguard.makeup
vaniolaguard.quest
vaniolaguard.sbs
vaniolaguard.top
vaniolaguard.xyz
vanliegifs.autos
vanliegifs.beauty
vanliegifs.boats
vanliegifs.bond
vanliegifs.hair
vanliegifs.homes
vanliegifs.lol
vanliegifs.makeup
vanliegifs.mom
vanliegifs.monster
vanliegifs.motorcycles
vanliegifs.pics
vanliegifs.quest
vanliegifs.sbs
vanliegifs.skin
vanliegifs.xyz
vanliegifs.yachts
vanligeeks.autos
vanligeeks.beauty
vanligeeks.boats
vanligeeks.bond
vanligeeks.buzz
vanligeeks.cyou
vanligeeks.hair
vanligeeks.homes
vanligeeks.lat
vanligeeks.lol
vanligeeks.makeup
vanligeeks.mom
vanligeeks.monster
vanligeeks.motorcycles
vanligeeks.quest
vanligeeks.skin
vanligeeks.top
vanligeeks.xyz
vanligeeks.yachts
vanliieblnce.beauty
vanliieblnce.click
vanliieblnce.homes
vanliieblnce.lol
vanliieblnce.monster
vanliieblnce.online
vanliieblnce.pics
vanliieblnce.shop
vanliieblnce.site
vanoilgives.autos
vanoilgives.bond
vanoilgives.buzz
vanoilgives.hair
vanoilgives.homes
vanoilgives.lat
vanoilgives.lol
vanoilgives.makeup
vanoilgives.mom
vanoilgives.quest
vanoilgives.sbs
vanoilgives.skin
vanoilgives.top
vanoilgives.yachts
vionelglobe.autos
vionelglobe.beauty
vionelglobe.boats
vionelglobe.bond
vionelglobe.hair
vionelglobe.homes
vionelglobe.lol
vionelglobe.makeup
vionelglobe.mom
vionelglobe.monster
vionelglobe.motorcycles
vionelglobe.pics
vionelglobe.quest
vionelglobe.sbs
vionelglobe.skin
vionelglobe.xyz
vionelglobe.yachts
vnilloblance.click
vnilloblance.lol
vnilloblance.online
vnilloblance.shop
vnilloblance.store
webdashbordlogin.buzz
weblogin.autos
weblogin.beauty
weblogin.boats
weblogin.bond
weblogin.buzz
weblogin.hair
weblogin.homes
weblogin.lol
weblogin.makeup
weblogin.mom
weblogin.monster
weblogin.motorcycles
weblogin.pics
weblogin.quest
weblogin.sbs
weblogin.skin
weblogin.top
weblogin.yachts
weblogint.autos
weblogint.beauty
weblogint.boats
weblogint.bond
weblogint.buzz
weblogint.hair
weblogint.homes
weblogint.lol
weblogint.makeup
weblogint.mom
weblogint.monster
weblogint.motorcycles
weblogint.pics
weblogint.quest
weblogint.sbs
weblogint.skin
weblogint.top
weblogint.xyz
weblogint.yachts
webloginto.bond
webloginto.buzz
webloginto.hair
webloginto.lol
webloginto.mom
webloginto.pics
webloginto.quest
webloginto.sbs
webloginto.skin
webloginto.top
weblogintweb.pics
webloginweb.top
webtologin.bond
webtologin.buzz
webtologin.hair
webtologin.lol
webtologin.mom
webtologin.pics
webtologin.quest
webtologin.sbs
webtologin.top
webvaneliagifto.top
webweblogin.sbs
webweblogint.beauty
webweblogint.boats
webweblogint.homes
webweblogint.quest
webweblogint.xyz
webwebloginto.skin
webwebtologin.pics
webwebtologin.quest
webwebtologin.sbs
webwebtologin.top
yourwallet.buzz

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-11-12)

1-ir.fartit.com
aaq-ir.dns05.com
ad-ird.mrface.com1dashlogin.beauty
adse.fartit.com
afm.faqserv.com
al-ir.faqserv.com
aq-ir.itsaol.com
as-ir.mrface.com
asdir.dns05.com
asq-ir.fartit.com
cembec.pics
cfm.fartit.com
cnf.faqserv.com
dfs-sir.vizvaz.com
ds-iran.vizvaz.com
ebs.faqserv.com
ed.sarltma.rest
fd-ir.dns05.com
ghabzino.fartit.com
iirir.vizvaz.com
ir-sahq.fartit.com
sah-am.dns05.com
sarltma.rest
tfa.faqserv.com

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-11-15)

aledlsa.sbs
ctrdfg.cloud
dodovdo.store
iirir.com
sahmane.sbs
salesthe.xyz
pkmqazreza.workers.dev
drnull.pkmqazreza.workers.dev
ed.sahmane.sbs
er.aledlsa.sbs

# Reference: https://www.virustotal.com/gui/ip-address/91.107.153.189/relations

pnlsairani.ddns.net
saham-edl.ddns.net

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-11-18)

dmc.dns05.com
erc.dns05.com
fbc.dns05.com
fca.dns05.com
fcb.dns05.com
fmc.dns05.com
fms.dns05.com
htc.dns05.com
rdc.dns05.com
rsc.dns05.com
scm.dns05.com
scv.fartit.com
sdt.fartit.com
shc.fartit.com
shf.fartit.com
smc.dns05.com
smf.dns05.com
ssc.fartit.com
ssf.fartit.com
ssj.fartit.com
ssn.fartit.com
sst.fartit.com
ssv.fartit.com

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-11-21)

fastis.xyz
howtofixit.imnotaturk.network
imini.site
imnotaturk.network
re.remotekimhyunnck.site
remotekimhyunnck.site
thebestgn.xyz

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-11-22)

ahoram-appphp.tech
pkmqazreza.workers.dev
ssn.fartit.com
drnull.pkmqazreza.workers.dev

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-11-23)

ahoram-appphp.tech
jkishere.site
nitrocp.xyz
webestblack.cloud
abn.dns05.com
acm.dns05.com
acm.fartit.com
arb.dns05.com
arc.fartit.com
arm.dns05.com
arm.fartit.com
arv.fartit.com
cfc.dns05.com
cmc.fartit.com
eb.dns05.com
ebd.dns05.com
edv.dns05.com
efa.dns05.com
efs.dns05.com
enc.dns05.com
erc.fartit.com
esm.dns05.com
esv.dns05.com
rvc.fartit.com
sna.fartit.com
tmc.fartit.com
tsm.fartit.com

# Reference: https://twitter.com/malwrhunterteam/status/1728175485853872427
# Reference: https://www.virustotal.com/gui/ip-address/186.2.175.27/relations
# Reference: https://www.virustotal.com/gui/file/72829a5407ecd5607613f6351019302ba8c55317f4f3dff1f8280f7c3e7b4897/detection

apibots.click
apilink.click
apinew.click
dldldl.click
dldldldl.click
dlsad.click
dlsad.shop
downloadfiles.click
hamsad.click
kasheverzi.org
keshevarzi.com
kesheverzi.com
keshvarzi.tech
keshvarzia.org
keshverzi.org
keshvrzi.org
mahoon.click
sadaat.click
sadaet.site
sadait.store
sadaot.shop
sadarat.site
sadarsd.com
sadbes.click
sadcert.beauty
sadcert.lat
sadcert.monster
sadcert.pics
sadcert.shop
sadcert.site
sadcert.skin
sadcert.space
sadcert.store
sadcert.website
sadcet.beauty
sadcet.buzz
sadcet.click
sadcet.fun
sadcet.pics
sadcet.shop
sadcet.site
sadcet.skin
sadcet.store
sadcet.website
sadeet.click
sadeet.club
sadel.click
sadelat.com
sadelet.com
saderash.com
saderatapp.click
saderatapps.click
saderate.tech
saderati.tech
saderaty.tech
sadeta.com
sadete.org
sadeto.tech
sadetrds.biz
sadman.site
sadmehr.com
sadmehri.com
sadmet.beauty
sadmet.click
sadmet.fun
sadmet.pics
sadmet.shop
sadmet.site
sadmet.skin
sadmet.space
sadmet.store
sadmet.website
sadnet.shop
sadnet.site
sadnet.website
sadoat.club
sadout.biz
sadout.click
sadout.club
sadraat.com
sadraes.com
sadraet.org
sadraot.tech
sadrara.com
sadras.buzz
sadras.club
sadrat.org
sadraz.co
sadres.club
sadres.sbs
sadret.com
sadret.org
sadreta.com
sadrez.buzz
sadrez.club
sadrez.sbs
sadrio.website
sadrot.com
sadroz.buzz
sadroz.click
sadroz.club
sadrut.org
sadruz.buzz
sadruz.click
sadruz.club
sadruz.one
sadrxt.eu
sadsaeat.tech
sadsaert.com
sadsar.tech
sadsares.com
sadsat.buzz
sadsat.tech
sadsep.beauty
sadsep.click
sadsep.monster
sadsep.pics
sadsep.shop
sadsep.site
sadsep.skin
sadsep.space
sadsep.store
sadsep.website
sadsera.com
sadset.buzz
sadset.com
sadsin.biz
sadsin.click
sadsin.club
sadsin.tech
sadsina.shop
sadsit.shop
sadsit.tech
sadsode.org
sadsodi.shop
sadsods.tech
sadsot.buzz
sadsot.com
sadsoz.buzz
sadsoz.club
sadsoz.sbs
sadwsad.tech
saferatswa.com
sedat.buzz
sederat.com
sedet.buzz
sedirats.buzz
sedirats.club
sedit.buzz
sedot.buzz
sedtras.com
sedtrawes.com
sefidwa.biz
sefidwa.club
sefidwa.store
sodar.buzz
soder.buzz
sodir.buzz
sodor.buzz
wapp1.click
wapp2.click
webpagea.click
wwwsec-wir.online
wwwsec-wir.sbs

# Reference: https://www.virustotal.com/gui/ip-address/186.2.175.25/relations

cloudsad.click
dlsad.club
loginsad1.click
loginsad2.click
loginsad3.click
myket.buzz
myket.pics
sadeet.buzz
sadeet.co
sadelat.online
sadelat.shop
sadelat.site
sadelat.tech
sadelat.website
saderas.buzz
saderas.club
saderas.site
saderas.website
saderata.buzz
saderata.club
saderata.fun
saderata.monster
saderata.pics
saderaws.store
saderaz.online
saderaz.shop
saderaz.site
saderaz.website
sadert.buzz
sadert.club
sadert.monster
sadert.top
sadmad.fun
sadmad.shop
sadmad.site
sadmad.tech
sadmad.website
sadrez.co
sadros.buzz
sadros.co
sadros.lat
sadros.pics
sadrot.co
sadroz.co
sadsel.buzz
sadsel.club
sadsen.buzz
sadsen.club
sadsera.online
sadsera.pro
sadsera.site
sadsera.store
sadsoz.co
sadtar.buzz
sadtar.club
sadtar.site
sadtar.store
sadtar.website
sapaya.co
sedsat.fun
sedsat.shop
sedsat.site
sedsat.tech
sibapp.buzz
sibapp.site
webs1.click
websa1.click
yoko.finance
yoko.limited
yoko.ltd
yoko.team

# Reference: https://threatfox.abuse.ch/browse/malware/apk.irata/ (# 2023-12-03)

194.26.229.219:9191
bza.fartit.com
cds.fartit.com
chm.fartit.com
cse.fartit.com
do.wtsserv.com
e-b-d.fartit.com
e-h-r-a-z-13.trickip.org
e-h-r-a-z-14.trickip.org
eda.fartit.com
edd.fartit.com
edd.trickip.net
edh.fartit.com
edla.fartit.com
edli.fartit.com
edr.fartit.com
eds.dumb1.com
iranme.nitrocp.xyz
koroshishere.site
mamutert.com
pl.mamutert.com
saa.fartit.com
sad.fartit.com
sae.fartit.com
saha.fartit.com
sahamedalati.fartit.com
sahamedalatir.fartit.com
sahamedalatirr.fartit.com
sahamedalato.ftp1.biz
sahe.fartit.com
sahw.fartit.com
sca.fartit.com
sch.fartit.com
scw.fartit.com
sdl.fartit.com
sdn.fartit.com
sea.dns05.com
sed.fartit.com
sha.fartit.com
shaa.fartit.com
sham.fartit.com
shamedalatirs.dnset.com
she.fartit.com
shm.jetos.com
shm.onmypc.us
shv.fartit.com
ssb.onmypc.us
ssd.fartit.com
ssh.fartit.com
ssn.dumb1.com
swh.fartit.com
wtsserv.com

# Reference: https://www.virustotal.com/gui/ip-address/198.12.88.142/relations

darklight.website
endapi.website
website.darklight.website
endapi.website.darklight.website

# Reference: https://www.virustotal.com/gui/ip-address/37.221.115.43/relations

artssia.site
bxaqei1.com
ebaialm.com
ebualo1.com
eiaoxa.com
ewisos1.com
fastsaham.org
mxjdp.site
recbmai.ir
zhxisw.site

# Reference: https://www.virustotal.com/gui/ip-address/188.40.172.145/relations

dlebal.ir
ebialb.ir
edalaata.xyz
egsus.cfd
hmrh-bsi-ir.com
hmrhsadrt.fun
recsaham.site
sahama.website
sahmeda.site
sajdtk.fun
sbamal.shop
sehem.ir
shaiama.sbs
shamail.online
sheamus.cfd
sitsahm.site
sjamaia.site
sjkyshaam.cfd
skysaham.site
sodesham.ir
varizsaham.com
sahamerag45.ddns.net
sehham.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/186.2.171.97/relations
# Reference: https://www.virustotal.com/gui/file/ff50598310a7323985fa2372d91e396bc2cc9738bda25b4d599ba7d731b498a4/detection
# Reference: https://www.virustotal.com/gui/file/d9b92a5a90d426579d184e01f6975bb9d247d095c6bf61298391d62eeee27ef0/detection
# Reference: https://www.virustotal.com/gui/file/3f7bfb5782b6094f59cbc616013880723b678ffef162edd2e7b86b7569641579/detection
# Reference: https://www.virustotal.com/gui/file/29fdd9a2ab43410a29c8b6b932612c0e1c0ea0101cc7a9f9796d8946fa5b80ae/detection
# Reference: https://www.virustotal.com/gui/file/0c27b034abfcb0f84a0ad115d17c9413031f796d9b68bb507a22566ede75f989/detection

10weblogin.buzz
10weblogin.hair
10weblogin.lol
10weblogin.skin
10weblogin.top
11weblogin.hair
11weblogin.lol
11weblogin.skin
11weblogin.top
12weblogin.hair
12weblogin.lol
12weblogin.skin
12weblogin.top
13weblogin.hair
13weblogin.lol
13weblogin.skin
13weblogin.top
14weblogin.hair
14weblogin.lol
14weblogin.skin
14weblogin.top
1perfeman.buzz
1xbetgo.sbs
1xbetlive.sbs
1xbetnow.sbs
1xbetsite.sbs
1xbetweb.sbs
2perfeman.buzz
3perfeman.buzz
3weblogin.buzz
3weblogin.hair
3weblogin.lol
3weblogin.skin
3weblogin.top
4perfeman.buzz
4weblogin.buzz
4weblogin.hair
4weblogin.lol
4weblogin.skin
4weblogin.top
5perfeman.buzz
5weblogin.buzz
5weblogin.hair
5weblogin.lol
5weblogin.skin
5weblogin.top
6weblogin.hair
6weblogin.lol
6weblogin.skin
6weblogin.top
7weblogin.buzz
7weblogin.hair
7weblogin.lol
7weblogin.skin
7weblogin.top
8weblogin.hair
8weblogin.lol
8weblogin.skin
8weblogin.top
9weblogin.hair
9weblogin.lol
9weblogin.skin
9weblogin.top
baamapp.buzz
baamdl.buzz
baamlogin.buzz
baamsite.buzz
baamweb.buzz
babanoel.christmas
bamapp.cfd
bamapp.sbs
bamdl.cfd
bamdl.sbs
bamfit.cfd
bamgate.cfd
bamgate.sbs
bamlog.cfd
bamlogin.sbs
bamlow.cfd
bammy.sbs
bamnow.cfd
bamnow.sbs
bampay.cfd
bampic.buzz
bamport.cfd
bamport.sbs
bamshop.cfd
bamshow.cfd
bamsite.cfd
bamsite.sbs
bamtel.cfd
bamweb.cfd
bamweb.sbs
bamwell.cfd
bamyou.sbs
best10play.buzz
coinwallet.buzz
helloworldstest.shop
mellateban.sbs
mellatlogin.sbs
mellatnow.sbs
mellatsite.sbs
mellatweb.sbs
mywallet.hair
mywallet.lol
mywallet.mom
mywallet.pics
mywallet.skin
newweb.autos
newweb.buzz
newweb.hair
newweb.lol
newweb.mom
newweb.sbs
newweb.skin
newweblogin.top
onlinegame.buzz
parsian-i.autos
parsian-i.beauty
parsian-i.buzz
parsian-i.click
parsian-i.hair
parsian-i.lol
parsian-i.sbs
parsian-i.skin
parsian-i.top
perefiomelony.autos
perefiomelony.buzz
perefiomelony.hair
perefiomelony.homes
perefiomelony.lol
perefiomelony.mom
perefiomelony.monster
perefiomelony.one
perefiomelony.sbs
perefiomelony.top
perofecolony.buzz
perofecolony.lol
perofecolony.pics
perofecolony.top
perofecolony.xyz
rat-bam.buzz
sad-rthmrha.site
saderapp.sbs
saderat-a.icu
saderatbabe.buzz
saderatbest.buzz
saderatgate.buzz
saderatguard.buzz
saderatmake.buzz
saderatme.buzz
saderatmy.buzz
saderatport.buzz
saderatsafe.buzz
saderaty.buzz
saderatyou.buzz
saderdl.sbs
sadergate.sbs
saderlogin.sbs
sadermy.sbs
sadernow.sbs
saderport.sbs
sadersite.sbs
sadert-1.click
saderweb.sbs
saderyou.sbs
sadresti.click
sadrthmrha.me
sadrthmrha.site
sadrthmrha.space

# Reference: https://www.virustotal.com/gui/ip-address/193.3.19.233/relations
# Reference: https://www.virustotal.com/gui/file/5818d21ab747f326b398d6ea3734a6392a01393d75fe8c582ccfa260927f50c5/detection

hisina.click

# Reference: https://twitter.com/malwrhunterteam/status/1735645210099535975

eblsosan.org
wwqa.eblsosan.org

# Reference: https://twitter.com/0x3A44/status/1747743383924125862

01web.click
donlodappewallet.click
rat-saderat.click
rat-sdarert.buzz
rate-sdrt.click
saderatbama.lat
saderatbama.skin
sadrtds.shop
sdrft.monster
websad1.click
websad2.click
websad4.click

# Reference: https://www.virustotal.com/gui/ip-address/186.2.175.23/relations

deltagconstructionservices.com
esada.site
esado.online
etisalet.site
kashvrzia.org
keshevrzi.org
keshvarzio.org
keshvarzisa.org
keshvrzi.com
keshvrzia.org
keshvrzie.shop
keshvrzio.site
madsad.site
perfceto.cloud
prfectmonya.site
prfectomoneyito.site
sadapa.com
sadape.org
sadapi.online
sadapo.shop
sadasrs.com
saderashpro.com
saderat.net
saderatam.cloud
saderatmedia.com
sadeta.tech
sadete.online
sadeto.cloud
sadetsad.com
sadmehr.site
sadrasa.site
sadrase.online
sadraso.blog
sadrastas.tech
sadraste.tech
sadrastw.com
sadratse.com
sadraza.site
sadraze.cloud
sadrazi.website
sadrazo.online
sadresa.com
sadrese.org
sadreso.tech
sadretsa.org
sadretse.tech
sadretso.com
sadroa.com
sadroe.org
sadrooz.cloud
sadrota.com
sadrote.org
sadroto.tech
sadrt.blog
sadrta.cloud
sadrte.online
sadsrats.org
sadzore.online
sadzoro.cloud
sdreta.site
sdrete.tech
sdreto.online
sdrta.site
sdrte.website
sedorta.com
sedorte.org
sedorto.shop
serata.site
serate.cloud
sodareta.site
sodarete.fun
sodareto.website
ns1.etisalet.site
ns1.kashvrzia.org
ns1.keshevrzi.org
ns1.keshvarzio.org
ns1.keshvarzisa.org
ns1.keshvrzi.com
ns1.keshvrzia.org
ns1.keshvrzie.shop
ns1.keshvrzio.site
ns1.madsad.site
ns1.perfceto.cloud
ns1.prfectmonya.site
ns1.prfectomoneyito.site
ns1.sadape.org
ns1.sadapi.online
ns1.sadapo.shop
ns1.sadasrs.com
ns1.saderashpro.com
ns1.saderatam.cloud
ns1.saderatmedia.com
ns1.sadeta.tech
ns1.sadete.online
ns1.sadeto.cloud
ns1.sadetsad.com
ns1.sadmehr.site
ns1.sadrase.online
ns1.sadraso.blog
ns1.sadrastas.tech
ns1.sadraste.tech
ns1.sadrastw.com
ns1.sadratse.com
ns1.sadrazi.website
ns1.sadrazo.online
ns1.sadrese.org
ns1.sadreso.tech
ns1.sadretsa.org
ns1.sadretse.tech
ns1.sadretso.com
ns1.sadroa.com
ns1.sadroe.org
ns1.sadrooz.cloud
ns1.sadrota.com
ns1.sadroto.tech
ns1.sadrt.blog
ns1.sadrta.cloud
ns1.sadrte.online
ns1.sadrxt.eu
ns1.sadsrats.org
ns1.sdrete.tech
ns1.sdrta.site
ns1.sdrte.website
ns1.sedorta.com
ns1.sedorte.org
ns1.sedorto.shop
ns1.serata.site
ns1.serate.cloud
ns1.sodareta.site
ns1.sodarete.fun
ns1.sodareto.website
ns2.deltagconstructionservices.com
ns2.etisalet.site
ns2.kashvrzia.org
ns2.keshevrzi.org
ns2.keshvarzio.org
ns2.keshvarzisa.org
ns2.keshvrzi.com
ns2.keshvrzia.org
ns2.keshvrzie.shop
ns2.keshvrzio.site
ns2.madsad.site
ns2.perfceto.cloud
ns2.prfectmonya.site
ns2.prfectomoneyito.site
ns2.sadape.org
ns2.sadapi.online
ns2.sadapo.shop
ns2.sadasrs.com
ns2.saderashpro.com
ns2.saderatam.cloud
ns2.saderatmedia.com
ns2.sadeta.tech
ns2.sadete.online
ns2.sadeto.cloud
ns2.sadetsad.com
ns2.sadmehr.site
ns2.sadrasa.site
ns2.sadrase.online
ns2.sadraso.blog
ns2.sadrastas.tech
ns2.sadraste.tech
ns2.sadrastw.com
ns2.sadratse.com
ns2.sadraza.site
ns2.sadrazi.website
ns2.sadresa.com
ns2.sadrese.org
ns2.sadreso.tech
ns2.sadretsa.org
ns2.sadretse.tech
ns2.sadretso.com
ns2.sadroa.com
ns2.sadroe.org
ns2.sadrooz.cloud
ns2.sadrote.org
ns2.sadroto.tech
ns2.sadrta.cloud
ns2.sadrte.online
ns2.sadrxt.eu
ns2.sadsrats.org
ns2.sadzore.online
ns2.sadzoro.cloud
ns2.sdreta.site
ns2.sdrete.tech
ns2.sdreto.online
ns2.sdrta.site
ns2.sdrte.website
ns2.sedorta.com
ns2.sedorte.org
ns2.sedorto.shop
ns2.serata.site
ns2.serate.cloud
ns2.sodareta.site
ns2.sodarete.fun
ns2.sodareto.website

# Reference: https://app.validin.com/axon?source=DNS&type=ip&find=135.181.145.91

bankmeli-ir.com
bankmeli.servehalflife.com
bankmeli.servepics.com
saderat.serveirc.com

# Reference: https://app.validin.com/axon?source=DNS&type=ip&find=186.18.52.91

sarasa.fortiddns.com

# Reference: https://www.virustotal.com/gui/ip-address/72.10.169.51/relations

sadra-emc.ir
sadra.fun
blue314.sadra.fun

# Reference: https://cert-agid.gov.it/wp-content/uploads/2024/01/irata_30-01-2024.json

acceso-clientes.cc
aggiornamento2022.net
app-nueva.cc
aviso-clientes.com
avviso-clienti.com
bizum-datos.online
datos-cliente.com
inserisci-qui.com

# APK

/%D9%87%D9%85%D8%AA%D8%A7%20.apk
/abp-sana.apk
/abiagh.apk
/adliran-eblagh.apk
/dadsara.apk
/divar.apk
/eblagh-adliran.apk
/eblagh.apk
/eblaghie.apk
/Edalat.ir.apk
/edalat.apk
/EdalatHamrah7.2.apk
/hamrahedalat.apk
/isnaeblagh-sana.apk
/mellat.apk
/MellatBank.apk
/Sader.apk
/Saderat.apk
/saham.apk
/saham1.apk
/saham-edalat.apk
/saham1401.apk
/sahamedalat.apk
/sahamse.apk
/sana.apk
/sepah.apk
/shad.apk
/sham.apk
/shekayat.apk"
/sighe.apk
/sigheyabi.apk
/ssmmss.apk
